./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor257849532 <...> Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. execve("./syz-executor257849532", ["./syz-executor257849532"], 0x7ffc0ff66930 /* 10 vars */) = 0 brk(NULL) = 0x55555697d000 brk(0x55555697dd40) = 0x55555697dd40 arch_prctl(ARCH_SET_FS, 0x55555697d3c0) = 0 set_tid_address(0x55555697d690) = 291 set_robust_list(0x55555697d6a0, 24) = 0 rseq(0x55555697dce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor257849532", 4096) = 27 getrandom("\xe9\x7c\xd8\x81\xda\x6b\xcc\xf7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555697dd40 brk(0x55555699ed40) = 0x55555699ed40 brk(0x55555699f000) = 0x55555699f000 mprotect(0x7f517cc93000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 292 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 293 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 294 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 295 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 296 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 297 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x55555697d6a0, 24) = 0 [pid 293] unshare(CLONE_NEWPID) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 298 ./strace-static-x86_64: Process 292 attached [pid 292] set_robust_list(0x55555697d6a0, 24) = 0 [pid 292] unshare(CLONE_NEWPID) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 299 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x55555697d6a0, 24) = 0 [pid 298] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setsid() = 1 [pid 298] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 298] unshare(CLONE_NEWNS) = 0 [pid 298] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 298] unshare(CLONE_NEWCGROUP) = 0 [pid 298] unshare(CLONE_NEWUTS) = 0 [pid 298] unshare(CLONE_SYSVSEM) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x55555697d6a0, 24 [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... set_robust_list resumed>) = 0 [pid 299] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setsid() = 1 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 299] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... prlimit64 resumed>NULL) = 0 [pid 299] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 299] <... prlimit64 resumed>NULL) = 0 [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 299] unshare(CLONE_NEWNS) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] getpid() = 1 [pid 298] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 299] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 299] unshare(CLONE_NEWCGROUP) = 0 [pid 299] unshare(CLONE_NEWUTS) = 0 [pid 299] unshare(CLONE_SYSVSEM) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] getpid() = 1 [pid 299] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 295] set_robust_list(0x55555697d6a0, 24 [pid 294] set_robust_list(0x55555697d6a0, 24 [pid 296] set_robust_list(0x55555697d6a0, 24 [pid 297] set_robust_list(0x55555697d6a0, 24 [pid 295] <... set_robust_list resumed>) = 0 [pid 294] <... set_robust_list resumed>) = 0 [pid 296] <... set_robust_list resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 295] unshare(CLONE_NEWPID [pid 296] unshare(CLONE_NEWPID [pid 294] unshare(CLONE_NEWPID [pid 297] unshare(CLONE_NEWPID [pid 296] <... unshare resumed>) = 0 [pid 295] <... unshare resumed>) = 0 [pid 294] <... unshare resumed>) = 0 [pid 297] <... unshare resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 303 [pid 296] <... clone resumed>, child_tidptr=0x55555697d690) = 301 [pid 295] <... clone resumed>, child_tidptr=0x55555697d690) = 300 [pid 294] <... clone resumed>, child_tidptr=0x55555697d690) = 302 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55555697d6a0, 24) = 0 [pid 301] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x55555697d6a0, 24 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... set_robust_list resumed>) = 0 [pid 301] <... prctl resumed>) = 0 [pid 303] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 301] setsid() = 1 [pid 301] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 301] unshare(CLONE_NEWNS) = 0 [pid 303] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setsid() = 1 [pid 303] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 301] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 303] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 301] <... mount resumed>) = 0 [pid 303] <... prlimit64 resumed>NULL) = 0 [pid 303] unshare(CLONE_NEWNS) = 0 [pid 301] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 301] unshare(CLONE_NEWCGROUP) = 0 [pid 301] unshare(CLONE_NEWUTS) = 0 [pid 301] unshare(CLONE_SYSVSEM) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] unshare(CLONE_NEWIPC [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 303] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] unshare(CLONE_NEWCGROUP) = 0 [pid 303] unshare(CLONE_NEWUTS) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 303] unshare(CLONE_SYSVSEM [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... unshare resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] getpid() = 1 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 301] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... capget resumed>{effective=1< [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] getpid() = 1 [pid 303] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] set_robust_list(0x55555697d6a0, 24 [pid 300] set_robust_list(0x55555697d6a0, 24) = 0 [pid 302] <... set_robust_list resumed>) = 0 [pid 300] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 302] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 300] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 302] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... prctl resumed>) = 0 [pid 302] <... prctl resumed>) = 0 [pid 300] setsid( [pid 302] setsid( [pid 300] <... setsid resumed>) = 1 [pid 302] <... setsid resumed>) = 1 [pid 300] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 302] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 302] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 302] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 302] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 302] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 302] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] unshare(CLONE_NEWNS [pid 302] unshare(CLONE_NEWNS [pid 300] <... unshare resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 300] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 302] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 300] <... mount resumed>) = 0 [pid 302] <... mount resumed>) = 0 [pid 300] unshare(CLONE_NEWIPC [pid 302] unshare(CLONE_NEWIPC [pid 300] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 300] unshare(CLONE_NEWCGROUP [pid 302] unshare(CLONE_NEWCGROUP [pid 300] <... unshare resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 300] unshare(CLONE_NEWUTS [pid 302] unshare(CLONE_NEWUTS [pid 300] <... unshare resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 300] unshare(CLONE_SYSVSEM [pid 302] unshare(CLONE_SYSVSEM [pid 300] <... unshare resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 298] <... unshare resumed>) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] getpid( [pid 302] getpid( [pid 300] <... getpid resumed>) = 1 [pid 302] <... getpid resumed>) = 1 [pid 300] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 302] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 300] <... capget resumed>{effective=1<{effective=1< [pid 302] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 300] <... capset resumed>) = 0 [pid 302] <... capset resumed>) = 0 [pid 300] unshare(CLONE_NEWNET [pid 302] unshare(CLONE_NEWNET [pid 299] <... unshare resumed>) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 301] <... unshare resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 298] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 299] write(3, "0 65535", 7 [pid 298] write(3, "0 65535", 7 [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 299] <... write resumed>) = 7 [pid 298] <... write resumed>) = 7 [pid 301] <... openat resumed>) = 3 [pid 299] close(3 [pid 298] close(3 [pid 299] <... close resumed>) = 0 [pid 301] write(3, "0 65535", 7 [pid 298] <... close resumed>) = 0 [pid 301] <... write resumed>) = 7 [pid 299] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 298] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 301] close(3 [pid 299] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 303] <... unshare resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 299] dup2(3, 200 [pid 298] dup2(3, 200 [pid 301] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 299] <... dup2 resumed>) = 200 [pid 298] <... dup2 resumed>) = 200 [pid 301] <... openat resumed>) = 3 [pid 299] close(3 [pid 298] close(3 [pid 301] dup2(3, 200 [pid 299] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 301] <... dup2 resumed>) = 200 [pid 299] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 298] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 301] close(3 [pid 303] <... openat resumed>) = 3 [pid 303] write(3, "0 65535", 7) = 7 [pid 303] close(3) = 0 [pid 303] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 303] dup2(3, 200) = 200 [pid 303] close(3) = 0 [pid 303] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 301] <... close resumed>) = 0 [pid 299] <... ioctl resumed>) = 0 [pid 301] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "0", 1) = 1 [pid 299] close(3) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "0", 1) = 1 [pid 299] close(3) = 0 [pid 299] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 299] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 299] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 299] close(4) = 0 [ 21.181441][ T30] audit: type=1400 audit(1696112454.571:70): avc: denied { mounton } for pid=298 comm="syz-executor257" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 299] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... ioctl resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 301] <... ioctl resumed>) = 0 [pid 300] <... unshare resumed>) = 0 [pid 298] <... ioctl resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 298] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 303] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 303] write(3, "0", 1 [pid 301] write(3, "0", 1 [pid 298] write(3, "0", 1 [pid 303] <... write resumed>) = 1 [pid 301] <... write resumed>) = 1 [pid 298] <... write resumed>) = 1 [pid 303] close(3 [pid 301] close(3 [pid 298] close(3 [pid 303] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 298] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 303] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 303] write(3, "0", 1 [pid 301] write(3, "0", 1 [pid 298] write(3, "0", 1 [pid 303] <... write resumed>) = 1 [pid 301] <... write resumed>) = 1 [pid 298] <... write resumed>) = 1 [pid 303] close(3 [pid 301] close(3 [pid 298] close(3 [pid 303] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 303] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 301] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 298] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 303] <... socket resumed>) = 3 [pid 301] <... socket resumed>) = 3 [pid 298] <... socket resumed>) = 3 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 301] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 298] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... socket resumed>) = 4 [pid 301] <... socket resumed>) = 4 [pid 298] <... socket resumed>) = 4 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 301] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 298] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 301] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 298] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] close(4 [pid 301] close(4 [pid 298] close(4 [pid 303] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 303] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 301] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 298] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... sendto resumed>) = 40 [pid 302] <... openat resumed>) = 3 [pid 301] <... sendto resumed>) = 40 [pid 300] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 298] <... sendto resumed>) = 40 [pid 303] recvfrom(3, [pid 302] write(3, "0 65535", 7 [pid 301] recvfrom(3, [pid 300] <... openat resumed>) = 3 [pid 298] recvfrom(3, [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... write resumed>) = 7 [pid 301] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] write(3, "0 65535", 7 [pid 298] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 302] close(3 [pid 301] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... write resumed>) = 7 [pid 298] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... socket resumed>) = 4 [pid 302] <... close resumed>) = 0 [pid 301] <... socket resumed>) = 4 [pid 300] close(3 [pid 298] <... socket resumed>) = 4 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 302] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 301] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... close resumed>) = 0 [pid 298] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 302] <... openat resumed>) = 3 [pid 301] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 298] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] close(4 [pid 302] dup2(3, 200 [pid 301] close(4 [pid 300] <... openat resumed>) = 3 [pid 298] close(4 [pid 303] <... close resumed>) = 0 [pid 302] <... dup2 resumed>) = 200 [pid 301] <... close resumed>) = 0 [pid 300] dup2(3, 200 [pid 298] <... close resumed>) = 0 [pid 303] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] close(3 [pid 301] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... dup2 resumed>) = 200 [pid 298] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... sendto resumed>) = 64 [pid 302] <... close resumed>) = 0 [pid 301] <... sendto resumed>) = 64 [pid 300] close(3 [pid 299] <... sendto resumed>) = 40 [pid 298] <... sendto resumed>) = 64 [pid 303] recvfrom(3, [pid 302] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 301] recvfrom(3, [pid 300] <... close resumed>) = 0 [pid 298] recvfrom(3, [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... ioctl resumed>) = 0 [pid 301] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] ioctl(200, TUNSETIFF, 0x7ffdf983d4a0 [pid 298] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 301] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... ioctl resumed>) = 0 [pid 298] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... socket resumed>) = 4 [pid 302] <... openat resumed>) = 3 [pid 301] <... socket resumed>) = 4 [pid 300] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 298] <... socket resumed>) = 4 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 302] write(3, "0", 1 [pid 301] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... openat resumed>) = 3 [pid 298] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 302] <... write resumed>) = 1 [pid 301] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] write(3, "0", 1 [pid 298] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] close(4 [pid 302] close(3 [pid 301] close(4 [pid 300] <... write resumed>) = 1 [pid 298] close(4 [pid 303] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 300] close(3 [pid 298] <... close resumed>) = 0 [pid 303] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 301] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... close resumed>) = 0 [pid 298] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... sendto resumed>) = 48 [pid 302] <... openat resumed>) = 3 [pid 301] <... sendto resumed>) = 48 [pid 300] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 298] <... sendto resumed>) = 48 [pid 303] recvfrom(3, [pid 302] write(3, "0", 1 [pid 301] recvfrom(3, [pid 300] <... openat resumed>) = 3 [pid 298] recvfrom(3, [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... write resumed>) = 1 [pid 301] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] write(3, "0", 1 [pid 298] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 302] close(3 [pid 301] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... write resumed>) = 1 [pid 298] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... socket resumed>) = 4 [pid 302] <... close resumed>) = 0 [pid 301] <... socket resumed>) = 4 [pid 300] close(3 [pid 298] <... socket resumed>) = 4 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 302] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 301] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... close resumed>) = 0 [pid 298] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 302] <... socket resumed>) = 3 [pid 301] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 298] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] close(4 [pid 302] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 301] close(4 [pid 300] <... socket resumed>) = 3 [pid 298] close(4 [pid 303] <... close resumed>) = 0 [pid 302] <... socket resumed>) = 4 [pid 301] <... close resumed>) = 0 [pid 300] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 298] <... close resumed>) = 0 [pid 303] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 301] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... socket resumed>) = 4 [pid 298] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... sendto resumed>) = 60 [pid 302] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 301] <... sendto resumed>) = 60 [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 298] <... sendto resumed>) = 60 [pid 303] recvfrom(3, [pid 302] close(4 [pid 301] recvfrom(3, [pid 300] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 298] recvfrom(3, [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... close resumed>) = 0 [pid 301] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] close(4 [pid 298] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 302] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 301] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... close resumed>) = 0 [pid 298] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... socket resumed>) = 4 [pid 302] <... sendto resumed>) = 40 [pid 301] <... socket resumed>) = 4 [pid 300] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 298] <... socket resumed>) = 4 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 302] recvfrom(3, [pid 301] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... sendto resumed>) = 40 [pid 298] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 302] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 301] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] recvfrom(3, [pid 298] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] close(4 [pid 302] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 301] close(4 [pid 300] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 298] close(4 [pid 303] <... close resumed>) = 0 [pid 302] <... socket resumed>) = 4 [pid 301] <... close resumed>) = 0 [pid 300] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 298] <... close resumed>) = 0 [pid 303] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 301] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... socket resumed>) = 4 [ 21.246607][ T30] audit: type=1400 audit(1696112454.671:71): avc: denied { create } for pid=288 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 21.269785][ T30] audit: type=1400 audit(1696112454.691:72): avc: denied { write } for pid=288 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [pid 298] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] <... sendto resumed>) = 44 [pid 302] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 301] <... sendto resumed>) = 44 [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 299] recvfrom(3, [pid 298] <... sendto resumed>) = 44 [pid 303] recvfrom(3, [pid 302] close(4 [pid 301] recvfrom(3, [pid 300] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 298] recvfrom(3, [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... close resumed>) = 0 [pid 301] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] close(4 [pid 298] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] close(3 [pid 302] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 301] close(3 [pid 300] <... close resumed>) = 0 [pid 298] close(3 [pid 303] <... close resumed>) = 0 [pid 302] <... sendto resumed>) = 64 [pid 301] <... close resumed>) = 0 [pid 300] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 298] <... close resumed>) = 0 [pid 303] mkdir("/dev/binderfs", 0777 [pid 302] recvfrom(3, [pid 301] mkdir("/dev/binderfs", 0777 [pid 300] <... sendto resumed>) = 64 [pid 298] mkdir("/dev/binderfs", 0777 [pid 303] <... mkdir resumed>) = 0 [pid 302] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 300] recvfrom(3, [pid 298] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 302] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 301] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 300] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 298] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 303] <... mount resumed>) = 0 [pid 302] <... socket resumed>) = 4 [pid 301] <... mount resumed>) = 0 [pid 300] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 298] <... mount resumed>) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs" [pid 302] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 301] symlink("/dev/binderfs", "./binderfs" [pid 300] <... socket resumed>) = 4 [pid 298] symlink("/dev/binderfs", "./binderfs" [pid 303] <... symlink resumed>) = 0 [pid 302] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 301] <... symlink resumed>) = -1 EEXIST (File exists) [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 298] <... symlink resumed>) = -1 EEXIST (File exists) [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] close(4 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... close resumed>) = 0 [pid 300] close(4 [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 2 [pid 302] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 301] <... clone resumed>, child_tidptr=0x55555697d690) = 2 [pid 300] <... close resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55555697d690) = 2 [pid 302] <... sendto resumed>) = 48 [pid 300] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 302] recvfrom(3, [pid 300] <... sendto resumed>) = 48 [pid 302] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] recvfrom(3, [pid 302] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 302] <... socket resumed>) = 4 [pid 300] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 302] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... socket resumed>) = 4 [pid 302] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 302] close(4 [pid 300] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 302] <... close resumed>) = 0 [pid 300] close(4 [pid 302] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... close resumed>) = 0 [pid 302] <... sendto resumed>) = 60 [pid 300] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12./strace-static-x86_64: Process 306 attached [pid 302] recvfrom(3, [pid 300] <... sendto resumed>) = 60 [pid 306] set_robust_list(0x55555697d6a0, 24 [pid 302] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] recvfrom(3, [pid 306] <... set_robust_list resumed>) = 0 [pid 302] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 300] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 ./strace-static-x86_64: Process 304 attached [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] <... socket resumed>) = 4 [pid 300] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] <... prctl resumed>) = 0 [pid 304] set_robust_list(0x55555697d6a0, 24 [pid 302] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 300] <... socket resumed>) = 4 [pid 306] setpgid(0, 0 [pid 304] <... set_robust_list resumed>) = 0 [pid 302] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] <... setpgid resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] close(4 [pid 300] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... prctl resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 300] close(4 [pid 306] <... openat resumed>) = 3 [pid 304] setpgid(0, 0 [pid 302] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 300] <... close resumed>) = 0 [pid 306] write(3, "1000", 4 [pid 304] <... setpgid resumed>) = 0 [pid 302] <... sendto resumed>) = 44 [pid 300] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] <... write resumed>) = 4 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] recvfrom(3, [pid 300] <... sendto resumed>) = 44 [pid 306] close(3 [pid 304] <... openat resumed>) = 3 [pid 302] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 300] recvfrom(3, [pid 306] <... close resumed>) = 0 [pid 304] write(3, "1000", 4 [pid 302] close(3 [pid 300] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 299] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 ./strace-static-x86_64: Process 305 attached [pid 306] read(200, [pid 304] <... write resumed>) = 4 [pid 302] <... close resumed>) = 0 [pid 300] close(3 [pid 306] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] close(3 [pid 302] mkdir("/dev/binderfs", 0777 [pid 300] <... close resumed>) = 0 [pid 306] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... close resumed>) = 0 [pid 302] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 300] mkdir("/dev/binderfs", 0777 [pid 306] <... futex resumed>) = 0 [pid 304] read(200, [pid 302] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 300] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 304] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... mount resumed>) = 0 [pid 300] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 306] <... rt_sigaction resumed>NULL, 8) = 0 [pid 304] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] symlink("/dev/binderfs", "./binderfs" [pid 300] <... mount resumed>) = 0 [pid 306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 304] <... futex resumed>) = 0 [pid 302] <... symlink resumed>) = -1 EEXIST (File exists) [pid 300] symlink("/dev/binderfs", "./binderfs" [pid 306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... symlink resumed>) = -1 EEXIST (File exists) [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 304] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... mmap resumed>) = 0x7f517cbaf000 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 2 [pid 306] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 2 [pid 306] <... mprotect resumed>) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [pid 304] <... mmap resumed>) = 0x7f517cbaf000 [pid 306] <... rt_sigprocmask resumed>[], 8) = 0 [pid 304] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 304] <... mprotect resumed>) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 306] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 306] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 306] <... futex resumed>) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 306] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR./strace-static-x86_64: Process 307 attached ) = 3 [pid 307] set_robust_list(0x55555697d6a0, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] write(3, "67", 2) = 2 [pid 309] clone(child_stack=NULL, flags=0 [pid 307] <... prctl resumed>) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 21.291015][ T30] audit: type=1400 audit(1696112454.691:73): avc: denied { nlmsg_read } for pid=288 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 21.313269][ T30] audit: type=1400 audit(1696112454.691:74): avc: denied { module_request } for pid=288 comm="strace-static-x" kmod="net-pf-16-proto-4-type-16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.324764][ T309] FAULT_INJECTION: forcing a failure. ./strace-static-x86_64: Process 310 attached ./strace-static-x86_64: Process 308 attached [pid 305] set_robust_list(0x55555697d6a0, 24 [pid 299] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 307] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 307] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[3]}, 88) = 3 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 311 attached [pid 310] set_robust_list(0x7f517cbcf9a0, 24 [pid 308] set_robust_list(0x55555697d6a0, 24 [pid 305] <... set_robust_list resumed>) = 0 [pid 299] <... socket resumed>) = 4 [pid 311] set_robust_list(0x7f517cbcf9a0, 24 [pid 310] <... set_robust_list resumed>) = 0 [pid 308] <... set_robust_list resumed>) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 311] <... set_robust_list resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... prctl resumed>) = 0 [pid 299] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 308] <... prctl resumed>) = 0 [pid 305] setpgid(0, 0 [pid 299] close(4 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 308] setpgid(0, 0 [pid 305] <... setpgid resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 311] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 308] <... setpgid resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 311] <... openat resumed>) = 3 [pid 310] write(3, "67", 2 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = 3 [pid 299] <... sendto resumed>) = 64 [pid 311] write(3, "67", 2 [pid 310] <... write resumed>) = 2 [pid 308] <... openat resumed>) = 3 [pid 305] write(3, "1000", 4 [pid 299] recvfrom(3, [pid 311] <... write resumed>) = 2 [pid 310] clone(child_stack=NULL, flags=0 [pid 308] write(3, "1000", 4 [pid 305] <... write resumed>) = 4 [pid 299] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 21.324764][ T309] name failslab, interval 1, probability 0, space 0, times 1 [ 21.336999][ T30] audit: type=1400 audit(1696112454.691:75): avc: denied { read } for pid=288 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 21.351859][ T309] CPU: 0 PID: 309 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 21.375957][ T310] FAULT_INJECTION: forcing a failure. [ 21.375957][ T310] name failslab, interval 1, probability 0, space 0, times 1 [pid 311] clone(child_stack=NULL, flags=0 [pid 308] <... write resumed>) = 4 [pid 305] close(3 [pid 299] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] close(3 [pid 305] <... close resumed>) = 0 [pid 299] <... socket resumed>) = 4 [pid 308] <... close resumed>) = 0 [pid 305] read(200, [pid 299] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] read(200, [pid 305] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 299] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 305] read(200, [pid 299] close(4 [pid 308] read(200, [pid 305] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... close resumed>) = 0 [pid 308] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 299] <... sendto resumed>) = 48 [pid 308] <... futex resumed>) = 0 [pid 305] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 299] recvfrom(3, [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... rt_sigaction resumed>NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... socket resumed>) = 4 [pid 308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] <... mmap resumed>) = 0x7f517cbaf000 [pid 299] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... mmap resumed>) = 0x7f517cbaf000 [pid 305] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 299] close(4 [pid 308] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 305] <... mprotect resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 308] <... mprotect resumed>) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [pid 305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... sendto resumed>) = 60 [pid 308] <... rt_sigprocmask resumed>[], 8) = 0 [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 299] recvfrom(3, [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 299] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 299] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... socket resumed>) = 4 [pid 308] rt_sigprocmask(SIG_SETMASK, [], [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 299] close(4 [pid 308] <... futex resumed>) = 0 [pid 305] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 308] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 [pid 299] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 299] close(3) = 0 [pid 299] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 299] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 299] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 2 [ 21.378884][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 21.378898][ T309] Call Trace: [ 21.378904][ T309] [ 21.378910][ T309] dump_stack_lvl+0x151/0x1b7 [ 21.392385][ T311] FAULT_INJECTION: forcing a failure. [ 21.392385][ T311] name failslab, interval 1, probability 0, space 0, times 1 [ 21.401212][ T309] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.401246][ T309] dump_stack+0x15/0x17 [ 21.433482][ T309] should_fail+0x3c6/0x510 [ 21.437732][ T309] __should_failslab+0xa4/0xe0 [ 21.442329][ T309] ? anon_vma_fork+0xf7/0x4e0 [ 21.446843][ T309] should_failslab+0x9/0x20 [ 21.451180][ T309] slab_pre_alloc_hook+0x37/0xd0 [ 21.455959][ T309] ? anon_vma_fork+0xf7/0x4e0 [ 21.460468][ T309] kmem_cache_alloc+0x44/0x200 [ 21.465073][ T309] anon_vma_fork+0xf7/0x4e0 [ 21.469410][ T309] ? anon_vma_name+0x43/0x70 [ 21.473833][ T309] ? vm_area_dup+0x17a/0x230 [ 21.478258][ T309] copy_mm+0xa3a/0x13e0 [ 21.482345][ T309] ? copy_signal+0x610/0x610 [ 21.486765][ T309] ? __init_rwsem+0xd6/0x1c0 [ 21.491193][ T309] ? copy_signal+0x4e3/0x610 [ 21.495638][ T309] copy_process+0x12bc/0x3260 [ 21.500139][ T309] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.505081][ T309] ? __kasan_check_write+0x14/0x20 [ 21.510029][ T309] kernel_clone+0x21e/0x9e0 [ 21.514371][ T309] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.519404][ T309] ? create_io_thread+0x1e0/0x1e0 [ 21.524262][ T309] __x64_sys_clone+0x23f/0x290 [ 21.528864][ T309] ? __do_sys_vfork+0x130/0x130 [ 21.533548][ T309] ? __kasan_check_read+0x11/0x20 [ 21.538409][ T309] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 21.544224][ T309] do_syscall_64+0x3d/0xb0 [ 21.548477][ T309] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.554201][ T309] RIP: 0033:0x7f517cc0f399 [ 21.558460][ T309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 21.577898][ T309] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 21.586148][ T309] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 21.593953][ T309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 21.601767][ T309] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 21.609576][ T309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 21.617398][ T309] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 21.625208][ T309] [ 21.629349][ T310] CPU: 1 PID: 310 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 21.639428][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 21.649322][ T310] Call Trace: [ 21.652460][ T310] [ 21.655224][ T310] dump_stack_lvl+0x151/0x1b7 [ 21.659740][ T310] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.665210][ T310] dump_stack+0x15/0x17 [ 21.669200][ T310] should_fail+0x3c6/0x510 [ 21.673447][ T310] __should_failslab+0xa4/0xe0 [ 21.678046][ T310] ? anon_vma_fork+0xf7/0x4e0 [ 21.682561][ T310] should_failslab+0x9/0x20 [ 21.686907][ T310] slab_pre_alloc_hook+0x37/0xd0 [ 21.691778][ T310] ? anon_vma_fork+0xf7/0x4e0 [ 21.696292][ T310] kmem_cache_alloc+0x44/0x200 [ 21.700890][ T310] anon_vma_fork+0xf7/0x4e0 [ 21.705236][ T310] ? anon_vma_name+0x43/0x70 [ 21.709917][ T310] ? vm_area_dup+0x17a/0x230 [ 21.714364][ T310] copy_mm+0xa3a/0x13e0 [ 21.718359][ T310] ? copy_signal+0x610/0x610 [ 21.722768][ T310] ? __init_rwsem+0xd6/0x1c0 [ 21.724841][ T313] FAULT_INJECTION: forcing a failure. [ 21.724841][ T313] name failslab, interval 1, probability 0, space 0, times 1 [ 21.727190][ T310] ? copy_signal+0x4e3/0x610 [ 21.740276][ T312] FAULT_INJECTION: forcing a failure. [ 21.740276][ T312] name failslab, interval 1, probability 0, space 0, times 1 [ 21.744206][ T310] copy_process+0x12bc/0x3260 [ 21.762002][ T310] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.766938][ T310] ? __kasan_check_write+0x14/0x20 [ 21.771890][ T310] kernel_clone+0x21e/0x9e0 [ 21.776233][ T310] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.781261][ T310] ? create_io_thread+0x1e0/0x1e0 [ 21.786123][ T310] __x64_sys_clone+0x23f/0x290 [ 21.790724][ T310] ? __do_sys_vfork+0x130/0x130 [ 21.795411][ T310] ? __kasan_check_read+0x11/0x20 [ 21.800270][ T310] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 21.806086][ T310] do_syscall_64+0x3d/0xb0 [ 21.810339][ T310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.816080][ T310] RIP: 0033:0x7f517cc0f399 [ 21.820326][ T310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 21.839760][ T310] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 ./strace-static-x86_64: Process 314 attached ./strace-static-x86_64: Process 313 attached ./strace-static-x86_64: Process 312 attached [pid 314] set_robust_list(0x55555697d6a0, 24 [pid 313] set_robust_list(0x7f517cbcf9a0, 24 [pid 312] set_robust_list(0x7f517cbcf9a0, 24 [pid 314] <... set_robust_list resumed>) = 0 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] rt_sigprocmask(SIG_SETMASK, [], [pid 312] rt_sigprocmask(SIG_SETMASK, [], [pid 314] <... prctl resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] setpgid(0, 0 [pid 313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 312] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 314] <... setpgid resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 312] <... openat resumed>) = 3 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] write(3, "67", 2 [pid 312] write(3, "67", 2 [pid 314] <... openat resumed>) = 3 [pid 313] <... write resumed>) = 2 [pid 312] <... write resumed>) = 2 [pid 314] write(3, "1000", 4 [pid 313] clone(child_stack=NULL, flags=0 [pid 312] clone(child_stack=NULL, flags=0 [pid 314] <... write resumed>) = 4 [pid 314] close(3) = 0 [pid 314] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 314] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 314] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[3]}, 88) = 3 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 21.848116][ T310] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 21.855902][ T310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 21.863713][ T310] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 21.871527][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 21.879338][ T310] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 21.887151][ T310] [ 21.890011][ T313] CPU: 0 PID: 313 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 21.900079][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 21.909973][ T313] Call Trace: [ 21.913098][ T313] [ 21.915871][ T313] dump_stack_lvl+0x151/0x1b7 [ 21.920388][ T313] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.925855][ T313] dump_stack+0x15/0x17 [ 21.929849][ T313] should_fail+0x3c6/0x510 [ 21.934101][ T313] __should_failslab+0xa4/0xe0 [ 21.938789][ T313] ? anon_vma_fork+0xf7/0x4e0 [ 21.943299][ T313] should_failslab+0x9/0x20 [ 21.947641][ T313] slab_pre_alloc_hook+0x37/0xd0 [ 21.952429][ T313] ? anon_vma_fork+0xf7/0x4e0 [ 21.956925][ T313] kmem_cache_alloc+0x44/0x200 [ 21.961529][ T313] anon_vma_fork+0xf7/0x4e0 [ 21.965865][ T313] ? anon_vma_name+0x4c/0x70 [ 21.970295][ T313] ? vm_area_dup+0x17a/0x230 [ 21.974718][ T313] copy_mm+0xa3a/0x13e0 [ 21.978716][ T313] ? copy_signal+0x610/0x610 [ 21.983141][ T313] ? __init_rwsem+0xd6/0x1c0 [ 21.987563][ T313] ? copy_signal+0x4e3/0x610 [ 21.991994][ T313] copy_process+0x12bc/0x3260 [ 21.996510][ T313] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.001454][ T313] ? __kasan_check_write+0x14/0x20 [ 22.006399][ T313] kernel_clone+0x21e/0x9e0 [ 22.010740][ T313] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.015771][ T313] ? create_io_thread+0x1e0/0x1e0 [ 22.020633][ T313] __x64_sys_clone+0x23f/0x290 [ 22.025235][ T313] ? __do_sys_vfork+0x130/0x130 [ 22.029922][ T313] ? __kasan_check_read+0x11/0x20 [ 22.034780][ T313] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 22.040597][ T313] do_syscall_64+0x3d/0xb0 [ 22.044848][ T313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.050580][ T313] RIP: 0033:0x7f517cc0f399 [ 22.054829][ T313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.074278][ T313] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 22.082599][ T313] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 22.090411][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 ./strace-static-x86_64: Process 316 attached [pid 310] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 309] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 316] set_robust_list(0x7f517cbcf9a0, 24 [pid 310] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... set_robust_list resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], [pid 310] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] close(3 [pid 304] close(3 [pid 316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 306] <... close resumed>) = 0 [pid 304] <... close resumed>) = 0 [pid 316] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 306] close(4 [pid 304] close(4 [pid 316] <... openat resumed>) = 3 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] write(3, "67", 2 [pid 306] close(5 [pid 304] close(5 [pid 316] <... write resumed>) = 2 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 22.098221][ T313] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 22.106032][ T313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 22.113846][ T313] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 22.121662][ T313] [ 22.124808][ T311] CPU: 0 PID: 311 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.134862][ T311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 22.135474][ T316] FAULT_INJECTION: forcing a failure. [pid 316] clone(child_stack=NULL, flags=0 [pid 306] close(6 [pid 304] close(6 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(7 [pid 304] close(7 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(8 [pid 304] close(8 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(9 [pid 304] close(9 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(10 [pid 304] close(10 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(11 [pid 304] close(11 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(12 [pid 304] close(12 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(13 [pid 304] close(13 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(14 [pid 304] close(14 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(15 [pid 304] close(15 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(16 [pid 304] close(16 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(17 [pid 304] close(17 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(18 [pid 304] close(18 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(19 [pid 304] close(19 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(20 [pid 304] close(20 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(21 [pid 304] close(21 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(22 [pid 304] close(22 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(23 [pid 304] close(23 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(24 [pid 304] close(24 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(25 [pid 304] close(25 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(26 [pid 304] close(26 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(27 [pid 304] close(27 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(28 [pid 304] close(28 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(29 [pid 304] close(29 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] exit_group(0 [pid 304] exit_group(0 [pid 310] <... futex resumed>) = ? [pid 309] <... futex resumed>) = ? [pid 306] <... exit_group resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 310] +++ exited with 0 +++ [pid 309] +++ exited with 0 +++ [ 22.135474][ T316] name failslab, interval 1, probability 0, space 0, times 0 [ 22.144752][ T311] Call Trace: [ 22.144759][ T311] [ 22.144766][ T311] dump_stack_lvl+0x151/0x1b7 [ 22.167588][ T311] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.173057][ T311] ? avc_denied+0x1b0/0x1b0 [ 22.177391][ T311] dump_stack+0x15/0x17 [ 22.181382][ T311] should_fail+0x3c6/0x510 [ 22.185632][ T311] __should_failslab+0xa4/0xe0 [ 22.190232][ T311] ? vm_area_dup+0x26/0x230 [ 22.194676][ T311] should_failslab+0x9/0x20 [ 22.199000][ T311] slab_pre_alloc_hook+0x37/0xd0 [ 22.203771][ T311] ? vm_area_dup+0x26/0x230 [ 22.208118][ T311] kmem_cache_alloc+0x44/0x200 [ 22.212722][ T311] vm_area_dup+0x26/0x230 [ 22.216884][ T311] copy_mm+0x9a1/0x13e0 [ 22.220875][ T311] ? copy_signal+0x610/0x610 [ 22.225300][ T311] ? __init_rwsem+0xd6/0x1c0 [ 22.229728][ T311] ? copy_signal+0x4e3/0x610 [ 22.234155][ T311] copy_process+0x12bc/0x3260 [ 22.238667][ T311] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.243613][ T311] ? __kasan_check_write+0x14/0x20 [ 22.248559][ T311] kernel_clone+0x21e/0x9e0 [ 22.252901][ T311] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.257930][ T311] ? create_io_thread+0x1e0/0x1e0 [ 22.262796][ T311] __x64_sys_clone+0x23f/0x290 [ 22.267396][ T311] ? __do_sys_vfork+0x130/0x130 [ 22.272082][ T311] ? __kasan_check_read+0x11/0x20 [ 22.276940][ T311] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 22.282760][ T311] do_syscall_64+0x3d/0xb0 [ 22.287004][ T311] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.292751][ T311] RIP: 0033:0x7f517cc0f399 [ 22.296989][ T311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.316429][ T311] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 22.324674][ T311] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 22.332485][ T311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 22.340313][ T311] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 22.348108][ T311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 22.355917][ T311] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 22.363740][ T311] [ 22.366937][ T312] CPU: 0 PID: 312 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.377083][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 22.387109][ T312] Call Trace: [ 22.390233][ T312] [ 22.393014][ T312] dump_stack_lvl+0x151/0x1b7 [ 22.397522][ T312] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.402991][ T312] dump_stack+0x15/0x17 [ 22.406983][ T312] should_fail+0x3c6/0x510 [ 22.411238][ T312] __should_failslab+0xa4/0xe0 [ 22.415833][ T312] ? anon_vma_fork+0xf7/0x4e0 [ 22.420347][ T312] should_failslab+0x9/0x20 [ 22.424695][ T312] slab_pre_alloc_hook+0x37/0xd0 [ 22.429460][ T312] ? anon_vma_fork+0xf7/0x4e0 [ 22.433974][ T312] kmem_cache_alloc+0x44/0x200 [ 22.438573][ T312] anon_vma_fork+0xf7/0x4e0 [ 22.442917][ T312] ? anon_vma_name+0x43/0x70 [ 22.447341][ T312] ? vm_area_dup+0x17a/0x230 [ 22.451763][ T312] copy_mm+0xa3a/0x13e0 [ 22.455764][ T312] ? copy_signal+0x610/0x610 [ 22.460183][ T312] ? __init_rwsem+0xd6/0x1c0 [ 22.464612][ T312] ? copy_signal+0x4e3/0x610 [ 22.469038][ T312] copy_process+0x12bc/0x3260 [ 22.473557][ T312] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.478499][ T312] ? __kasan_check_write+0x14/0x20 [ 22.483448][ T312] kernel_clone+0x21e/0x9e0 [ 22.487786][ T312] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.492817][ T312] ? create_io_thread+0x1e0/0x1e0 [ 22.497683][ T312] __x64_sys_clone+0x23f/0x290 [ 22.502292][ T312] ? __do_sys_vfork+0x130/0x130 [ 22.506967][ T312] ? __kasan_check_read+0x11/0x20 [ 22.511829][ T312] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 22.517644][ T312] do_syscall_64+0x3d/0xb0 [ 22.521897][ T312] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.527627][ T312] RIP: 0033:0x7f517cc0f399 [ 22.531874][ T312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.551321][ T312] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 22.559565][ T312] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 22.567374][ T312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 22.575193][ T312] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 22.582992][ T312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 22.590809][ T312] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 22.598628][ T312] [ 22.601486][ T316] CPU: 1 PID: 316 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.611566][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 22.621446][ T316] Call Trace: [ 22.624572][ T316] [ 22.627348][ T316] dump_stack_lvl+0x151/0x1b7 [ 22.631858][ T316] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.637329][ T316] dump_stack+0x15/0x17 [ 22.641329][ T316] should_fail+0x3c6/0x510 [ 22.645574][ T316] __should_failslab+0xa4/0xe0 [ 22.650178][ T316] ? anon_vma_clone+0x9a/0x500 [ 22.654771][ T316] should_failslab+0x9/0x20 [ 22.659111][ T316] slab_pre_alloc_hook+0x37/0xd0 [ 22.663886][ T316] ? anon_vma_clone+0x9a/0x500 [ 22.668486][ T316] kmem_cache_alloc+0x44/0x200 [ 22.673086][ T316] anon_vma_clone+0x9a/0x500 [ 22.677511][ T316] anon_vma_fork+0x91/0x4e0 [ 22.681849][ T316] ? anon_vma_name+0x4c/0x70 [ 22.686275][ T316] ? vm_area_dup+0x17a/0x230 [ 22.690719][ T316] copy_mm+0xa3a/0x13e0 [ 22.694701][ T316] ? copy_signal+0x610/0x610 [ 22.699119][ T316] ? __init_rwsem+0xd6/0x1c0 [ 22.703549][ T316] ? copy_signal+0x4e3/0x610 [ 22.707997][ T316] copy_process+0x12bc/0x3260 [ 22.712491][ T316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.717435][ T316] ? __kasan_check_write+0x14/0x20 [ 22.722387][ T316] kernel_clone+0x21e/0x9e0 [ 22.726722][ T316] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.731759][ T316] ? create_io_thread+0x1e0/0x1e0 [ 22.736628][ T316] __x64_sys_clone+0x23f/0x290 [ 22.741218][ T316] ? __do_sys_vfork+0x130/0x130 [ 22.745905][ T316] ? __kasan_check_read+0x11/0x20 [ 22.750895][ T316] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 22.756705][ T316] do_syscall_64+0x3d/0xb0 [ 22.760957][ T316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.766688][ T316] RIP: 0033:0x7f517cc0f399 [ 22.770939][ T316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.790575][ T316] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 312] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 311] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 312] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... clone resumed>) = 4 [pid 312] <... futex resumed>) = 0 [pid 311] <... futex resumed>) = 0 [pid 312] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] close(3 [pid 313] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 306] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ ./strace-static-x86_64: Process 318 attached [pid 316] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] <... close resumed>) = 0 [pid 313] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 314] close(4 [pid 313] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 305] close(3 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] close(4 [pid 305] <... close resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] close(5 [pid 308] close(3 [pid 307] close(5 [pid 305] close(4./strace-static-x86_64: Process 320 attached ./strace-static-x86_64: Process 319 attached [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(6) = -1 EBADF (Bad file descriptor) [pid 307] close(7) = -1 EBADF (Bad file descriptor) [pid 307] close(8) = -1 EBADF (Bad file descriptor) [pid 307] close(9) = -1 EBADF (Bad file descriptor) [pid 307] close(10) = -1 EBADF (Bad file descriptor) [pid 307] close(11) = -1 EBADF (Bad file descriptor) [pid 307] close(12) = -1 EBADF (Bad file descriptor) [pid 307] close(13) = -1 EBADF (Bad file descriptor) [pid 307] close(14) = -1 EBADF (Bad file descriptor) [pid 307] close(15) = -1 EBADF (Bad file descriptor) [pid 307] close(16) = -1 EBADF (Bad file descriptor) [pid 307] close(17) = -1 EBADF (Bad file descriptor) [pid 307] close(18) = -1 EBADF (Bad file descriptor) [pid 307] close(19) = -1 EBADF (Bad file descriptor) [pid 307] close(20) = -1 EBADF (Bad file descriptor) [pid 307] close(21) = -1 EBADF (Bad file descriptor) [pid 307] close(22) = -1 EBADF (Bad file descriptor) [pid 307] close(23) = -1 EBADF (Bad file descriptor) [pid 307] close(24) = -1 EBADF (Bad file descriptor) [pid 307] close(25) = -1 EBADF (Bad file descriptor) [pid 307] close(26) = -1 EBADF (Bad file descriptor) [pid 307] close(27) = -1 EBADF (Bad file descriptor) [pid 307] close(28) = -1 EBADF (Bad file descriptor) [pid 307] close(29) = -1 EBADF (Bad file descriptor) [pid 307] exit_group(0 [pid 311] <... futex resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 320] set_robust_list(0x55555697d6a0, 24 [pid 319] set_robust_list(0x55555697d6a0, 24 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] +++ exited with 0 +++ [pid 308] <... close resumed>) = 0 [pid 307] +++ exited with 0 +++ [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 4 [pid 298] <... clone resumed>, child_tidptr=0x55555697d690) = 4 [pid 314] close(6 [pid 308] close(4 [pid 305] close(5 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- [pid 314] close(7 [pid 308] close(5 [pid 305] close(6 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 321 attached [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... set_robust_list resumed>) = 0 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] close(8 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(6 [pid 305] close(7 [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 4 [pid 314] close(9 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(8 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(7 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] close(10 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(9 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(8 [pid 314] close(11 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(9 [pid 305] close(10 [pid 314] close(12 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(10 [pid 305] close(11 [pid 314] close(13 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(11 [pid 305] close(12 [pid 314] close(14 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(12 [pid 305] close(13 [pid 314] close(15 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(13 [pid 305] close(14 [pid 314] close(16 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(14 [pid 305] close(15 [pid 314] close(17 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(15 [pid 314] close(18 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(16 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(16 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] close(19 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(17 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(17 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] close(20 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(18 [pid 321] set_robust_list(0x55555697d6a0, 24 [pid 320] <... prctl resumed>) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(18 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] <... set_robust_list resumed>) = 0 [pid 320] setpgid(0, 0 [pid 319] <... prctl resumed>) = 0 [pid 305] close(19 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 320] <... setpgid resumed>) = 0 [pid 314] close(21 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] <... prctl resumed>) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 319] setpgid(0, 0 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(19 [pid 305] close(20 [pid 314] close(22 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... openat resumed>) = 3 [pid 319] <... setpgid resumed>) = 0 [pid 321] setpgid(0, 0 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(20 [pid 305] close(21 [pid 320] write(3, "1000", 4 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 321] <... setpgid resumed>) = 0 [pid 320] <... write resumed>) = 4 [pid 314] close(23 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... openat resumed>) = 3 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(21 [pid 305] close(22 [pid 314] close(24 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(3 [pid 319] write(3, "1000", 4 [pid 308] close(22 [pid 305] close(23 [pid 321] <... openat resumed>) = 3 [pid 320] <... close resumed>) = 0 [pid 319] <... write resumed>) = 4 [pid 314] close(25 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] write(3, "1000", 4 [pid 320] read(200, [pid 319] close(3 [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(23 [pid 305] close(24 [pid 321] <... write resumed>) = 4 [pid 320] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 319] <... close resumed>) = 0 [pid 314] close(26 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(3 [pid 320] read(200, [pid 319] read(200, [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(24 [pid 305] close(25 [pid 321] <... close resumed>) = 0 [pid 320] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 319] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 314] close(27 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] read(200, [pid 320] read(200, [pid 319] read(200, [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(25 [pid 305] close(26 [pid 321] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 320] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 319] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 314] close(28 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] read(200, [pid 320] read(200, [pid 319] read(200, [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(26 [pid 305] close(27 [pid 321] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 320] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 314] close(29 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] read(200, [pid 320] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] read(200, [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(27 [pid 305] close(28 [pid 321] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] <... futex resumed>) = 0 [pid 319] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] exit_group(0 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 319] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = ? [pid 314] <... exit_group resumed>) = ? [pid 308] close(28 [pid 305] close(29 [pid 321] <... futex resumed>) = 0 [pid 320] <... rt_sigaction resumed>NULL, 8) = 0 [pid 319] <... futex resumed>) = 0 [pid 316] +++ exited with 0 +++ [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(29 [pid 305] exit_group(0 [pid 314] +++ exited with 0 +++ [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... exit_group resumed>) = ? [pid 321] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 319] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 312] <... futex resumed>) = ? [pid 308] exit_group(0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- [pid 321] <... rt_sigaction resumed>NULL, 8) = 0 [pid 320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 319] <... rt_sigaction resumed>NULL, 8) = 0 [pid 308] <... exit_group resumed>) = ? [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 312] +++ exited with 0 +++ [pid 305] +++ exited with 0 +++ [pid 320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 313] <... futex resumed>) = ? [pid 321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] <... restart_syscall resumed>) = 0 [pid 320] <... mmap resumed>) = 0x7f517cbaf000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 322 attached [pid 321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 320] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ [pid 301] <... restart_syscall resumed>) = 0 [pid 322] set_robust_list(0x55555697d6a0, 24 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 320] <... mprotect resumed>) = 0 [pid 319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 5 [pid 322] <... set_robust_list resumed>) = 0 [pid 321] <... mmap resumed>) = 0x7f517cbaf000 [pid 320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 319] <... mmap resumed>) = 0x7f517cbaf000 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 321] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 319] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 323 attached [pid 322] <... prctl resumed>) = 0 [pid 321] <... mprotect resumed>) = 0 [pid 320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 319] <... mprotect resumed>) = 0 [pid 322] setpgid(0, 0 [pid 321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... clone resumed>, child_tidptr=0x55555697d690) = 4 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 322] <... setpgid resumed>) = 0 [pid 321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 320] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 319] <... rt_sigprocmask resumed>[], 8) = 0 [pid 319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 320] rt_sigprocmask(SIG_SETMASK, [], [pid 322] <... openat resumed>) = 3 [pid 320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 319] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 4 [pid 322] write(3, "1000", 4 [pid 321] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 320] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 327 attached [pid 323] set_robust_list(0x55555697d6a0, 24 [pid 322] <... write resumed>) = 4 [pid 321] rt_sigprocmask(SIG_SETMASK, [], [pid 320] <... futex resumed>) = 0 [pid 319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 319] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] set_robust_list(0x7f517cbcf9a0, 24 [pid 323] <... set_robust_list resumed>) = 0 [pid 322] close(3 [pid 321] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = 0 [pid 319] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... close resumed>) = 0 [pid 321] <... futex resumed>) = 0 [pid 322] read(200, [pid 321] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 325 attached [pid 322] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 325] set_robust_list(0x55555697d6a0, 24 [pid 322] read(200, [pid 325] <... set_robust_list resumed>) = 0 [pid 322] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 327] <... set_robust_list resumed>) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 322] read(200, ./strace-static-x86_64: Process 324 attached [pid 327] rt_sigprocmask(SIG_SETMASK, [], [pid 325] <... prctl resumed>) = 0 [pid 323] <... prctl resumed>) = 0 [pid 322] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] setpgid(0, 0 [pid 324] set_robust_list(0x7f517cbcf9a0, 24 [pid 322] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 326 attached [pid 327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] <... setpgid resumed>) = 0 [pid 324] <... set_robust_list resumed>) = 0 [pid 323] setpgid(0, 0 [pid 322] <... futex resumed>) = 0 [pid 327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 326] set_robust_list(0x7f517cbcf9a0, 24 [pid 324] rt_sigprocmask(SIG_SETMASK, [], [pid 322] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 326] <... set_robust_list resumed>) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] <... setpgid resumed>) = 0 [pid 322] <... rt_sigaction resumed>NULL, 8) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [], [pid 324] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 327] <... openat resumed>) = 3 [pid 326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] <... openat resumed>) = 3 [pid 324] <... openat resumed>) = 3 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 324] write(3, "67", 2 [pid 322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 327] write(3, "67", 2 [pid 326] <... openat resumed>) = 3 [pid 325] write(3, "1000", 4 [pid 324] <... write resumed>) = 2 [pid 323] <... openat resumed>) = 3 [pid 322] <... mmap resumed>) = 0x7f517cbaf000 [pid 326] write(3, "67", 2 [pid 324] clone(child_stack=NULL, flags=0 [pid 323] write(3, "1000", 4 [ 22.798820][ T316] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 22.806627][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 22.814443][ T316] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 22.822249][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 22.830064][ T316] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 22.837876][ T316] [pid 322] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 327] <... write resumed>) = 2 [pid 325] <... write resumed>) = 4 [pid 323] <... write resumed>) = 4 [pid 322] <... mprotect resumed>) = 0 [pid 327] clone(child_stack=NULL, flags=0 [pid 325] close(3 [pid 323] close(3 [pid 322] rt_sigprocmask(SIG_BLOCK, ~[], [pid 326] <... write resumed>) = 2 [pid 325] <... close resumed>) = 0 [pid 323] <... close resumed>) = 0 [pid 322] <... rt_sigprocmask resumed>[], 8) = 0 [pid 325] read(200, [pid 323] read(200, [pid 322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 325] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 323] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 325] read(200, [pid 323] read(200, [pid 322] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 325] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 323] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 322] rt_sigprocmask(SIG_SETMASK, [], [pid 325] read(200, [pid 323] read(200, [pid 322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 323] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 323] <... futex resumed>) = 0 [pid 322] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 323] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 325] <... rt_sigaction resumed>NULL, 8) = 0 [pid 323] <... rt_sigaction resumed>NULL, 8) = 0 [pid 325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 325] <... mmap resumed>) = 0x7f517cbaf000 [pid 323] <... mmap resumed>) = 0x7f517cbaf000 [pid 325] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 323] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 325] <... mprotect resumed>) = 0 [pid 323] <... mprotect resumed>) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 323] rt_sigprocmask(SIG_BLOCK, ~[], [pid 325] <... rt_sigprocmask resumed>[], 8) = 0 [ 22.880194][ T324] FAULT_INJECTION: forcing a failure. [ 22.880194][ T324] name failslab, interval 1, probability 0, space 0, times 0 [ 22.889530][ T327] FAULT_INJECTION: forcing a failure. [ 22.889530][ T327] name failslab, interval 1, probability 0, space 0, times 0 [ 22.892932][ T324] CPU: 1 PID: 324 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.915080][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 22.924971][ T324] Call Trace: [pid 323] <... rt_sigprocmask resumed>[], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 325] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 323] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 325] rt_sigprocmask(SIG_SETMASK, [], [pid 323] rt_sigprocmask(SIG_SETMASK, [], [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 22.928118][ T324] [ 22.930867][ T324] dump_stack_lvl+0x151/0x1b7 [ 22.935382][ T324] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.940850][ T324] dump_stack+0x15/0x17 [ 22.944843][ T324] should_fail+0x3c6/0x510 [ 22.949098][ T324] __should_failslab+0xa4/0xe0 [ 22.953779][ T324] ? anon_vma_fork+0x1df/0x4e0 [ 22.958386][ T324] should_failslab+0x9/0x20 [ 22.962721][ T324] slab_pre_alloc_hook+0x37/0xd0 [ 22.967500][ T324] ? anon_vma_fork+0x1df/0x4e0 [ 22.972100][ T324] kmem_cache_alloc+0x44/0x200 [ 22.976696][ T324] anon_vma_fork+0x1df/0x4e0 [ 22.981124][ T324] copy_mm+0xa3a/0x13e0 [ 22.985118][ T324] ? copy_signal+0x610/0x610 [ 22.989541][ T324] ? __init_rwsem+0xd6/0x1c0 [ 22.993966][ T324] ? copy_signal+0x4e3/0x610 [ 22.998397][ T324] copy_process+0x12bc/0x3260 [ 23.002908][ T324] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.007857][ T324] ? __kasan_check_write+0x14/0x20 [ 23.012803][ T324] kernel_clone+0x21e/0x9e0 [ 23.017140][ T324] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.022174][ T324] ? create_io_thread+0x1e0/0x1e0 [ 23.027036][ T324] __x64_sys_clone+0x23f/0x290 [ 23.031637][ T324] ? __do_sys_vfork+0x130/0x130 [ 23.036322][ T324] ? __kasan_check_read+0x11/0x20 [ 23.041182][ T324] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 23.046998][ T324] do_syscall_64+0x3d/0xb0 [ 23.051251][ T324] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.056982][ T324] RIP: 0033:0x7f517cc0f399 [ 23.061231][ T324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 325] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 323] <... futex resumed>) = 0 [pid 325] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 330] write(3, "67", 2) = 2 [pid 330] clone(child_stack=NULL, flags=0 [pid 320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 322] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 326] clone(child_stack=NULL, flags=0 [pid 322] close(3) = -1 EBADF (Bad file descriptor) [pid 322] close(4) = -1 EBADF (Bad file descriptor) [pid 322] close(5) = -1 EBADF (Bad file descriptor) [pid 322] close(6) = -1 EBADF (Bad file descriptor) [pid 322] close(7) = -1 EBADF (Bad file descriptor) [pid 322] close(8) = -1 EBADF (Bad file descriptor) [pid 322] close(9) = -1 EBADF (Bad file descriptor) [pid 322] close(10) = -1 EBADF (Bad file descriptor) [pid 322] close(11) = -1 EBADF (Bad file descriptor) [pid 322] close(12) = -1 EBADF (Bad file descriptor) [pid 322] close(13) = -1 EBADF (Bad file descriptor) [pid 322] close(14) = -1 EBADF (Bad file descriptor) [pid 322] close(15) = -1 EBADF (Bad file descriptor) [pid 322] close(16) = -1 EBADF (Bad file descriptor) [pid 322] close(17) = -1 EBADF (Bad file descriptor) [pid 322] close(18) = -1 EBADF (Bad file descriptor) [pid 322] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(3 [pid 322] close(20 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(4 [pid 322] close(21 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(5 [pid 322] close(22 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(6 [pid 322] close(23 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(7 [pid 322] close(24 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(8 [pid 322] close(25 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(9 [pid 322] close(26 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(10 [pid 322] close(27 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(11 [pid 322] close(28 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(12 [pid 322] close(29 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(13 [pid 322] exit_group(0 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... exit_group resumed>) = ? [pid 325] close(14) = -1 EBADF (Bad file descriptor) [pid 325] close(15) = -1 EBADF (Bad file descriptor) [pid 325] close(16) = -1 EBADF (Bad file descriptor) [pid 325] close(17) = -1 EBADF (Bad file descriptor) [pid 325] close(18) = -1 EBADF (Bad file descriptor) [pid 325] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(20) = -1 EBADF (Bad file descriptor) [pid 325] close(21) = -1 EBADF (Bad file descriptor) [pid 325] close(22) = -1 EBADF (Bad file descriptor) [pid 325] close(23) = -1 EBADF (Bad file descriptor) [pid 325] close(24) = -1 EBADF (Bad file descriptor) [pid 325] close(25) = -1 EBADF (Bad file descriptor) [pid 325] close(26) = -1 EBADF (Bad file descriptor) [pid 325] close(27) = -1 EBADF (Bad file descriptor) [pid 325] close(28) = -1 EBADF (Bad file descriptor) [pid 325] close(29) = -1 EBADF (Bad file descriptor) [pid 325] exit_group(0) = ? ./strace-static-x86_64: Process 328 attached [ 23.080670][ T324] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 23.088922][ T324] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 23.096730][ T324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.104539][ T324] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 23.112348][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 23.120165][ T324] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 23.127976][ T324] ./strace-static-x86_64: Process 329 attached [pid 319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 318] exit(0) = ? [ 23.131074][ T327] CPU: 0 PID: 327 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.141314][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 23.151212][ T327] Call Trace: [ 23.154351][ T327] [ 23.157115][ T327] dump_stack_lvl+0x151/0x1b7 [ 23.161625][ T327] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.167097][ T327] dump_stack+0x15/0x17 [ 23.171085][ T327] should_fail+0x3c6/0x510 [ 23.175337][ T327] __should_failslab+0xa4/0xe0 [ 23.179936][ T327] ? anon_vma_clone+0x9a/0x500 [ 23.184543][ T327] should_failslab+0x9/0x20 [ 23.188883][ T327] slab_pre_alloc_hook+0x37/0xd0 [ 23.193653][ T327] ? anon_vma_clone+0x9a/0x500 [ 23.198252][ T327] kmem_cache_alloc+0x44/0x200 [ 23.202848][ T327] anon_vma_clone+0x9a/0x500 [ 23.207275][ T327] anon_vma_fork+0x91/0x4e0 [ 23.211619][ T327] ? anon_vma_name+0x43/0x70 [ 23.216048][ T327] ? vm_area_dup+0x17a/0x230 [ 23.220471][ T327] copy_mm+0xa3a/0x13e0 [ 23.224572][ T327] ? copy_signal+0x610/0x610 [ 23.228992][ T327] ? __init_rwsem+0xd6/0x1c0 [ 23.233425][ T327] ? copy_signal+0x4e3/0x610 [ 23.237847][ T327] copy_process+0x12bc/0x3260 [ 23.242366][ T327] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.247305][ T327] ? __kasan_check_write+0x14/0x20 [ 23.252251][ T327] kernel_clone+0x21e/0x9e0 [ 23.256587][ T327] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.261627][ T327] ? create_io_thread+0x1e0/0x1e0 [ 23.266494][ T327] __x64_sys_clone+0x23f/0x290 [ 23.271184][ T327] ? __do_sys_vfork+0x130/0x130 [ 23.275872][ T327] ? __kasan_check_read+0x11/0x20 [ 23.280728][ T327] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 23.286541][ T327] do_syscall_64+0x3d/0xb0 [ 23.290798][ T327] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.296525][ T327] RIP: 0033:0x7f517cc0f399 [ 23.300782][ T327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 23.320223][ T327] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 23.328464][ T327] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 23.336272][ T327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.344087][ T327] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 23.351896][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 23.359712][ T327] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 23.367523][ T327] [ 23.370745][ T330] FAULT_INJECTION: forcing a failure. [ 23.370745][ T330] name failslab, interval 1, probability 0, space 0, times 0 [ 23.383240][ T330] CPU: 0 PID: 330 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.393209][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 23.403105][ T330] Call Trace: [ 23.406227][ T330] [ 23.409005][ T330] dump_stack_lvl+0x151/0x1b7 [ 23.413518][ T330] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.418989][ T330] dump_stack+0x15/0x17 [ 23.422980][ T330] should_fail+0x3c6/0x510 [ 23.427237][ T330] __should_failslab+0xa4/0xe0 [ 23.431838][ T330] ? anon_vma_clone+0x9a/0x500 [ 23.436436][ T330] should_failslab+0x9/0x20 [ 23.440771][ T330] slab_pre_alloc_hook+0x37/0xd0 [ 23.445545][ T330] ? anon_vma_clone+0x9a/0x500 [ 23.450147][ T330] kmem_cache_alloc+0x44/0x200 [ 23.454748][ T330] anon_vma_clone+0x9a/0x500 [ 23.459173][ T330] anon_vma_fork+0x91/0x4e0 [ 23.463511][ T330] ? anon_vma_name+0x43/0x70 [ 23.467966][ T330] ? vm_area_dup+0x17a/0x230 [ 23.472542][ T330] copy_mm+0xa3a/0x13e0 [ 23.476532][ T330] ? copy_signal+0x610/0x610 [ 23.481055][ T330] ? __init_rwsem+0xd6/0x1c0 [ 23.485472][ T330] ? copy_signal+0x4e3/0x610 [ 23.489983][ T330] copy_process+0x12bc/0x3260 [ 23.494500][ T330] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.499442][ T330] ? __kasan_check_write+0x14/0x20 [ 23.504393][ T330] kernel_clone+0x21e/0x9e0 [ 23.508732][ T330] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.513764][ T330] ? create_io_thread+0x1e0/0x1e0 [ 23.518634][ T330] __x64_sys_clone+0x23f/0x290 [ 23.523397][ T330] ? __do_sys_vfork+0x130/0x130 [ 23.528107][ T330] ? __kasan_check_read+0x11/0x20 [ 23.532951][ T330] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 23.538762][ T330] do_syscall_64+0x3d/0xb0 [ 23.543016][ T330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.548834][ T330] RIP: 0033:0x7f517cc0f399 [ 23.553085][ T330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 23.572525][ T330] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 ./strace-static-x86_64: Process 331 attached [pid 329] +++ exited with 0 +++ [pid 328] +++ exited with 0 +++ [pid 325] +++ exited with 0 +++ [pid 324] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 322] +++ exited with 0 +++ [pid 318] +++ exited with 0 +++ [pid 330] <... clone resumed>) = 6 [pid 327] <... clone resumed>) = 6 [pid 324] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 330] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 0 [pid 324] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 323] close(3) = 0 [pid 323] close(4) = -1 EBADF (Bad file descriptor) [pid 323] close(5) = -1 EBADF (Bad file descriptor) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 323] close(6) = -1 EBADF (Bad file descriptor) [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 7 [pid 323] close(7) = -1 EBADF (Bad file descriptor) [pid 323] close(8) = -1 EBADF (Bad file descriptor) [pid 323] close(9) = -1 EBADF (Bad file descriptor) [pid 323] close(10) = -1 EBADF (Bad file descriptor) [pid 323] close(11) = -1 EBADF (Bad file descriptor) [ 23.580767][ T330] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 23.588667][ T330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.596475][ T330] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 23.604568][ T330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 23.612370][ T330] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 23.620185][ T330] [ 23.623423][ T326] FAULT_INJECTION: forcing a failure. [pid 323] close(12) = -1 EBADF (Bad file descriptor) [pid 323] close(13 [pid 320] close(3./strace-static-x86_64: Process 333 attached ./strace-static-x86_64: Process 332 attached [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(3 [pid 323] close(14) = -1 EBADF (Bad file descriptor) [pid 323] close(15) = -1 EBADF (Bad file descriptor) [pid 323] close(16) = -1 EBADF (Bad file descriptor) [pid 323] close(17) = -1 EBADF (Bad file descriptor) [pid 323] close(18) = -1 EBADF (Bad file descriptor) [pid 323] close(19) = -1 EBADF (Bad file descriptor) [pid 323] close(20) = -1 EBADF (Bad file descriptor) [pid 323] close(21) = -1 EBADF (Bad file descriptor) [pid 323] close(22) = -1 EBADF (Bad file descriptor) [pid 323] close(23) = -1 EBADF (Bad file descriptor) [pid 323] close(24) = -1 EBADF (Bad file descriptor) [pid 323] close(25) = -1 EBADF (Bad file descriptor) [pid 323] close(26) = -1 EBADF (Bad file descriptor) [pid 323] close(27) = -1 EBADF (Bad file descriptor) [pid 323] close(28) = -1 EBADF (Bad file descriptor) [pid 323] close(29) = -1 EBADF (Bad file descriptor) [pid 323] exit_group(0 [pid 330] <... futex resumed>) = ? [pid 323] <... exit_group resumed>) = ? [pid 330] +++ exited with 0 +++ [pid 323] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 7 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x55555697d6a0, 24) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 334] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[8]}, 88) = 8 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 335] write(3, "67", 2) = 2 [ 23.623423][ T326] name failslab, interval 1, probability 0, space 0, times 0 [ 23.636019][ T326] CPU: 0 PID: 326 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.646432][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 23.656326][ T326] Call Trace: [ 23.659453][ T326] [ 23.662401][ T326] dump_stack_lvl+0x151/0x1b7 [ 23.662808][ T335] FAULT_INJECTION: forcing a failure. [ 23.662808][ T335] name failslab, interval 1, probability 0, space 0, times 0 [pid 335] clone(child_stack=NULL, flags=0 [pid 321] <... close resumed>) = 0 [pid 320] <... close resumed>) = 0 [pid 321] close(4 [pid 320] close(4 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(5 [pid 320] close(5 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(6 [pid 320] close(6 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(7 [pid 320] close(7 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(8 [pid 320] close(8 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(9 [pid 320] close(9 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(10 [pid 320] close(10 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(11 [pid 320] close(11 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(12 [pid 320] close(12 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(13 [pid 320] close(13 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(14 [pid 320] close(14 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(15 [pid 320] close(15 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(16 [pid 320] close(16 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(17 [pid 320] close(17 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(18 [pid 320] close(18 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(19 [pid 320] close(19 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(20 [pid 320] close(20 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(21 [pid 320] close(21 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(22 [pid 320] close(22 [pid 334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(23 [pid 320] close(23 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(24 [pid 320] close(24 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(25 [pid 320] close(25 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(26 [pid 320] close(26 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(27 [pid 320] close(27 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(28 [pid 320] close(28 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] close(29 [pid 320] close(29 [pid 321] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 321] exit_group(0 [pid 320] exit_group(0 [pid 327] <... futex resumed>) = ? [pid 324] <... futex resumed>) = ? [pid 321] <... exit_group resumed>) = ? [pid 320] <... exit_group resumed>) = ? [pid 327] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 6 [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 7 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x55555697d6a0, 24) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [ 23.667086][ T326] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.667112][ T326] dump_stack+0x15/0x17 [ 23.688959][ T326] should_fail+0x3c6/0x510 [ 23.693300][ T326] __should_failslab+0xa4/0xe0 [ 23.697898][ T326] ? anon_vma_fork+0x1df/0x4e0 [ 23.702502][ T326] should_failslab+0x9/0x20 [ 23.706838][ T326] slab_pre_alloc_hook+0x37/0xd0 [ 23.711619][ T326] ? anon_vma_fork+0x1df/0x4e0 [ 23.716214][ T326] kmem_cache_alloc+0x44/0x200 [ 23.720912][ T326] anon_vma_fork+0x1df/0x4e0 [ 23.725423][ T326] copy_mm+0xa3a/0x13e0 [ 23.729421][ T326] ? copy_signal+0x610/0x610 [pid 337] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 ./strace-static-x86_64: Process 336 attached [pid 337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 336] set_robust_list(0x55555697d6a0, 24 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 336] <... set_robust_list resumed>) = 0 [pid 337] <... mmap resumed>) = 0x7f517cbaf000 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 337] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 336] <... prctl resumed>) = 0 [pid 337] <... mprotect resumed>) = 0 [pid 336] setpgid(0, 0 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 336] <... setpgid resumed>) = 0 [pid 337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 336] <... openat resumed>) = 3 [pid 336] write(3, "1000", 4 [pid 337] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 336] <... write resumed>) = 4 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 336] close(3 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] <... close resumed>) = 0 [pid 337] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] read(200, [pid 337] <... futex resumed>) = 0 [pid 336] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 336] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[7]}, 88) = 7 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 339] write(3, "67", 2) = 2 [pid 339] clone(child_stack=NULL, flags=0 [pid 331] exit(0) = ? [pid 331] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 23.733840][ T326] ? __init_rwsem+0xd6/0x1c0 [ 23.738270][ T326] ? copy_signal+0x4e3/0x610 [ 23.742701][ T326] copy_process+0x12bc/0x3260 [ 23.747210][ T326] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.752165][ T326] ? __kasan_check_write+0x14/0x20 [ 23.752269][ T339] FAULT_INJECTION: forcing a failure. [ 23.752269][ T339] name failslab, interval 1, probability 0, space 0, times 0 [ 23.757202][ T326] kernel_clone+0x21e/0x9e0 [ 23.757227][ T326] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.778985][ T326] ? create_io_thread+0x1e0/0x1e0 [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 23.783836][ T326] __x64_sys_clone+0x23f/0x290 [ 23.788433][ T326] ? __do_sys_vfork+0x130/0x130 [ 23.793210][ T326] ? __kasan_check_read+0x11/0x20 [ 23.798068][ T326] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 23.803968][ T326] do_syscall_64+0x3d/0xb0 [ 23.808227][ T326] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.813951][ T326] RIP: 0033:0x7f517cc0f399 [pid 333] set_robust_list(0x55555697d6a0, 24) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 333] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[8]}, 88) = 8 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 340] write(3, "67", 2) = 2 [ 23.818202][ T326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 23.837644][ T326] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 23.845889][ T326] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 23.853796][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.861600][ T326] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 23.869495][ T326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 23.877311][ T326] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 23.885217][ T326] [ 23.888097][ T335] CPU: 1 PID: 335 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.889834][ T340] FAULT_INJECTION: forcing a failure. [ 23.889834][ T340] name failslab, interval 1, probability 0, space 0, times 0 [ 23.898134][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 23.898147][ T335] Call Trace: [ 23.898153][ T335] [ 23.898160][ T335] dump_stack_lvl+0x151/0x1b7 [ 23.930856][ T335] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.936333][ T335] dump_stack+0x15/0x17 [ 23.940325][ T335] should_fail+0x3c6/0x510 [ 23.944573][ T335] __should_failslab+0xa4/0xe0 [ 23.949170][ T335] ? anon_vma_fork+0xf7/0x4e0 [ 23.953685][ T335] should_failslab+0x9/0x20 [ 23.958024][ T335] slab_pre_alloc_hook+0x37/0xd0 [ 23.962796][ T335] ? anon_vma_fork+0xf7/0x4e0 [ 23.967309][ T335] kmem_cache_alloc+0x44/0x200 [ 23.971913][ T335] anon_vma_fork+0xf7/0x4e0 [ 23.976248][ T335] ? anon_vma_name+0x43/0x70 [ 23.980680][ T335] ? vm_area_dup+0x17a/0x230 [ 23.985105][ T335] copy_mm+0xa3a/0x13e0 [ 23.989101][ T335] ? copy_signal+0x610/0x610 [ 23.993517][ T335] ? __init_rwsem+0xd6/0x1c0 [ 23.997946][ T335] ? copy_signal+0x4e3/0x610 [ 24.002371][ T335] copy_process+0x12bc/0x3260 [ 24.006889][ T335] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.011835][ T335] ? __kasan_check_write+0x14/0x20 [ 24.016780][ T335] kernel_clone+0x21e/0x9e0 [ 24.021209][ T335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 24.026244][ T335] ? create_io_thread+0x1e0/0x1e0 [ 24.031103][ T335] __x64_sys_clone+0x23f/0x290 [ 24.035701][ T335] ? __do_sys_vfork+0x130/0x130 [ 24.040395][ T335] ? __kasan_check_read+0x11/0x20 [ 24.045254][ T335] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 24.051072][ T335] do_syscall_64+0x3d/0xb0 [ 24.055319][ T335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.061048][ T335] RIP: 0033:0x7f517cc0f399 [ 24.065300][ T335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.084829][ T335] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.093074][ T335] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 24.100968][ T335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.108780][ T335] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 24.116680][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 24.124490][ T335] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 24.132305][ T335] [ 24.135170][ T339] CPU: 0 PID: 339 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.145235][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 24.155127][ T339] Call Trace: [ 24.158250][ T339] [ 24.161029][ T339] dump_stack_lvl+0x151/0x1b7 [ 24.165543][ T339] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.171014][ T339] dump_stack+0x15/0x17 [ 24.175004][ T339] should_fail+0x3c6/0x510 [ 24.179428][ T339] __should_failslab+0xa4/0xe0 [ 24.184030][ T339] ? anon_vma_fork+0x1df/0x4e0 [ 24.188630][ T339] should_failslab+0x9/0x20 [ 24.193313][ T339] slab_pre_alloc_hook+0x37/0xd0 [ 24.198091][ T339] ? anon_vma_fork+0x1df/0x4e0 [ 24.202691][ T339] kmem_cache_alloc+0x44/0x200 [ 24.207298][ T339] anon_vma_fork+0x1df/0x4e0 [ 24.211715][ T339] copy_mm+0xa3a/0x13e0 [ 24.215714][ T339] ? copy_signal+0x610/0x610 [ 24.220136][ T339] ? __init_rwsem+0xd6/0x1c0 [ 24.224649][ T339] ? copy_signal+0x4e3/0x610 [ 24.229077][ T339] copy_process+0x12bc/0x3260 [ 24.233591][ T339] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.238535][ T339] ? __kasan_check_write+0x14/0x20 [ 24.243480][ T339] kernel_clone+0x21e/0x9e0 [ 24.247839][ T339] ? _raw_spin_unlock_irq+0x4e/0x70 [ 24.252851][ T339] ? create_io_thread+0x1e0/0x1e0 [ 24.257714][ T339] __x64_sys_clone+0x23f/0x290 [ 24.262317][ T339] ? __do_sys_vfork+0x130/0x130 [ 24.267001][ T339] ? __kasan_check_read+0x11/0x20 [ 24.271863][ T339] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 24.277675][ T339] do_syscall_64+0x3d/0xb0 [ 24.281931][ T339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.287659][ T339] RIP: 0033:0x7f517cc0f399 [ 24.291910][ T339] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.311436][ T339] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.319818][ T339] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 24.327618][ T339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.335427][ T339] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 24.343245][ T339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 24.351051][ T339] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 24.358863][ T339] [ 24.361829][ T340] CPU: 1 PID: 340 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.371795][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 24.381688][ T340] Call Trace: [ 24.384814][ T340] [ 24.387604][ T340] dump_stack_lvl+0x151/0x1b7 [ 24.392110][ T340] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.397572][ T340] dump_stack+0x15/0x17 [ 24.401573][ T340] should_fail+0x3c6/0x510 [ 24.405816][ T340] __should_failslab+0xa4/0xe0 [ 24.410428][ T340] ? anon_vma_clone+0x9a/0x500 [ 24.415018][ T340] should_failslab+0x9/0x20 [ 24.419355][ T340] slab_pre_alloc_hook+0x37/0xd0 [ 24.424139][ T340] ? anon_vma_clone+0x9a/0x500 [ 24.428735][ T340] kmem_cache_alloc+0x44/0x200 [ 24.433331][ T340] anon_vma_clone+0x9a/0x500 [ 24.437758][ T340] anon_vma_fork+0x91/0x4e0 [ 24.442095][ T340] ? anon_vma_name+0x43/0x70 [ 24.446522][ T340] ? vm_area_dup+0x17a/0x230 [ 24.450947][ T340] copy_mm+0xa3a/0x13e0 [ 24.454943][ T340] ? copy_signal+0x610/0x610 [ 24.459368][ T340] ? __init_rwsem+0xd6/0x1c0 [ 24.463794][ T340] ? copy_signal+0x4e3/0x610 [ 24.468223][ T340] copy_process+0x12bc/0x3260 [ 24.472767][ T340] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.477684][ T340] ? __kasan_check_write+0x14/0x20 [ 24.482638][ T340] kernel_clone+0x21e/0x9e0 [ 24.486975][ T340] ? _raw_spin_unlock_irq+0x4e/0x70 [ 24.492001][ T340] ? create_io_thread+0x1e0/0x1e0 [ 24.496866][ T340] __x64_sys_clone+0x23f/0x290 [ 24.501461][ T340] ? __do_sys_vfork+0x130/0x130 [ 24.506146][ T340] ? __kasan_check_read+0x11/0x20 [ 24.511011][ T340] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 24.516827][ T340] do_syscall_64+0x3d/0xb0 [ 24.521076][ T340] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.526807][ T340] RIP: 0033:0x7f517cc0f399 [ 24.531056][ T340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.550499][ T340] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.558743][ T340] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 24.566559][ T340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.574367][ T340] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [pid 340] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 338 attached [pid 333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 326] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 338] set_robust_list(0x7f517cbcf9a0, 24 [pid 326] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... set_robust_list resumed>) = 0 [pid 326] <... futex resumed>) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], [pid 326] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 338] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 338] write(3, "67", 2 [pid 319] close(3 [pid 338] <... write resumed>) = 2 [pid 319] <... close resumed>) = 0 [pid 338] clone(child_stack=NULL, flags=0 [pid 319] close(4) = -1 EBADF (Bad file descriptor) [pid 319] close(5) = -1 EBADF (Bad file descriptor) [pid 319] close(6) = -1 EBADF (Bad file descriptor) [pid 319] close(7) = -1 EBADF (Bad file descriptor) [pid 319] close(8) = -1 EBADF (Bad file descriptor) [pid 319] close(9) = -1 EBADF (Bad file descriptor) [pid 319] close(10) = -1 EBADF (Bad file descriptor) [pid 319] close(11) = -1 EBADF (Bad file descriptor) [pid 319] close(12) = -1 EBADF (Bad file descriptor) [pid 319] close(13) = -1 EBADF (Bad file descriptor) [pid 319] close(14) = -1 EBADF (Bad file descriptor) [pid 319] close(15) = -1 EBADF (Bad file descriptor) [pid 319] close(16) = -1 EBADF (Bad file descriptor) [pid 319] close(17) = -1 EBADF (Bad file descriptor) [pid 319] close(18) = -1 EBADF (Bad file descriptor) [pid 319] close(19) = -1 EBADF (Bad file descriptor) [pid 319] close(20) = -1 EBADF (Bad file descriptor) [pid 319] close(21) = -1 EBADF (Bad file descriptor) [pid 319] close(22) = -1 EBADF (Bad file descriptor) [pid 319] close(23) = -1 EBADF (Bad file descriptor) [pid 319] close(24) = -1 EBADF (Bad file descriptor) [pid 319] close(25) = -1 EBADF (Bad file descriptor) [pid 319] close(26) = -1 EBADF (Bad file descriptor) [pid 319] close(27) = -1 EBADF (Bad file descriptor) [pid 319] close(28) = -1 EBADF (Bad file descriptor) [pid 319] close(29) = -1 EBADF (Bad file descriptor) [pid 319] exit_group(0 [pid 326] <... futex resumed>) = ? [pid 319] <... exit_group resumed>) = ? [pid 326] +++ exited with 0 +++ ./strace-static-x86_64: Process 343 attached ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55555697d6a0, 24 [pid 340] <... clone resumed>) = 9 [pid 332] exit(0 [pid 342] <... set_robust_list resumed>) = 0 [pid 340] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... exit resumed>) = ? [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] <... futex resumed>) = 0 [pid 332] +++ exited with 0 +++ [pid 342] <... prctl resumed>) = 0 [pid 340] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 342] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[7]}, 88) = 7 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 6 [pid 333] close(3 [pid 339] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 333] <... close resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 333] close(4) = -1 EBADF (Bad file descriptor) [pid 333] close(5) = -1 EBADF (Bad file descriptor) [pid 333] close(6) = -1 EBADF (Bad file descriptor) [pid 333] close(7) = -1 EBADF (Bad file descriptor) [pid 333] close(8) = -1 EBADF (Bad file descriptor) [pid 333] close(9) = -1 EBADF (Bad file descriptor) [pid 333] close(10) = -1 EBADF (Bad file descriptor) [pid 333] close(11) = -1 EBADF (Bad file descriptor) [pid 333] close(12) = -1 EBADF (Bad file descriptor) [pid 333] close(13) = -1 EBADF (Bad file descriptor) [pid 333] close(14) = -1 EBADF (Bad file descriptor) [pid 333] close(15) = -1 EBADF (Bad file descriptor) [pid 333] close(16) = -1 EBADF (Bad file descriptor) [pid 333] close(17) = -1 EBADF (Bad file descriptor) [pid 333] close(18) = -1 EBADF (Bad file descriptor) [pid 333] close(19) = -1 EBADF (Bad file descriptor) [pid 333] close(20) = -1 EBADF (Bad file descriptor) [pid 333] close(21) = -1 EBADF (Bad file descriptor) [pid 333] close(22 [pid 339] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 6 [pid 333] close(23 [pid 336] close(3 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = 0 [pid 333] close(24 [pid 336] close(4 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(25 [pid 336] close(5 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(26 [pid 336] close(6 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(27 [pid 336] close(7 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(28 [pid 336] close(8 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(29 [pid 336] close(9 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] exit_group(0 [pid 340] <... futex resumed>) = ? [pid 336] close(10 [pid 333] <... exit_group resumed>) = ? [pid 340] +++ exited with 0 +++ [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] +++ exited with 0 +++ [pid 336] close(11 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- [pid 339] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(12) = -1 EBADF (Bad file descriptor) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 336] close(13) = -1 EBADF (Bad file descriptor) [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 10 [pid 336] close(14) = -1 EBADF (Bad file descriptor) [pid 336] close(15) = -1 EBADF (Bad file descriptor) [pid 336] close(16) = -1 EBADF (Bad file descriptor) [pid 336] close(17) = -1 EBADF (Bad file descriptor) [pid 336] close(18) = -1 EBADF (Bad file descriptor) [pid 336] close(19) = -1 EBADF (Bad file descriptor) [pid 336] close(20) = -1 EBADF (Bad file descriptor) [pid 336] close(21) = -1 EBADF (Bad file descriptor) [pid 336] close(22) = -1 EBADF (Bad file descriptor) [pid 336] close(23) = -1 EBADF (Bad file descriptor) [pid 336] close(24) = -1 EBADF (Bad file descriptor) [pid 336] close(25) = -1 EBADF (Bad file descriptor) [pid 336] close(26) = -1 EBADF (Bad file descriptor) [pid 336] close(27) = -1 EBADF (Bad file descriptor) [pid 336] close(28) = -1 EBADF (Bad file descriptor) [pid 336] close(29) = -1 EBADF (Bad file descriptor) [pid 336] exit_group(0) = ? ./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x55555697d6a0, 24) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 345 attached ./strace-static-x86_64: Process 344 attached [pid 339] <... futex resumed>) = ? [pid 346] <... openat resumed>) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 346] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [ 24.582181][ T340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 24.590008][ T340] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 24.597807][ T340] [ 24.601633][ T338] FAULT_INJECTION: forcing a failure. [ 24.601633][ T338] name failslab, interval 1, probability 0, space 0, times 0 [ 24.615532][ T335] ------------[ cut here ]------------ [ 24.621259][ T335] refcount_t: underflow; use-after-free. [ 24.626868][ T335] WARNING: CPU: 0 PID: 335 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [pid 346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 346] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[11]}, 88) = 11 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 347] write(3, "67", 2) = 2 [pid 347] clone(child_stack=NULL, flags=0 [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ [ 24.636116][ T338] CPU: 0 PID: 338 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.642967][ T335] Modules linked in: [ 24.646161][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 24.646173][ T338] Call Trace: [ 24.646179][ T338] [ 24.646185][ T338] dump_stack_lvl+0x151/0x1b7 [ 24.654052][ T347] FAULT_INJECTION: forcing a failure. [ 24.654052][ T347] name failslab, interval 1, probability 0, space 0, times 0 [ 24.659877][ T338] ? io_uring_drop_tctx_refs+0x190/0x190 [pid 346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 24.659906][ T338] dump_stack+0x15/0x17 [ 24.663556][ T335] [ 24.665785][ T338] should_fail+0x3c6/0x510 [ 24.665813][ T338] __should_failslab+0xa4/0xe0 [ 24.675508][ T335] CPU: 1 PID: 335 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.682701][ T338] ? anon_vma_fork+0xf7/0x4e0 [ 24.682727][ T338] should_failslab+0x9/0x20 [ 24.708308][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 24.713253][ T338] slab_pre_alloc_hook+0x37/0xd0 [pid 343] exit(0) = ? [pid 343] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 24.724551][ T335] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 24.732110][ T338] ? anon_vma_fork+0xf7/0x4e0 [ 24.732141][ T338] kmem_cache_alloc+0x44/0x200 [ 24.732162][ T338] anon_vma_fork+0xf7/0x4e0 [ 24.752264][ T335] Code: 04 01 48 c7 c7 a0 af 82 85 e8 a4 98 dd fe 0f 0b eb 8b e8 1b 1b 0c ff c6 05 1f 6e 9f 04 01 48 c7 c7 00 b0 82 85 e8 88 98 dd fe <0f> 0b e9 6c ff ff ff e8 fc 1a 0c ff c6 05 01 6e 9f 04 01 48 c7 c7 [ 24.756305][ T338] ? anon_vma_name+0x4c/0x70 [ 24.756332][ T338] ? vm_area_dup+0x17a/0x230 [ 24.784772][ T338] copy_mm+0xa3a/0x13e0 [ 24.788772][ T338] ? copy_signal+0x610/0x610 [ 24.793188][ T338] ? __init_rwsem+0xd6/0x1c0 [ 24.797760][ T338] ? copy_signal+0x4e3/0x610 [ 24.802187][ T338] copy_process+0x12bc/0x3260 [ 24.806699][ T338] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.811640][ T338] ? __kasan_check_write+0x14/0x20 [ 24.813181][ T335] RSP: 0018:ffffc90000bf7968 EFLAGS: 00010246 [ 24.816588][ T338] kernel_clone+0x21e/0x9e0 [ 24.816614][ T338] ? _raw_spin_unlock_irq+0x4e/0x70 [ 24.831867][ T338] ? create_io_thread+0x1e0/0x1e0 [ 24.836331][ T335] [pid 342] close(3) = -1 EBADF (Bad file descriptor) [pid 342] close(4) = -1 EBADF (Bad file descriptor) [pid 342] close(5) = -1 EBADF (Bad file descriptor) [pid 342] close(6) = -1 EBADF (Bad file descriptor) [pid 342] close(7) = -1 EBADF (Bad file descriptor) [pid 342] close(8) = -1 EBADF (Bad file descriptor) [pid 342] close(9) = -1 EBADF (Bad file descriptor) [pid 342] close(10) = -1 EBADF (Bad file descriptor) [pid 342] close(11) = -1 EBADF (Bad file descriptor) [pid 342] close(12) = -1 EBADF (Bad file descriptor) [pid 342] close(13) = -1 EBADF (Bad file descriptor) [pid 342] close(14) = -1 EBADF (Bad file descriptor) [pid 342] close(15) = -1 EBADF (Bad file descriptor) [pid 342] close(16) = -1 EBADF (Bad file descriptor) [pid 342] close(17) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 342] close(22) = -1 EBADF (Bad file descriptor) [pid 342] close(23) = -1 EBADF (Bad file descriptor) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [pid 342] exit_group(0) = ? [ 24.836725][ T338] __x64_sys_clone+0x23f/0x290 [ 24.843497][ T338] ? __do_sys_vfork+0x130/0x130 [ 24.843664][ T335] RAX: 4e89b09bdad21300 RBX: 0000000000000003 RCX: ffff888117913b40 [ 24.848183][ T338] ? __kasan_check_read+0x11/0x20 [ 24.848208][ T338] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 24.848229][ T338] do_syscall_64+0x3d/0xb0 [ 24.848250][ T338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.863881][ T335] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 24.866665][ T338] RIP: 0033:0x7f517cc0f399 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 303] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 8 [ 24.866684][ T338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.889914][ T335] RBP: ffffc90000bf7978 R08: ffffffff81573f65 R09: ffffed103ee04e93 [ 24.908156][ T338] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.908182][ T338] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 24.908197][ T338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 ./strace-static-x86_64: Process 348 attached [pid 345] set_robust_list(0x55555697d6a0, 24 [pid 338] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [ 24.908209][ T338] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 24.908221][ T338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 24.908233][ T338] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 24.949225][ T335] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11020f30c5e [ 24.955457][ T338] [ 24.956323][ T347] CPU: 0 PID: 347 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.964722][ T335] R13: ffff8881079862f0 R14: 0000000000000003 R15: ffff88811eac3e39 [ 24.971078][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 24.971092][ T347] Call Trace: [ 24.971098][ T347] [ 24.971104][ T347] dump_stack_lvl+0x151/0x1b7 [ 24.974943][ T335] FS: 00007f517cbcf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.984108][ T347] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.984136][ T347] dump_stack+0x15/0x17 [ 24.992607][ T335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.001810][ T347] should_fail+0x3c6/0x510 [ 25.001837][ T347] __should_failslab+0xa4/0xe0 [ 25.005668][ T335] CR2: 00007ffdf983d2f8 CR3: 000000011f888000 CR4: 00000000003506a0 [ 25.007711][ T347] ? anon_vma_fork+0xf7/0x4e0 [ 25.007735][ T347] should_failslab+0x9/0x20 [ 25.013313][ T335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.021081][ T347] slab_pre_alloc_hook+0x37/0xd0 [ 25.021108][ T347] ? anon_vma_fork+0xf7/0x4e0 [ 25.021130][ T347] kmem_cache_alloc+0x44/0x200 [ 25.027468][ T335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.030546][ T347] anon_vma_fork+0xf7/0x4e0 [ 25.030570][ T347] ? anon_vma_name+0x4c/0x70 [ 25.030591][ T347] ? vm_area_dup+0x17a/0x230 [ 25.037817][ T335] Call Trace: [ 25.041217][ T347] copy_mm+0xa3a/0x13e0 [ 25.041246][ T347] ? copy_signal+0x610/0x610 [ 25.047020][ T335] [ 25.053626][ T347] ? __init_rwsem+0xd6/0x1c0 [ 25.053656][ T347] ? copy_signal+0x4e3/0x610 [ 25.053679][ T347] copy_process+0x12bc/0x3260 [ 25.059175][ T335] ? show_regs+0x58/0x60 [pid 348] set_robust_list(0x55555697d6a0, 24 [pid 347] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 345] <... set_robust_list resumed>) = 0 [pid 344] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ [pid 338] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... set_robust_list resumed>) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 338] <... futex resumed>) = 0 [pid 337] close(3 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 345] <... prctl resumed>) = 0 [pid 338] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] <... close resumed>) = 0 [pid 348] <... prctl resumed>) = 0 [pid 345] setpgid(0, 0 [pid 337] close(4 [pid 348] setpgid(0, 0 [pid 345] <... setpgid resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... setpgid resumed>) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 337] close(5 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 345] <... openat resumed>) = 3 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... openat resumed>) = 3 [pid 345] write(3, "1000", 4 [pid 337] close(6 [pid 348] write(3, "1000", 4 [pid 345] <... write resumed>) = 4 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... write resumed>) = 4 [pid 345] close(3 [pid 337] close(7 [pid 348] close(3 [pid 345] <... close resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 348] <... close resumed>) = 0 [pid 345] read(200, [pid 337] close(8 [pid 348] read(200, [pid 345] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] close(9 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 348] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... futex resumed>) = 0 [pid 345] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 337] close(10 [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 8 [pid 348] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 345] <... rt_sigaction resumed>NULL, 8) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 337] close(11 [pid 348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 337] close(12 [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 345] <... mmap resumed>) = 0x7f517cbaf000 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... mmap resumed>) = 0x7f517cbaf000 [pid 345] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 337] close(13 [pid 348] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 345] <... mprotect resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... mprotect resumed>) = 0 [pid 345] rt_sigprocmask(SIG_BLOCK, ~[], [pid 337] close(14 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 345] <... rt_sigprocmask resumed>[], 8) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 337] close(15 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 337] close(16 [pid 348] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 345] rt_sigprocmask(SIG_SETMASK, [], [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] rt_sigprocmask(SIG_SETMASK, [], [pid 345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] close(17 [pid 348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 345] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 337] close(18 [pid 348] <... futex resumed>) = 0 [pid 345] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] close(19) = -1 EBADF (Bad file descriptor) [pid 337] close(20) = -1 EBADF (Bad file descriptor) [pid 337] close(21) = -1 EBADF (Bad file descriptor) [pid 337] close(22) = -1 EBADF (Bad file descriptor) [pid 337] close(23) = -1 EBADF (Bad file descriptor) [pid 337] close(24) = -1 EBADF (Bad file descriptor) [pid 337] close(25) = -1 EBADF (Bad file descriptor) [pid 337] close(26) = -1 EBADF (Bad file descriptor) [pid 337] close(27) = -1 EBADF (Bad file descriptor) [pid 337] close(28) = -1 EBADF (Bad file descriptor) [pid 337] close(29) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0 [pid 338] <... futex resumed>) = ? [pid 337] <... exit_group resumed>) = ? [pid 338] +++ exited with 0 +++ [pid 337] +++ exited with 0 +++ [pid 347] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 9 [pid 346] close(3) = 0 [pid 346] close(4) = -1 EBADF (Bad file descriptor) [pid 346] close(5) = -1 EBADF (Bad file descriptor) [pid 346] close(6) = -1 EBADF (Bad file descriptor) [pid 346] close(7) = -1 EBADF (Bad file descriptor) [pid 346] close(8) = -1 EBADF (Bad file descriptor) [pid 346] close(9) = -1 EBADF (Bad file descriptor) [pid 346] close(10) = -1 EBADF (Bad file descriptor) [pid 346] close(11) = -1 EBADF (Bad file descriptor) [pid 346] close(12) = -1 EBADF (Bad file descriptor) [pid 346] close(13) = -1 EBADF (Bad file descriptor) [pid 346] close(14) = -1 EBADF (Bad file descriptor) [pid 346] close(15) = -1 EBADF (Bad file descriptor) [pid 346] close(16) = -1 EBADF (Bad file descriptor) [pid 346] close(17) = -1 EBADF (Bad file descriptor) [pid 346] close(18) = -1 EBADF (Bad file descriptor) [pid 346] close(19) = -1 EBADF (Bad file descriptor) [pid 346] close(20) = -1 EBADF (Bad file descriptor) [pid 346] close(21) = -1 EBADF (Bad file descriptor) [pid 346] close(22) = -1 EBADF (Bad file descriptor) [pid 346] close(23) = -1 EBADF (Bad file descriptor) [pid 346] close(24) = -1 EBADF (Bad file descriptor) [pid 346] close(25) = -1 EBADF (Bad file descriptor) [pid 346] close(26) = -1 EBADF (Bad file descriptor) [pid 346] close(27) = -1 EBADF (Bad file descriptor) [pid 346] close(28) = -1 EBADF (Bad file descriptor) [pid 346] close(29) = -1 EBADF (Bad file descriptor) [pid 346] exit_group(0 [pid 347] <... futex resumed>) = ? [pid 346] <... exit_group resumed>) = ? [pid 347] +++ exited with 0 +++ [pid 346] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 12 ./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x55555697d6a0, 24) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 [pid 350] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 350] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 350] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[9]}, 88) = 9 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 351] write(3, "67", 2) = 2 [pid 351] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 355 attached ./strace-static-x86_64: Process 354 attached ./strace-static-x86_64: Process 353 attached ./strace-static-x86_64: Process 352 attached [ 25.062486][ T347] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.062512][ T347] ? __kasan_check_write+0x14/0x20 [ 25.071191][ T335] ? __warn+0x160/0x2f0 [ 25.075067][ T347] kernel_clone+0x21e/0x9e0 [ 25.075092][ T347] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.080466][ T335] ? refcount_warn_saturate+0x158/0x1a0 [ 25.084178][ T347] ? create_io_thread+0x1e0/0x1e0 [ 25.084206][ T347] __x64_sys_clone+0x23f/0x290 [ 25.092885][ T335] ? report_bug+0x3d9/0x5b0 [ 25.096328][ T347] ? __do_sys_vfork+0x130/0x130 [ 25.096356][ T347] ? __kasan_check_read+0x11/0x20 [ 25.101644][ T335] ? refcount_warn_saturate+0x158/0x1a0 [ 25.105184][ T347] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.105208][ T347] do_syscall_64+0x3d/0xb0 [ 25.109253][ T335] ? handle_bug+0x41/0x70 [ 25.112300][ T347] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.112327][ T347] RIP: 0033:0x7f517cc0f399 [ 25.117414][ T335] ? exc_invalid_op+0x1b/0x50 [ 25.119505][ T347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.119523][ T347] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.119546][ T347] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 25.125157][ T335] ? asm_exc_invalid_op+0x1b/0x20 [ 25.128355][ T347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.128370][ T347] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.128384][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [pid 355] set_robust_list(0x7f517cbcf9a0, 24 [pid 354] set_robust_list(0x55555697d6a0, 24 [pid 353] set_robust_list(0x55555697d6a0, 24 [pid 352] set_robust_list(0x7f517cbcf9a0, 24 [pid 355] <... set_robust_list resumed>) = 0 [pid 354] <... set_robust_list resumed>) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 352] <... set_robust_list resumed>) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 352] rt_sigprocmask(SIG_SETMASK, [], [pid 355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] <... prctl resumed>) = 0 [pid 353] <... prctl resumed>) = 0 [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 355] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 354] setpgid(0, 0 [pid 353] setpgid(0, 0 [pid 352] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 355] <... openat resumed>) = 3 [pid 354] <... setpgid resumed>) = 0 [pid 353] <... setpgid resumed>) = 0 [pid 352] <... openat resumed>) = 3 [pid 355] write(3, "67", 2 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 352] write(3, "67", 2 [pid 355] <... write resumed>) = 2 [pid 354] <... openat resumed>) = 3 [pid 353] <... openat resumed>) = 3 [pid 352] <... write resumed>) = 2 [pid 355] clone(child_stack=NULL, flags=0 [pid 354] write(3, "1000", 4 [pid 353] write(3, "1000", 4 [pid 352] clone(child_stack=NULL, flags=0 [pid 354] <... write resumed>) = 4 [pid 353] <... write resumed>) = 4 [pid 354] close(3 [pid 353] close(3 [pid 354] <... close resumed>) = 0 [pid 353] <... close resumed>) = 0 [pid 354] read(200, [pid 353] read(200, [pid 354] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 353] <... futex resumed>) = 0 [pid 354] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 353] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 354] <... rt_sigaction resumed>NULL, 8) = 0 [pid 353] <... rt_sigaction resumed>NULL, 8) = 0 [pid 354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 354] <... mmap resumed>) = 0x7f517cbaf000 [pid 353] <... mmap resumed>) = 0x7f517cbaf000 [pid 354] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 353] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 354] <... mprotect resumed>) = 0 [pid 353] <... mprotect resumed>) = 0 [pid 354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 353] rt_sigprocmask(SIG_BLOCK, ~[], [pid 354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 353] <... rt_sigprocmask resumed>[], 8) = 0 [pid 354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 354] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 353] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 354] rt_sigprocmask(SIG_SETMASK, [], [pid 353] rt_sigprocmask(SIG_SETMASK, [], [pid 354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 353] <... futex resumed>) = 0 [pid 354] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 25.128398][ T347] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 25.133917][ T335] ? __wake_up_klogd+0xd5/0x110 [ 25.136951][ T347] [ 25.182369][ T351] FAULT_INJECTION: forcing a failure. [ 25.182369][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 25.185236][ T335] ? refcount_warn_saturate+0x158/0x1a0 [ 25.190704][ T351] CPU: 0 PID: 351 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.194728][ T335] ? refcount_warn_saturate+0x158/0x1a0 ./strace-static-x86_64: Process 358 attached ./strace-static-x86_64: Process 357 attached ./strace-static-x86_64: Process 356 attached [pid 350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 357] set_robust_list(0x7f517cbcf9a0, 24 [pid 356] set_robust_list(0x7f517cbcf9a0, 24 [pid 351] <... clone resumed>) = 8 [pid 357] <... set_robust_list resumed>) = 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 351] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] rt_sigprocmask(SIG_SETMASK, [], [pid 356] rt_sigprocmask(SIG_SETMASK, [], [pid 351] <... futex resumed>) = 0 [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 351] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 356] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 357] <... openat resumed>) = 3 [pid 356] <... openat resumed>) = 3 [pid 357] write(3, "67", 2 [pid 356] write(3, "67", 2 [pid 357] <... write resumed>) = 2 [pid 356] <... write resumed>) = 2 [pid 345] close(3 [pid 357] clone(child_stack=NULL, flags=0 [pid 356] clone(child_stack=NULL, flags=0 [pid 345] <... close resumed>) = 0 [ 25.200320][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 25.200333][ T351] Call Trace: [ 25.200338][ T351] [ 25.200345][ T351] dump_stack_lvl+0x151/0x1b7 [ 25.200367][ T351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.200391][ T351] dump_stack+0x15/0x17 [ 25.200411][ T351] should_fail+0x3c6/0x510 [ 25.200435][ T351] __should_failslab+0xa4/0xe0 [ 25.200456][ T351] ? anon_vma_clone+0x9a/0x500 [ 25.200477][ T351] should_failslab+0x9/0x20 [ 25.200496][ T351] slab_pre_alloc_hook+0x37/0xd0 [pid 345] close(4) = -1 EBADF (Bad file descriptor) [pid 345] close(5) = -1 EBADF (Bad file descriptor) [pid 345] close(6) = -1 EBADF (Bad file descriptor) [pid 345] close(7) = -1 EBADF (Bad file descriptor) [pid 345] close(8) = -1 EBADF (Bad file descriptor) [pid 345] close(9) = -1 EBADF (Bad file descriptor) [pid 345] close(10) = -1 EBADF (Bad file descriptor) [pid 345] close(11) = -1 EBADF (Bad file descriptor) [pid 345] close(12) = -1 EBADF (Bad file descriptor) [pid 345] close(13) = -1 EBADF (Bad file descriptor) [pid 345] close(14) = -1 EBADF (Bad file descriptor) [pid 345] close(15) = -1 EBADF (Bad file descriptor) [pid 345] close(16) = -1 EBADF (Bad file descriptor) [pid 345] close(17) = -1 EBADF (Bad file descriptor) [pid 345] close(18) = -1 EBADF (Bad file descriptor) [pid 345] close(19) = -1 EBADF (Bad file descriptor) [pid 345] close(20) = -1 EBADF (Bad file descriptor) [pid 345] close(21) = -1 EBADF (Bad file descriptor) [pid 345] close(22) = -1 EBADF (Bad file descriptor) [pid 345] close(23) = -1 EBADF (Bad file descriptor) [pid 345] close(24) = -1 EBADF (Bad file descriptor) [pid 345] close(25) = -1 EBADF (Bad file descriptor) [pid 345] close(26) = -1 EBADF (Bad file descriptor) [pid 345] close(27) = -1 EBADF (Bad file descriptor) [pid 345] close(28) = -1 EBADF (Bad file descriptor) [pid 345] close(29) = -1 EBADF (Bad file descriptor) [pid 345] exit_group(0) = ? [ 25.200517][ T351] ? anon_vma_clone+0x9a/0x500 [ 25.200539][ T351] kmem_cache_alloc+0x44/0x200 [ 25.200560][ T351] anon_vma_clone+0x9a/0x500 [ 25.200583][ T351] anon_vma_fork+0x91/0x4e0 [ 25.200603][ T351] ? anon_vma_name+0x43/0x70 [ 25.200630][ T351] ? vm_area_dup+0x17a/0x230 [ 25.200652][ T351] copy_mm+0xa3a/0x13e0 [ 25.200677][ T351] ? copy_signal+0x610/0x610 [ 25.200699][ T351] ? __init_rwsem+0xd6/0x1c0 [ 25.200720][ T351] ? copy_signal+0x4e3/0x610 [ 25.204938][ T335] vm_area_free_no_check+0x123/0x130 [ 25.209100][ T351] copy_process+0x12bc/0x3260 [ 25.209128][ T351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.214831][ T335] copy_mm+0xefb/0x13e0 [ 25.219084][ T351] ? __kasan_check_write+0x14/0x20 [ 25.223599][ T335] ? copy_signal+0x610/0x610 [ 25.243037][ T351] kernel_clone+0x21e/0x9e0 [ 25.243059][ T351] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.243077][ T351] ? create_io_thread+0x1e0/0x1e0 [ 25.243098][ T351] __x64_sys_clone+0x23f/0x290 [ 25.243117][ T351] ? __do_sys_vfork+0x130/0x130 [ 25.243140][ T351] ? __kasan_check_read+0x11/0x20 [pid 358] exit(0) = ? [ 25.257674][ T335] ? __init_rwsem+0xd6/0x1c0 [ 25.259097][ T351] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.259120][ T351] do_syscall_64+0x3d/0xb0 [ 25.263953][ T335] ? copy_signal+0x4e3/0x610 [ 25.271764][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.279588][ T335] copy_process+0x12bc/0x3260 [ 25.287385][ T351] RIP: 0033:0x7f517cc0f399 [ 25.295218][ T335] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.299886][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.299903][ T351] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.299923][ T351] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 25.305423][ T335] ? __kasan_check_write+0x14/0x20 [ 25.315160][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.315176][ T351] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.315189][ T351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 25.315203][ T351] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 25.321293][ T335] kernel_clone+0x21e/0x9e0 [ 25.330619][ T351] [ 25.334996][ T356] FAULT_INJECTION: forcing a failure. [ 25.334996][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 25.336064][ T355] FAULT_INJECTION: forcing a failure. [ 25.336064][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 25.346216][ T356] CPU: 0 PID: 356 Comm: syz-executor257 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.349953][ T335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.351794][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 25.351807][ T356] Call Trace: [ 25.356299][ T335] ? create_io_thread+0x1e0/0x1e0 [ 25.361768][ T356] [ 25.361775][ T356] dump_stack_lvl+0x151/0x1b7 [ 25.361795][ T356] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.377864][ T335] __x64_sys_clone+0x23f/0x290 [ 25.379217][ T356] ? rwsem_wake+0x12e/0x220 [ 25.383557][ T335] ? __do_sys_vfork+0x130/0x130 [ 25.388329][ T356] dump_stack+0x15/0x17 [ 25.388350][ T356] should_fail+0x3c6/0x510 [ 25.388372][ T356] __should_failslab+0xa4/0xe0 [ 25.388393][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 25.421990][ T335] ? __kasan_check_read+0x11/0x20 [ 25.423654][ T356] should_failslab+0x9/0x20 [ 25.423677][ T356] slab_pre_alloc_hook+0x37/0xd0 [ 25.438739][ T335] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.442504][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 25.442529][ T356] kmem_cache_alloc+0x44/0x200 [ 25.454642][ T335] do_syscall_64+0x3d/0xb0 [ 25.456392][ T356] anon_vma_fork+0xf7/0x4e0 [ 25.456416][ T356] ? anon_vma_name+0x43/0x70 [ 25.473052][ T335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.475050][ T356] ? vm_area_dup+0x17a/0x230 [ 25.475075][ T356] copy_mm+0xa3a/0x13e0 [ 25.490338][ T335] RIP: 0033:0x7f517cc0f399 [ 25.493627][ T356] ? copy_signal+0x610/0x610 [ 25.493652][ T356] ? __init_rwsem+0xd6/0x1c0 [ 25.517002][ T335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.518572][ T356] ? copy_signal+0x4e3/0x610 [ 25.518602][ T356] copy_process+0x12bc/0x3260 [ 25.518629][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.526903][ T335] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 [ 25.527770][ T356] ? __kasan_check_write+0x14/0x20 [ 25.527797][ T356] kernel_clone+0x21e/0x9e0 [ 25.581006][ T335] ORIG_RAX: 0000000000000038 [ 25.583856][ T356] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.583883][ T356] ? create_io_thread+0x1e0/0x1e0 [ 25.608895][ T335] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 25.619163][ T356] __x64_sys_clone+0x23f/0x290 [ 25.619191][ T356] ? __do_sys_vfork+0x130/0x130 [ 25.668656][ T335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.671947][ T356] ? __kasan_check_read+0x11/0x20 [ 25.671973][ T356] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.682816][ T335] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.686335][ T356] do_syscall_64+0x3d/0xb0 [ 25.686358][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [pid 334] close(3) = 0 [pid 334] close(4) = -1 EBADF (Bad file descriptor) [pid 334] close(5) = -1 EBADF (Bad file descriptor) [pid 334] close(6) = -1 EBADF (Bad file descriptor) [pid 334] close(7) = -1 EBADF (Bad file descriptor) [pid 334] close(8) = -1 EBADF (Bad file descriptor) [pid 334] close(9) = -1 EBADF (Bad file descriptor) [pid 334] close(10) = -1 EBADF (Bad file descriptor) [pid 334] close(11) = -1 EBADF (Bad file descriptor) [pid 334] close(12) = -1 EBADF (Bad file descriptor) [pid 334] close(13) = -1 EBADF (Bad file descriptor) [pid 334] close(14) = -1 EBADF (Bad file descriptor) [pid 334] close(15) = -1 EBADF (Bad file descriptor) [pid 334] close(16) = -1 EBADF (Bad file descriptor) [pid 334] close(17) = -1 EBADF (Bad file descriptor) [pid 334] close(18) = -1 EBADF (Bad file descriptor) [pid 334] close(19) = -1 EBADF (Bad file descriptor) [pid 334] close(20) = -1 EBADF (Bad file descriptor) [pid 334] close(21) = -1 EBADF (Bad file descriptor) [pid 334] close(22) = -1 EBADF (Bad file descriptor) [pid 334] close(23) = -1 EBADF (Bad file descriptor) [pid 334] close(24) = -1 EBADF (Bad file descriptor) [pid 334] close(25) = -1 EBADF (Bad file descriptor) [pid 334] close(26) = -1 EBADF (Bad file descriptor) [pid 334] close(27) = -1 EBADF (Bad file descriptor) [pid 334] close(28) = -1 EBADF (Bad file descriptor) [pid 334] close(29) = -1 EBADF (Bad file descriptor) [pid 334] exit_group(0) = ? [ 25.706394][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 25.708384][ T356] RIP: 0033:0x7f517cc0f399 [ 25.708405][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.708422][ T356] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 [ 25.717184][ T335] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 25.717583][ T356] ORIG_RAX: 0000000000000038 [ 25.732767][ T335] [ 25.737295][ T356] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 25.737313][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.737325][ T356] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.755599][ T335] ---[ end trace 413cad65730f18ab ]--- [ 25.756035][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 25.983450][ T356] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 25.991348][ T356] [ 25.994214][ T355] CPU: 1 PID: 355 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.005663][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.015557][ T355] Call Trace: [ 26.018685][ T355] [ 26.021464][ T355] dump_stack_lvl+0x151/0x1b7 [ 26.025980][ T355] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.031447][ T355] dump_stack+0x15/0x17 [ 26.035454][ T355] should_fail+0x3c6/0x510 [ 26.039807][ T355] __should_failslab+0xa4/0xe0 [ 26.044406][ T355] ? anon_vma_clone+0x9a/0x500 [ 26.049091][ T355] should_failslab+0x9/0x20 [ 26.053428][ T355] slab_pre_alloc_hook+0x37/0xd0 [ 26.058203][ T355] ? anon_vma_clone+0x9a/0x500 [ 26.062803][ T355] kmem_cache_alloc+0x44/0x200 [ 26.067401][ T355] anon_vma_clone+0x9a/0x500 [ 26.071856][ T355] anon_vma_fork+0x91/0x4e0 [ 26.076165][ T355] ? anon_vma_name+0x43/0x70 [ 26.080594][ T355] ? vm_area_dup+0x17a/0x230 [ 26.085019][ T355] copy_mm+0xa3a/0x13e0 [ 26.089016][ T355] ? copy_signal+0x610/0x610 [ 26.093455][ T355] ? __init_rwsem+0xd6/0x1c0 [ 26.097867][ T355] ? copy_signal+0x4e3/0x610 [ 26.102291][ T355] copy_process+0x12bc/0x3260 [ 26.106808][ T355] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.111752][ T355] ? __kasan_check_write+0x14/0x20 [ 26.116820][ T355] kernel_clone+0x21e/0x9e0 [ 26.121161][ T355] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.126201][ T355] ? create_io_thread+0x1e0/0x1e0 [ 26.131058][ T355] __x64_sys_clone+0x23f/0x290 [ 26.135747][ T355] ? __do_sys_vfork+0x130/0x130 [ 26.140437][ T355] ? __kasan_check_read+0x11/0x20 [ 26.145288][ T355] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.151108][ T355] do_syscall_64+0x3d/0xb0 [ 26.155356][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.161082][ T355] RIP: 0033:0x7f517cc0f399 [ 26.165341][ T355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.184867][ T355] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.193208][ T355] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 26.201019][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.208920][ T355] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.216731][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 26.224630][ T355] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 26.232442][ T355] [ 26.236674][ T357] FAULT_INJECTION: forcing a failure. [pid 351] <... futex resumed>) = ? [pid 358] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ [pid 345] +++ exited with 0 +++ [pid 335] <... clone resumed>) = ? [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 335] +++ exited with 0 +++ [pid 334] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=76} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 9 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 9 ./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x55555697d6a0, 24) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 362] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[10]}, 88) = 10 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 360 attached [ 26.236674][ T357] name failslab, interval 1, probability 0, space 0, times 0 [ 26.237028][ T352] FAULT_INJECTION: forcing a failure. [ 26.237028][ T352] name failslab, interval 1, probability 0, space 0, times 0 [ 26.250264][ T357] CPU: 0 PID: 357 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.272947][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.282841][ T357] Call Trace: [ 26.285970][ T357] [ 26.288741][ T357] dump_stack_lvl+0x151/0x1b7 [pid 356] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 356] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] close(3) = 0 [pid 354] close(4) = -1 EBADF (Bad file descriptor) [pid 354] close(5) = -1 EBADF (Bad file descriptor) [pid 354] close(6) = -1 EBADF (Bad file descriptor) [pid 354] close(7) = -1 EBADF (Bad file descriptor) [pid 354] close(8) = -1 EBADF (Bad file descriptor) [pid 354] close(9) = -1 EBADF (Bad file descriptor) [pid 354] close(10) = -1 EBADF (Bad file descriptor) [pid 354] close(11) = -1 EBADF (Bad file descriptor) [pid 354] close(12) = -1 EBADF (Bad file descriptor) [pid 354] close(13) = -1 EBADF (Bad file descriptor) [pid 354] close(14) = -1 EBADF (Bad file descriptor) [pid 354] close(15) = -1 EBADF (Bad file descriptor) [pid 354] close(16) = -1 EBADF (Bad file descriptor) [pid 354] close(17) = -1 EBADF (Bad file descriptor) [pid 354] close(18) = -1 EBADF (Bad file descriptor) [pid 354] close(19) = -1 EBADF (Bad file descriptor) [pid 354] close(20) = -1 EBADF (Bad file descriptor) [pid 354] close(21) = -1 EBADF (Bad file descriptor) [pid 354] close(22) = -1 EBADF (Bad file descriptor) [pid 354] close(23) = -1 EBADF (Bad file descriptor) [pid 354] close(24) = -1 EBADF (Bad file descriptor) [pid 354] close(25) = -1 EBADF (Bad file descriptor) [pid 354] close(26) = -1 EBADF (Bad file descriptor) [pid 354] close(27) = -1 EBADF (Bad file descriptor) [pid 354] close(28) = -1 EBADF (Bad file descriptor) [pid 354] close(29) = -1 EBADF (Bad file descriptor) [pid 354] exit_group(0 [pid 356] <... futex resumed>) = ? [pid 354] <... exit_group resumed>) = ? [pid 356] +++ exited with 0 +++ [pid 354] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 14 [pid 362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x55555697d6a0, 24) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [ 26.293256][ T357] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.298724][ T357] ? rwsem_wake+0x12e/0x220 [ 26.303063][ T357] dump_stack+0x15/0x17 [ 26.307053][ T357] should_fail+0x3c6/0x510 [ 26.311310][ T357] __should_failslab+0xa4/0xe0 [ 26.315909][ T357] ? anon_vma_fork+0xf7/0x4e0 [ 26.320425][ T357] should_failslab+0x9/0x20 [ 26.324855][ T357] slab_pre_alloc_hook+0x37/0xd0 [ 26.329624][ T357] ? anon_vma_fork+0xf7/0x4e0 [ 26.334136][ T357] kmem_cache_alloc+0x44/0x200 [ 26.338736][ T357] anon_vma_fork+0xf7/0x4e0 [pid 364] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[15]}, 88) = 15 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 26.343080][ T357] ? anon_vma_name+0x43/0x70 [ 26.347501][ T357] ? vm_area_dup+0x17a/0x230 [ 26.351927][ T357] copy_mm+0xa3a/0x13e0 [ 26.355923][ T357] ? copy_signal+0x610/0x610 [ 26.360350][ T357] ? __init_rwsem+0xd6/0x1c0 [ 26.364771][ T357] ? copy_signal+0x4e3/0x610 [ 26.369321][ T357] copy_process+0x12bc/0x3260 [ 26.373830][ T357] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.378771][ T357] ? __kasan_check_write+0x14/0x20 [ 26.383725][ T357] kernel_clone+0x21e/0x9e0 [ 26.388058][ T357] ? _raw_spin_unlock_irq+0x4e/0x70 [pid 364] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 360] exit(0) = ? [pid 360] +++ exited with 0 +++ [ 26.393093][ T357] ? create_io_thread+0x1e0/0x1e0 [ 26.397954][ T357] __x64_sys_clone+0x23f/0x290 [ 26.402553][ T357] ? __do_sys_vfork+0x130/0x130 [ 26.407258][ T357] ? __kasan_check_read+0x11/0x20 [ 26.412100][ T357] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.417918][ T357] do_syscall_64+0x3d/0xb0 [ 26.422169][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.427894][ T357] RIP: 0033:0x7f517cc0f399 [pid 350] close(3) = 0 [pid 350] close(4) = -1 EBADF (Bad file descriptor) [pid 350] close(5) = -1 EBADF (Bad file descriptor) [pid 350] close(6) = -1 EBADF (Bad file descriptor) [pid 350] close(7) = -1 EBADF (Bad file descriptor) [pid 350] close(8) = -1 EBADF (Bad file descriptor) [pid 350] close(9) = -1 EBADF (Bad file descriptor) [pid 350] close(10) = -1 EBADF (Bad file descriptor) [pid 350] close(11) = -1 EBADF (Bad file descriptor) [pid 350] close(12) = -1 EBADF (Bad file descriptor) [pid 350] close(13) = -1 EBADF (Bad file descriptor) [pid 350] close(14) = -1 EBADF (Bad file descriptor) [pid 350] close(15) = -1 EBADF (Bad file descriptor) [pid 350] close(16) = -1 EBADF (Bad file descriptor) [pid 350] close(17) = -1 EBADF (Bad file descriptor) [pid 350] close(18) = -1 EBADF (Bad file descriptor) [pid 350] close(19) = -1 EBADF (Bad file descriptor) [pid 350] close(20) = -1 EBADF (Bad file descriptor) [pid 350] close(21) = -1 EBADF (Bad file descriptor) [pid 350] close(22) = -1 EBADF (Bad file descriptor) [pid 350] close(23) = -1 EBADF (Bad file descriptor) [pid 350] close(24) = -1 EBADF (Bad file descriptor) [pid 350] close(25) = -1 EBADF (Bad file descriptor) [pid 350] close(26) = -1 EBADF (Bad file descriptor) [pid 350] close(27) = -1 EBADF (Bad file descriptor) [pid 350] close(28) = -1 EBADF (Bad file descriptor) [pid 350] close(29) = -1 EBADF (Bad file descriptor) [pid 350] exit_group(0) = ? ./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 363] rt_sigprocmask(SIG_SETMASK, [], [pid 362] close(3) = -1 EBADF (Bad file descriptor) [pid 362] close(4 [pid 363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 362] close(5 [pid 363] <... openat resumed>) = 3 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] write(3, "67", 2 [pid 362] close(6 [pid 363] <... write resumed>) = 2 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] clone(child_stack=NULL, flags=0 [ 26.432148][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.451589][ T357] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.459838][ T357] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 26.467645][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.475464][ T357] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.483271][ T357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [pid 362] close(7) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 365 attached ./strace-static-x86_64: Process 361 attached [pid 357] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 355] <... clone resumed>) = ? [ 26.491096][ T357] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 26.498679][ T363] FAULT_INJECTION: forcing a failure. [ 26.498679][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 26.498893][ T357] [ 26.514655][ T352] CPU: 0 PID: 352 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.526100][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.535992][ T352] Call Trace: [ 26.539119][ T352] [ 26.541895][ T352] dump_stack_lvl+0x151/0x1b7 [pid 365] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 365] write(3, "67", 2) = 2 [ 26.546410][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.551875][ T352] dump_stack+0x15/0x17 [ 26.555870][ T352] should_fail+0x3c6/0x510 [ 26.560124][ T352] __should_failslab+0xa4/0xe0 [ 26.561483][ T365] FAULT_INJECTION: forcing a failure. [ 26.561483][ T365] name failslab, interval 1, probability 0, space 0, times 0 [ 26.564721][ T352] ? anon_vma_fork+0x1df/0x4e0 [ 26.564749][ T352] should_failslab+0x9/0x20 [ 26.564769][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 26.591015][ T352] ? anon_vma_fork+0x1df/0x4e0 [ 26.595607][ T352] kmem_cache_alloc+0x44/0x200 [ 26.600209][ T352] anon_vma_fork+0x1df/0x4e0 [ 26.604632][ T352] copy_mm+0xa3a/0x13e0 [ 26.608729][ T352] ? copy_signal+0x610/0x610 [ 26.613140][ T352] ? __init_rwsem+0xd6/0x1c0 [ 26.617561][ T352] ? copy_signal+0x4e3/0x610 [ 26.621992][ T352] copy_process+0x12bc/0x3260 [ 26.626510][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.631453][ T352] ? __kasan_check_write+0x14/0x20 [ 26.636402][ T352] kernel_clone+0x21e/0x9e0 [ 26.640741][ T352] ? _raw_spin_unlock_irq+0x4e/0x70 [pid 365] clone(child_stack=NULL, flags=0 [pid 353] close(3) = 0 [pid 353] close(4) = -1 EBADF (Bad file descriptor) [pid 353] close(5) = -1 EBADF (Bad file descriptor) [pid 353] close(6) = -1 EBADF (Bad file descriptor) [pid 353] close(7) = -1 EBADF (Bad file descriptor) [pid 353] close(8) = -1 EBADF (Bad file descriptor) [pid 353] close(9) = -1 EBADF (Bad file descriptor) [pid 353] close(10) = -1 EBADF (Bad file descriptor) [pid 353] close(11) = -1 EBADF (Bad file descriptor) [pid 353] close(12) = -1 EBADF (Bad file descriptor) [pid 353] close(13) = -1 EBADF (Bad file descriptor) [pid 353] close(14) = -1 EBADF (Bad file descriptor) [pid 353] close(15) = -1 EBADF (Bad file descriptor) [pid 353] close(16) = -1 EBADF (Bad file descriptor) [pid 353] close(17) = -1 EBADF (Bad file descriptor) [pid 353] close(18) = -1 EBADF (Bad file descriptor) [pid 353] close(19) = -1 EBADF (Bad file descriptor) [pid 353] close(20) = -1 EBADF (Bad file descriptor) [pid 353] close(21) = -1 EBADF (Bad file descriptor) [pid 353] close(22) = -1 EBADF (Bad file descriptor) [pid 353] close(23) = -1 EBADF (Bad file descriptor) [pid 353] close(24) = -1 EBADF (Bad file descriptor) [pid 353] close(25) = -1 EBADF (Bad file descriptor) [pid 353] close(26) = -1 EBADF (Bad file descriptor) [pid 353] close(27) = -1 EBADF (Bad file descriptor) [pid 353] close(28) = -1 EBADF (Bad file descriptor) [pid 353] close(29) = -1 EBADF (Bad file descriptor) [pid 353] exit_group(0) = ? [ 26.645769][ T352] ? create_io_thread+0x1e0/0x1e0 [ 26.650636][ T352] __x64_sys_clone+0x23f/0x290 [ 26.655234][ T352] ? __do_sys_vfork+0x130/0x130 [ 26.659935][ T352] ? __kasan_check_read+0x11/0x20 [ 26.664786][ T352] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.670597][ T352] do_syscall_64+0x3d/0xb0 [ 26.674854][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.680574][ T352] RIP: 0033:0x7f517cc0f399 [ 26.684829][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.704275][ T352] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.712514][ T352] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 26.720415][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.728227][ T352] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.736033][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [pid 361] set_robust_list(0x55555697d6a0, 24 [pid 355] +++ exited with 0 +++ [pid 352] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 350] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 361] <... set_robust_list resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=27} --- [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 361] <... setpgid resumed>) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 11 [pid 361] <... openat resumed>) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 361] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[10]}, 88) = 10 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x55555697d6a0, 24) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 366] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[12]}, 88) = 12 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 368] write(3, "67", 2) = 2 [ 26.743948][ T352] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 26.751760][ T352] [ 26.756010][ T365] CPU: 0 PID: 365 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.767462][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.777357][ T365] Call Trace: [ 26.780564][ T365] [ 26.783345][ T365] dump_stack_lvl+0x151/0x1b7 [ 26.787870][ T365] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.793330][ T365] dump_stack+0x15/0x17 [pid 368] clone(child_stack=NULL, flags=0 [pid 361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 26.797317][ T365] should_fail+0x3c6/0x510 [ 26.800960][ T368] FAULT_INJECTION: forcing a failure. [ 26.800960][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 26.801574][ T365] __should_failslab+0xa4/0xe0 [ 26.801598][ T365] ? anon_vma_fork+0xf7/0x4e0 [ 26.823183][ T365] should_failslab+0x9/0x20 [ 26.827517][ T365] slab_pre_alloc_hook+0x37/0xd0 [ 26.832292][ T365] ? anon_vma_fork+0xf7/0x4e0 [ 26.836804][ T365] kmem_cache_alloc+0x44/0x200 [ 26.841407][ T365] anon_vma_fork+0xf7/0x4e0 [ 26.845746][ T365] ? anon_vma_name+0x4c/0x70 [ 26.850271][ T365] ? vm_area_dup+0x17a/0x230 [ 26.854694][ T365] copy_mm+0xa3a/0x13e0 [ 26.858679][ T365] ? copy_signal+0x610/0x610 [ 26.863105][ T365] ? __init_rwsem+0xd6/0x1c0 [ 26.867535][ T365] ? copy_signal+0x4e3/0x610 [ 26.871956][ T365] copy_process+0x12bc/0x3260 [ 26.876475][ T365] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.881423][ T365] ? __kasan_check_write+0x14/0x20 [ 26.886376][ T365] kernel_clone+0x21e/0x9e0 [ 26.890706][ T365] ? _raw_spin_unlock_irq+0x4e/0x70 [pid 361] close(3) = -1 EBADF (Bad file descriptor) [pid 361] close(4) = -1 EBADF (Bad file descriptor) [ 26.895736][ T365] ? create_io_thread+0x1e0/0x1e0 [ 26.900686][ T365] __x64_sys_clone+0x23f/0x290 [ 26.905286][ T365] ? __do_sys_vfork+0x130/0x130 [ 26.909978][ T365] ? __kasan_check_read+0x11/0x20 [ 26.914834][ T365] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.920652][ T365] do_syscall_64+0x3d/0xb0 [ 26.924903][ T365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.930628][ T365] RIP: 0033:0x7f517cc0f399 [pid 361] close(5) = -1 EBADF (Bad file descriptor) [pid 361] close(6) = -1 EBADF (Bad file descriptor) [pid 361] close(7) = -1 EBADF (Bad file descriptor) [pid 361] close(8) = -1 EBADF (Bad file descriptor) [pid 361] close(9) = -1 EBADF (Bad file descriptor) [pid 361] close(10) = -1 EBADF (Bad file descriptor) [pid 361] close(11) = -1 EBADF (Bad file descriptor) [pid 361] close(12) = -1 EBADF (Bad file descriptor) [pid 361] close(13) = -1 EBADF (Bad file descriptor) [pid 361] close(14) = -1 EBADF (Bad file descriptor) [pid 361] close(15) = -1 EBADF (Bad file descriptor) [pid 361] close(16) = -1 EBADF (Bad file descriptor) [pid 361] close(17) = -1 EBADF (Bad file descriptor) [pid 361] close(18) = -1 EBADF (Bad file descriptor) [pid 361] close(19) = -1 EBADF (Bad file descriptor) [pid 361] close(20) = -1 EBADF (Bad file descriptor) [pid 361] close(21) = -1 EBADF (Bad file descriptor) [pid 361] close(22) = -1 EBADF (Bad file descriptor) [pid 361] close(23) = -1 EBADF (Bad file descriptor) [pid 361] close(24) = -1 EBADF (Bad file descriptor) [pid 361] close(25) = -1 EBADF (Bad file descriptor) [pid 361] close(26) = -1 EBADF (Bad file descriptor) [pid 361] close(27) = -1 EBADF (Bad file descriptor) [pid 361] close(28) = -1 EBADF (Bad file descriptor) [pid 361] close(29) = -1 EBADF (Bad file descriptor) [pid 361] exit_group(0) = ? [ 26.934884][ T365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.954323][ T365] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.962658][ T365] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 26.970468][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.978276][ T365] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.986087][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 26.993997][ T365] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 27.001801][ T365] [ 27.004668][ T368] CPU: 1 PID: 368 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.016118][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.026138][ T368] Call Trace: [ 27.029265][ T368] [ 27.032041][ T368] dump_stack_lvl+0x151/0x1b7 [ 27.036644][ T368] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.042110][ T368] dump_stack+0x15/0x17 [ 27.046104][ T368] should_fail+0x3c6/0x510 [ 27.050444][ T368] __should_failslab+0xa4/0xe0 [ 27.055043][ T368] ? anon_vma_fork+0xf7/0x4e0 [ 27.059557][ T368] should_failslab+0x9/0x20 [ 27.063905][ T368] slab_pre_alloc_hook+0x37/0xd0 [ 27.068667][ T368] ? anon_vma_fork+0xf7/0x4e0 [ 27.073178][ T368] kmem_cache_alloc+0x44/0x200 [ 27.077786][ T368] anon_vma_fork+0xf7/0x4e0 [ 27.082121][ T368] ? anon_vma_name+0x43/0x70 [ 27.086546][ T368] ? vm_area_dup+0x17a/0x230 [ 27.090977][ T368] copy_mm+0xa3a/0x13e0 [ 27.094973][ T368] ? copy_signal+0x610/0x610 [ 27.099512][ T368] ? __init_rwsem+0xd6/0x1c0 [ 27.103936][ T368] ? copy_signal+0x4e3/0x610 [ 27.108363][ T368] copy_process+0x12bc/0x3260 [ 27.112967][ T368] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.117910][ T368] ? __kasan_check_write+0x14/0x20 [ 27.122861][ T368] kernel_clone+0x21e/0x9e0 [ 27.127195][ T368] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.132228][ T368] ? create_io_thread+0x1e0/0x1e0 [ 27.137090][ T368] __x64_sys_clone+0x23f/0x290 [ 27.141691][ T368] ? __do_sys_vfork+0x130/0x130 ./strace-static-x86_64: Process 367 attached [pid 365] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 357] +++ exited with 0 +++ [pid 353] +++ exited with 0 +++ [pid 352] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] +++ exited with 0 +++ [pid 365] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] +++ exited with 0 +++ [pid 352] <... futex resumed>) = 0 [pid 365] <... futex resumed>) = 0 [pid 352] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] close(3) = 0 [pid 364] close(4) = -1 EBADF (Bad file descriptor) [pid 364] close(5) = -1 EBADF (Bad file descriptor) [pid 364] close(6) = -1 EBADF (Bad file descriptor) [pid 364] close(7) = -1 EBADF (Bad file descriptor) [pid 364] close(8) = -1 EBADF (Bad file descriptor) [pid 364] close(9) = -1 EBADF (Bad file descriptor) [pid 364] close(10) = -1 EBADF (Bad file descriptor) [pid 364] close(11) = -1 EBADF (Bad file descriptor) [pid 364] close(12) = -1 EBADF (Bad file descriptor) [pid 364] close(13) = -1 EBADF (Bad file descriptor) [pid 364] close(14) = -1 EBADF (Bad file descriptor) [pid 364] close(15) = -1 EBADF (Bad file descriptor) [pid 364] close(16) = -1 EBADF (Bad file descriptor) [pid 364] close(17) = -1 EBADF (Bad file descriptor) [pid 364] close(18) = -1 EBADF (Bad file descriptor) [pid 364] close(19) = -1 EBADF (Bad file descriptor) [pid 364] close(20) = -1 EBADF (Bad file descriptor) [pid 364] close(21) = -1 EBADF (Bad file descriptor) [pid 364] close(22) = -1 EBADF (Bad file descriptor) [pid 364] close(23) = -1 EBADF (Bad file descriptor) [pid 364] close(24) = -1 EBADF (Bad file descriptor) [pid 364] close(25) = -1 EBADF (Bad file descriptor) [pid 364] close(26) = -1 EBADF (Bad file descriptor) [pid 364] close(27) = -1 EBADF (Bad file descriptor) [pid 364] close(28) = -1 EBADF (Bad file descriptor) [pid 364] close(29) = -1 EBADF (Bad file descriptor) [pid 364] exit_group(0 [pid 365] <... futex resumed>) = ? [pid 364] <... exit_group resumed>) = ? [pid 365] +++ exited with 0 +++ [pid 364] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 302] <... restart_syscall resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 11 [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 16 [pid 298] <... clone resumed>, child_tidptr=0x55555697d690) = 11 [ 27.146374][ T368] ? __kasan_check_read+0x11/0x20 [ 27.151255][ T368] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.157053][ T368] do_syscall_64+0x3d/0xb0 [ 27.161412][ T368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.167121][ T368] RIP: 0033:0x7f517cc0f399 [ 27.171376][ T368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.190903][ T368] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x55555697d6a0, 24) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 348] close(3./strace-static-x86_64: Process 370 attached ./strace-static-x86_64: Process 371 attached ) = 0 [pid 370] set_robust_list(0x55555697d6a0, 24 [pid 348] close(4 [pid 371] set_robust_list(0x55555697d6a0, 24 [pid 370] <... set_robust_list resumed>) = 0 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(5 [pid 371] <... set_robust_list resumed>) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... prctl resumed>) = 0 [pid 370] <... prctl resumed>) = 0 [pid 348] close(6 [pid 371] setpgid(0, 0 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... setpgid resumed>) = 0 [pid 370] setpgid(0, 0 [pid 348] close(7 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 370] <... setpgid resumed>) = 0 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... openat resumed>) = 3 [pid 369] <... openat resumed>) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 348] close(8 [pid 371] write(3, "1000", 4 [pid 370] <... openat resumed>) = 3 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... write resumed>) = 4 [pid 370] write(3, "1000", 4 [pid 368] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 348] close(9 [pid 369] close(3) = 0 [pid 369] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 369] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[12]}, 88) = 12 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [ 27.199144][ T368] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 27.206959][ T368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.214769][ T368] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.222582][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 27.230394][ T368] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 27.238213][ T368] [pid 372] write(3, "67", 2) = 2 [ 27.244854][ T363] CPU: 1 PID: 363 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.253427][ T372] FAULT_INJECTION: forcing a failure. [ 27.253427][ T372] name failslab, interval 1, probability 0, space 0, times 0 [ 27.256574][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.256588][ T363] Call Trace: [ 27.256594][ T363] [ 27.256601][ T363] dump_stack_lvl+0x151/0x1b7 [ 27.289295][ T363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.294763][ T363] dump_stack+0x15/0x17 [ 27.298753][ T363] should_fail+0x3c6/0x510 [ 27.303006][ T363] __should_failslab+0xa4/0xe0 [ 27.307602][ T363] ? anon_vma_fork+0xf7/0x4e0 [ 27.312117][ T363] should_failslab+0x9/0x20 [ 27.316459][ T363] slab_pre_alloc_hook+0x37/0xd0 [ 27.321238][ T363] ? anon_vma_fork+0xf7/0x4e0 [ 27.325745][ T363] kmem_cache_alloc+0x44/0x200 [ 27.330346][ T363] anon_vma_fork+0xf7/0x4e0 [ 27.334861][ T363] ? anon_vma_name+0x4c/0x70 [ 27.339285][ T363] ? vm_area_dup+0x17a/0x230 [ 27.343713][ T363] copy_mm+0xa3a/0x13e0 [ 27.347797][ T363] ? copy_signal+0x610/0x610 [ 27.352218][ T363] ? __init_rwsem+0xd6/0x1c0 [ 27.356644][ T363] ? copy_signal+0x4e3/0x610 [ 27.361068][ T363] copy_process+0x12bc/0x3260 [ 27.365587][ T363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.370532][ T363] ? asm_common_interrupt+0x27/0x40 [ 27.375580][ T363] kernel_clone+0x21e/0x9e0 [ 27.380212][ T363] ? _raw_spin_unlock_irq+0x49/0x70 [ 27.385313][ T363] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.390351][ T363] ? create_io_thread+0x1e0/0x1e0 [ 27.395296][ T363] __x64_sys_clone+0x23f/0x290 [ 27.399899][ T363] ? __do_sys_vfork+0x130/0x130 [ 27.404581][ T363] ? __kasan_check_read+0x11/0x20 [ 27.409530][ T363] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.415346][ T363] do_syscall_64+0x3d/0xb0 [ 27.419600][ T363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.425327][ T363] RIP: 0033:0x7f517cc0f399 [ 27.429576][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 372] clone(child_stack=NULL, flags=0 [pid 371] close(3 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(10) = -1 EBADF (Bad file descriptor) [pid 371] <... close resumed>) = 0 [pid 370] <... write resumed>) = 4 [pid 369] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 368] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [ 27.449105][ T363] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.457352][ T363] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 27.465161][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.472975][ T363] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.480803][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 27.488770][ T363] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 27.496585][ T363] [pid 348] close(11) = -1 EBADF (Bad file descriptor) [pid 348] close(12) = -1 EBADF (Bad file descriptor) [pid 348] close(13) = -1 EBADF (Bad file descriptor) [pid 348] close(14) = -1 EBADF (Bad file descriptor) [pid 348] close(15) = -1 EBADF (Bad file descriptor) [pid 348] close(16) = -1 EBADF (Bad file descriptor) [pid 348] close(17) = -1 EBADF (Bad file descriptor) [pid 348] close(18) = -1 EBADF (Bad file descriptor) [pid 348] close(19) = -1 EBADF (Bad file descriptor) [pid 348] close(20) = -1 EBADF (Bad file descriptor) [pid 348] close(21) = -1 EBADF (Bad file descriptor) [pid 348] close(22) = -1 EBADF (Bad file descriptor) [pid 348] close(23) = -1 EBADF (Bad file descriptor) [pid 348] close(24) = -1 EBADF (Bad file descriptor) [pid 348] close(25) = -1 EBADF (Bad file descriptor) [pid 348] close(26) = -1 EBADF (Bad file descriptor) [pid 348] close(27) = -1 EBADF (Bad file descriptor) [pid 348] close(28) = -1 EBADF (Bad file descriptor) [pid 348] close(29) = -1 EBADF (Bad file descriptor) [pid 348] exit_group(0 [pid 352] <... futex resumed>) = ? [pid 348] <... exit_group resumed>) = ? [pid 352] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 371] read(200, [pid 370] close(3 [pid 371] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... close resumed>) = 0 [pid 368] <... futex resumed>) = 0 [pid 371] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] read(200, [pid 368] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 371] <... futex resumed>) = 0 [pid 370] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 370] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... rt_sigaction resumed>NULL, 8) = 0 [pid 370] <... futex resumed>) = 0 [pid 371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 370] <... rt_sigaction resumed>NULL, 8) = 0 [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 10 ./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55555697d6a0, 24) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 374] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[11]}, 88) = 11 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 375] write(3, "67", 2) = 2 [ 27.501800][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 27.501812][ T30] audit: type=1400 audit(1696112460.931:78): avc: denied { remove_name } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.531967][ T372] CPU: 1 PID: 372 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.543428][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.545814][ T375] FAULT_INJECTION: forcing a failure. [ 27.545814][ T375] name failslab, interval 1, probability 0, space 0, times 0 [ 27.553411][ T372] Call Trace: [ 27.553422][ T372] [ 27.553430][ T372] dump_stack_lvl+0x151/0x1b7 [ 27.553457][ T372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.553478][ T372] ? avc_denied+0x1b0/0x1b0 [ 27.553498][ T372] dump_stack+0x15/0x17 [ 27.566523][ T30] audit: type=1400 audit(1696112460.931:79): avc: denied { rename } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.568945][ T372] should_fail+0x3c6/0x510 [ 27.568978][ T372] __should_failslab+0xa4/0xe0 [ 27.568999][ T372] ? vm_area_dup+0x26/0x230 [ 27.625270][ T372] should_failslab+0x9/0x20 [ 27.629606][ T372] slab_pre_alloc_hook+0x37/0xd0 [ 27.634377][ T372] ? vm_area_dup+0x26/0x230 [ 27.638717][ T372] kmem_cache_alloc+0x44/0x200 [ 27.643316][ T372] vm_area_dup+0x26/0x230 [ 27.647480][ T372] copy_mm+0x9a1/0x13e0 [ 27.651476][ T372] ? copy_signal+0x610/0x610 [ 27.655903][ T372] ? __init_rwsem+0xd6/0x1c0 [ 27.660326][ T372] ? copy_signal+0x4e3/0x610 [ 27.664762][ T372] copy_process+0x12bc/0x3260 [ 27.669275][ T372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.674215][ T372] ? __kasan_check_write+0x14/0x20 [ 27.679172][ T372] kernel_clone+0x21e/0x9e0 [ 27.683504][ T372] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.688537][ T372] ? create_io_thread+0x1e0/0x1e0 [ 27.693399][ T372] __x64_sys_clone+0x23f/0x290 [ 27.697994][ T372] ? __do_sys_vfork+0x130/0x130 [ 27.702683][ T372] ? __kasan_check_read+0x11/0x20 [ 27.707544][ T372] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.713357][ T372] do_syscall_64+0x3d/0xb0 [ 27.717613][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.723341][ T372] RIP: 0033:0x7f517cc0f399 [ 27.727593][ T372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 375] clone(child_stack=NULL, flags=0 [pid 374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 371] <... mmap resumed>) = 0x7f517cbaf000 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 366] close(3 [pid 371] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] <... mprotect resumed>) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 366] <... close resumed>) = 0 [pid 362] close(8 [pid 370] <... mmap resumed>) = 0x7f517cbaf000 [pid 366] close(4 [pid 371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 370] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 370] <... mprotect resumed>) = 0 [pid 366] close(5 [pid 362] close(9 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 366] close(6 [pid 362] close(10 [pid 370] <... rt_sigprocmask resumed>[], 8) = 0 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(7 [pid 362] close(11 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 371] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12 ./strace-static-x86_64: Process 377 attached ./strace-static-x86_64: Process 376 attached [pid 371] rt_sigprocmask(SIG_SETMASK, [], [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 363] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.747044][ T372] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.755376][ T372] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 27.763177][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.770988][ T372] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.778914][ T372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 27.786807][ T372] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 27.794623][ T372] [pid 363] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 372] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 1 [pid 376] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 371] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 376] write(3, "67", 2) = 2 [ 27.802290][ T375] CPU: 1 PID: 375 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.810477][ T376] FAULT_INJECTION: forcing a failure. [ 27.810477][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 27.813744][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.813758][ T375] Call Trace: [ 27.813764][ T375] [ 27.813772][ T375] dump_stack_lvl+0x151/0x1b7 [ 27.813799][ T375] ? io_uring_drop_tctx_refs+0x190/0x190 [pid 376] clone(child_stack=NULL, flags=0 [pid 371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 369] close(3 [pid 362] close(12 [pid 369] <... close resumed>) = 0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(4 [pid 362] close(13 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(5 [pid 362] close(14 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(6 [pid 362] close(15 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(7 [pid 362] close(16 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 27.852122][ T375] ? avc_denied+0x1b0/0x1b0 [ 27.856460][ T375] dump_stack+0x15/0x17 [ 27.860453][ T375] should_fail+0x3c6/0x510 [ 27.864706][ T375] __should_failslab+0xa4/0xe0 [ 27.869302][ T375] ? vm_area_dup+0x26/0x230 [ 27.873640][ T375] should_failslab+0x9/0x20 [ 27.878040][ T375] slab_pre_alloc_hook+0x37/0xd0 [ 27.882753][ T375] ? vm_area_dup+0x26/0x230 [ 27.887093][ T375] kmem_cache_alloc+0x44/0x200 [ 27.891700][ T375] vm_area_dup+0x26/0x230 [ 27.896052][ T375] copy_mm+0x9a1/0x13e0 [ 27.900052][ T375] ? copy_signal+0x610/0x610 [ 27.904476][ T375] ? __init_rwsem+0xd6/0x1c0 [ 27.908900][ T375] ? copy_signal+0x4e3/0x610 [ 27.913503][ T375] copy_process+0x12bc/0x3260 [ 27.918013][ T375] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.922956][ T375] ? __kasan_check_write+0x14/0x20 [ 27.927907][ T375] kernel_clone+0x21e/0x9e0 [ 27.932245][ T375] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.937276][ T375] ? create_io_thread+0x1e0/0x1e0 [ 27.942228][ T375] __x64_sys_clone+0x23f/0x290 [ 27.946823][ T375] ? __do_sys_vfork+0x130/0x130 [ 27.951516][ T375] ? __kasan_check_read+0x11/0x20 [ 27.956469][ T375] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.962291][ T375] do_syscall_64+0x3d/0xb0 [ 27.966536][ T375] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.972268][ T375] RIP: 0033:0x7f517cc0f399 [ 27.976516][ T375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.995962][ T375] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 369] close(8 [pid 362] close(17 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(9 [pid 362] close(18 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(10 [pid 362] close(19 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(11 [pid 362] close(20 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(12 [pid 362] close(21 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(13 [pid 362] close(22 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(14 [pid 362] close(23 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(15 [pid 362] close(24 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(16 [pid 362] close(25 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(17 [pid 362] close(26 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(18 [pid 362] close(27 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(19 [pid 362] close(28 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(20 [pid 362] close(29 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(21 [pid 362] exit_group(0 [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... futex resumed>) = ? [pid 362] <... exit_group resumed>) = ? [pid 369] close(22 [pid 363] +++ exited with 0 +++ [pid 369] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 369] close(23) = -1 EBADF (Bad file descriptor) [pid 369] close(24) = -1 EBADF (Bad file descriptor) [pid 369] close(25) = -1 EBADF (Bad file descriptor) [pid 369] close(26) = -1 EBADF (Bad file descriptor) [pid 369] close(27) = -1 EBADF (Bad file descriptor) [pid 369] close(28) = -1 EBADF (Bad file descriptor) [pid 369] close(29) = -1 EBADF (Bad file descriptor) [pid 369] exit_group(0 [pid 372] <... futex resumed>) = ? [pid 369] <... exit_group resumed>) = ? [pid 372] +++ exited with 0 +++ [pid 375] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 370] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 366] close(8 [pid 370] rt_sigprocmask(SIG_SETMASK, [], [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 366] close(9 [pid 370] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... futex resumed>) = 1 [pid 366] close(10 [pid 370] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(11) = -1 EBADF (Bad file descriptor) [pid 366] close(12) = -1 EBADF (Bad file descriptor) [pid 366] close(13) = -1 EBADF (Bad file descriptor) [pid 366] close(14) = -1 EBADF (Bad file descriptor) [pid 366] close(15) = -1 EBADF (Bad file descriptor) [pid 366] close(16) = -1 EBADF (Bad file descriptor) [pid 366] close(17) = -1 EBADF (Bad file descriptor) [pid 366] close(18) = -1 EBADF (Bad file descriptor) [pid 366] close(19) = -1 EBADF (Bad file descriptor) [pid 366] close(20) = -1 EBADF (Bad file descriptor) [pid 366] close(21) = -1 EBADF (Bad file descriptor) [pid 366] close(22) = -1 EBADF (Bad file descriptor) [pid 366] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(24) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 366] close(29) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0 [pid 368] <... futex resumed>) = ? [pid 366] <... exit_group resumed>) = ? [pid 368] +++ exited with 0 +++ [pid 375] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] close(3) = 0 [pid 374] close(4) = -1 EBADF (Bad file descriptor) [pid 374] close(5) = -1 EBADF (Bad file descriptor) [pid 374] close(6) = -1 EBADF (Bad file descriptor) [pid 374] close(7) = -1 EBADF (Bad file descriptor) [pid 374] close(8) = -1 EBADF (Bad file descriptor) [pid 374] close(9) = -1 EBADF (Bad file descriptor) [pid 374] close(10) = -1 EBADF (Bad file descriptor) [pid 374] close(11) = -1 EBADF (Bad file descriptor) [pid 374] close(12) = -1 EBADF (Bad file descriptor) [pid 374] close(13) = -1 EBADF (Bad file descriptor) [pid 374] close(14) = -1 EBADF (Bad file descriptor) [pid 374] close(15) = -1 EBADF (Bad file descriptor) [pid 374] close(16) = -1 EBADF (Bad file descriptor) [pid 374] close(17) = -1 EBADF (Bad file descriptor) [pid 374] close(18) = -1 EBADF (Bad file descriptor) [pid 374] close(19) = -1 EBADF (Bad file descriptor) [pid 374] close(20) = -1 EBADF (Bad file descriptor) [pid 374] close(21) = -1 EBADF (Bad file descriptor) [pid 374] close(22) = -1 EBADF (Bad file descriptor) [pid 374] close(23) = -1 EBADF (Bad file descriptor) [pid 374] close(24) = -1 EBADF (Bad file descriptor) [pid 374] close(25) = -1 EBADF (Bad file descriptor) [pid 374] close(26) = -1 EBADF (Bad file descriptor) [pid 374] close(27) = -1 EBADF (Bad file descriptor) [pid 374] close(28) = -1 EBADF (Bad file descriptor) [pid 374] close(29) = -1 EBADF (Bad file descriptor) [pid 374] exit_group(0) = ? [pid 375] <... futex resumed>) = ? [pid 377] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [ 28.004213][ T375] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 28.012043][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.019828][ T375] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.027670][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 28.035450][ T375] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 28.043263][ T375] [pid 377] write(3, "67", 2) = 2 [pid 377] clone(child_stack=NULL, flags=0 [pid 370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 28.046214][ T376] CPU: 0 PID: 376 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.057670][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.067656][ T376] Call Trace: [ 28.070774][ T376] [ 28.073550][ T376] dump_stack_lvl+0x151/0x1b7 [ 28.078063][ T376] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.083529][ T376] dump_stack+0x15/0x17 [ 28.087523][ T376] should_fail+0x3c6/0x510 [ 28.091776][ T376] __should_failslab+0xa4/0xe0 [ 28.096380][ T376] ? anon_vma_clone+0x9a/0x500 [ 28.100974][ T376] should_failslab+0x9/0x20 [ 28.105313][ T376] slab_pre_alloc_hook+0x37/0xd0 [ 28.110087][ T376] ? anon_vma_clone+0x9a/0x500 [ 28.114860][ T376] kmem_cache_alloc+0x44/0x200 [ 28.119465][ T376] anon_vma_clone+0x9a/0x500 [ 28.123901][ T376] anon_vma_fork+0x91/0x4e0 [ 28.128693][ T376] ? anon_vma_name+0x4c/0x70 [ 28.133122][ T376] ? vm_area_dup+0x17a/0x230 [ 28.137549][ T376] copy_mm+0xa3a/0x13e0 [ 28.141540][ T376] ? copy_signal+0x610/0x610 [ 28.145961][ T376] ? __init_rwsem+0xd6/0x1c0 [ 28.150389][ T376] ? copy_signal+0x4e3/0x610 [ 28.154818][ T376] copy_process+0x12bc/0x3260 [ 28.159432][ T376] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.164370][ T376] ? __kasan_check_write+0x14/0x20 [ 28.169310][ T376] kernel_clone+0x21e/0x9e0 [ 28.173648][ T376] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.178682][ T376] ? create_io_thread+0x1e0/0x1e0 [ 28.183549][ T376] __x64_sys_clone+0x23f/0x290 [ 28.188145][ T376] ? __do_sys_vfork+0x130/0x130 [ 28.192920][ T376] ? __kasan_check_read+0x11/0x20 [ 28.197778][ T376] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.203593][ T376] do_syscall_64+0x3d/0xb0 [ 28.207846][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.213576][ T376] RIP: 0033:0x7f517cc0f399 [ 28.217826][ T376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.237323][ T376] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.245513][ T376] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 ./strace-static-x86_64: Process 378 attached [pid 369] +++ exited with 0 +++ [pid 366] +++ exited with 0 +++ [pid 362] +++ exited with 0 +++ [pid 376] <... clone resumed>) = 13 [pid 375] +++ exited with 0 +++ [pid 374] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 371] close(3) = 0 [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 12 [pid 301] <... clone resumed>, child_tidptr=0x55555697d690) = 11 [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 13 [pid 298] <... clone resumed>, child_tidptr=0x55555697d690) = 13 [pid 371] close(4) = -1 EBADF (Bad file descriptor) [pid 371] close(5) = -1 EBADF (Bad file descriptor) [pid 371] close(6) = -1 EBADF (Bad file descriptor) [pid 371] close(7) = -1 EBADF (Bad file descriptor) [pid 371] close(8) = -1 EBADF (Bad file descriptor) [pid 371] close(9) = -1 EBADF (Bad file descriptor) [pid 371] close(10) = -1 EBADF (Bad file descriptor) [pid 371] close(11) = -1 EBADF (Bad file descriptor) [pid 371] close(12) = -1 EBADF (Bad file descriptor) [pid 371] close(13) = -1 EBADF (Bad file descriptor) [pid 371] close(14) = -1 EBADF (Bad file descriptor) [pid 371] close(15) = -1 EBADF (Bad file descriptor) [pid 371] close(16) = -1 EBADF (Bad file descriptor) [pid 371] close(17) = -1 EBADF (Bad file descriptor) [pid 371] close(18) = -1 EBADF (Bad file descriptor) [pid 371] close(19) = -1 EBADF (Bad file descriptor) [pid 371] close(20) = -1 EBADF (Bad file descriptor) [pid 371] close(21) = -1 EBADF (Bad file descriptor) [pid 371] close(22) = -1 EBADF (Bad file descriptor) [pid 371] close(23) = -1 EBADF (Bad file descriptor) [pid 371] close(24) = -1 EBADF (Bad file descriptor) [pid 371] close(25) = -1 EBADF (Bad file descriptor) [pid 371] close(26) = -1 EBADF (Bad file descriptor) [pid 371] close(27) = -1 EBADF (Bad file descriptor) [pid 371] close(28) = -1 EBADF (Bad file descriptor) [pid 371] close(29) = -1 EBADF (Bad file descriptor) [pid 371] exit_group(0 [pid 376] <... futex resumed>) = ? [pid 371] <... exit_group resumed>) = ? [pid 376] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 14 ./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x55555697d6a0, 24) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 383] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[15]}, 88) = 15 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 381 attached NULL, 8) = 0 [pid 384] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 384] write(3, "67", 2./strace-static-x86_64: Process 380 attached [pid 381] set_robust_list(0x55555697d6a0, 24 [pid 384] <... write resumed>) = 2 [pid 384] clone(child_stack=NULL, flags=0 [pid 381] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 382 attached ./strace-static-x86_64: Process 379 attached [ 28.253327][ T376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.261133][ T376] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.268947][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 28.276757][ T376] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 28.284571][ T376] [ 28.289904][ T377] FAULT_INJECTION: forcing a failure. [ 28.289904][ T377] name failslab, interval 1, probability 0, space 0, times 0 [ 28.305204][ T377] CPU: 1 PID: 377 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.305521][ T384] FAULT_INJECTION: forcing a failure. [ 28.305521][ T384] name failslab, interval 1, probability 0, space 0, times 0 [ 28.316671][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.316684][ T377] Call Trace: [ 28.316690][ T377] [ 28.316697][ T377] dump_stack_lvl+0x151/0x1b7 [ 28.316724][ T377] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.316747][ T377] dump_stack+0x15/0x17 [ 28.316766][ T377] should_fail+0x3c6/0x510 [ 28.316790][ T377] __should_failslab+0xa4/0xe0 [ 28.367794][ T377] ? anon_vma_fork+0x1df/0x4e0 [ 28.372394][ T377] should_failslab+0x9/0x20 [ 28.376735][ T377] slab_pre_alloc_hook+0x37/0xd0 [ 28.381512][ T377] ? anon_vma_fork+0x1df/0x4e0 [ 28.386105][ T377] kmem_cache_alloc+0x44/0x200 [ 28.390722][ T377] anon_vma_fork+0x1df/0x4e0 [ 28.395134][ T377] copy_mm+0xa3a/0x13e0 [ 28.399128][ T377] ? copy_signal+0x610/0x610 [ 28.403551][ T377] ? __init_rwsem+0xd6/0x1c0 [ 28.407978][ T377] ? copy_signal+0x4e3/0x610 [ 28.412403][ T377] copy_process+0x12bc/0x3260 [ 28.416922][ T377] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.421866][ T377] ? __kasan_check_write+0x14/0x20 [ 28.426815][ T377] kernel_clone+0x21e/0x9e0 [ 28.431151][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.436183][ T377] ? create_io_thread+0x1e0/0x1e0 [ 28.441049][ T377] __x64_sys_clone+0x23f/0x290 [ 28.445650][ T377] ? __do_sys_vfork+0x130/0x130 [ 28.450332][ T377] ? __kasan_check_read+0x11/0x20 [ 28.455194][ T377] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.461009][ T377] do_syscall_64+0x3d/0xb0 [ 28.465264][ T377] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.470992][ T377] RIP: 0033:0x7f517cc0f399 [ 28.475246][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.495144][ T377] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] set_robust_list(0x55555697d6a0, 24 [pid 381] setpgid(0, 0 [pid 379] set_robust_list(0x55555697d6a0, 24 [pid 382] <... set_robust_list resumed>) = 0 [ 28.503388][ T377] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 28.511201][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.519011][ T377] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.526824][ T377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 28.534726][ T377] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 28.542544][ T377] [ 28.545757][ T384] CPU: 0 PID: 384 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.557212][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.560142][ T389] FAULT_INJECTION: forcing a failure. [ 28.560142][ T389] name failslab, interval 1, probability 0, space 0, times 0 [ 28.567362][ T384] Call Trace: [ 28.567369][ T384] [ 28.580230][ T387] FAULT_INJECTION: forcing a failure. [ 28.580230][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 28.583073][ T384] dump_stack_lvl+0x151/0x1b7 [ 28.602864][ T384] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.608334][ T384] dump_stack+0x15/0x17 [ 28.612325][ T384] should_fail+0x3c6/0x510 [ 28.616577][ T384] __should_failslab+0xa4/0xe0 [ 28.621174][ T384] ? anon_vma_fork+0x1df/0x4e0 [ 28.625776][ T384] should_failslab+0x9/0x20 [ 28.630117][ T384] slab_pre_alloc_hook+0x37/0xd0 [ 28.634894][ T384] ? anon_vma_fork+0x1df/0x4e0 [ 28.639488][ T384] kmem_cache_alloc+0x44/0x200 [ 28.644089][ T384] anon_vma_fork+0x1df/0x4e0 [ 28.648520][ T384] copy_mm+0xa3a/0x13e0 [ 28.652510][ T384] ? copy_signal+0x610/0x610 [ 28.656934][ T384] ? __init_rwsem+0xd6/0x1c0 [ 28.661361][ T384] ? copy_signal+0x4e3/0x610 [ 28.665789][ T384] copy_process+0x12bc/0x3260 [ 28.670303][ T384] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.675245][ T384] ? __kasan_check_write+0x14/0x20 [ 28.680368][ T384] kernel_clone+0x21e/0x9e0 [ 28.684715][ T384] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.689743][ T384] ? create_io_thread+0x1e0/0x1e0 [ 28.694601][ T384] __x64_sys_clone+0x23f/0x290 [ 28.699201][ T384] ? __do_sys_vfork+0x130/0x130 [ 28.703893][ T384] ? __kasan_check_read+0x11/0x20 [ 28.708751][ T384] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.714563][ T384] do_syscall_64+0x3d/0xb0 [ 28.718816][ T384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.724544][ T384] RIP: 0033:0x7f517cc0f399 [ 28.728815][ T384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.748529][ T384] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 380] set_robust_list(0x55555697d6a0, 24 [pid 383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] exit(0) = ? [pid 378] +++ exited with 0 +++ [pid 381] <... setpgid resumed>) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 381] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[14]}, 88) = 14 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... set_robust_list resumed>) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... set_robust_list resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 379] <... prctl resumed>) = 0 [pid 382] <... prctl resumed>) = 0 [pid 382] setpgid(0, 0 [pid 379] setpgid(0, 0 [pid 380] <... prctl resumed>) = 0 [pid 382] <... setpgid resumed>) = 0 [pid 379] <... setpgid resumed>) = 0 [pid 380] setpgid(0, 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 380] <... setpgid resumed>) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 382] <... openat resumed>) = 3 [pid 379] <... openat resumed>) = 3 [pid 380] <... openat resumed>) = 3 [pid 379] write(3, "1000", 4 [pid 380] write(3, "1000", 4 [pid 379] <... write resumed>) = 4 [pid 382] write(3, "1000", 4 [pid 380] <... write resumed>) = 4 [pid 382] <... write resumed>) = 4 [pid 379] close(3 [pid 380] close(3 [pid 382] close(3 [pid 379] <... close resumed>) = 0 [pid 380] <... close resumed>) = 0 [pid 382] <... close resumed>) = 0 [pid 380] read(200, [pid 379] read(200, [pid 382] read(200, [pid 380] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = 0 [pid 380] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 379] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 380] <... rt_sigaction resumed>NULL, 8) = 0 [pid 379] <... rt_sigaction resumed>NULL, 8) = 0 [pid 382] <... rt_sigaction resumed>NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 379] <... mmap resumed>) = 0x7f517cbaf000 [pid 382] <... mmap resumed>) = 0x7f517cbaf000 [pid 380] <... mmap resumed>) = 0x7f517cbaf000 [pid 382] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 380] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 379] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 382] <... mprotect resumed>) = 0 [pid 380] <... mprotect resumed>) = 0 [pid 379] <... mprotect resumed>) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [pid 379] rt_sigprocmask(SIG_BLOCK, ~[], [pid 382] <... rt_sigprocmask resumed>[], 8) = 0 [pid 380] <... rt_sigprocmask resumed>[], 8) = 0 [pid 379] <... rt_sigprocmask resumed>[], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 382] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 380] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12 [pid 379] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 382] rt_sigprocmask(SIG_SETMASK, [], [pid 380] rt_sigprocmask(SIG_SETMASK, [], [pid 379] rt_sigprocmask(SIG_SETMASK, [], [pid 382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 382] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 382] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 387 attached ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x7f517cbcf9a0, 24 [pid 387] set_robust_list(0x7f517cbcf9a0, 24 [pid 389] <... set_robust_list resumed>) = 0 [pid 387] <... set_robust_list resumed>) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 389] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 387] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 389] <... openat resumed>) = 3 [pid 387] <... openat resumed>) = 3 [pid 389] write(3, "67", 2 [pid 387] write(3, "67", 2) = 2 [pid 389] <... write resumed>) = 2 [pid 389] clone(child_stack=NULL, flags=0 [pid 387] clone(child_stack=NULL, flags=0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 381] close(3) = -1 EBADF (Bad file descriptor) [pid 381] close(4) = -1 EBADF (Bad file descriptor) [pid 381] close(5) = -1 EBADF (Bad file descriptor) [pid 381] close(6) = -1 EBADF (Bad file descriptor) [pid 381] close(7) = -1 EBADF (Bad file descriptor) [pid 381] close(8) = -1 EBADF (Bad file descriptor) [pid 381] close(9) = -1 EBADF (Bad file descriptor) [pid 381] close(10) = -1 EBADF (Bad file descriptor) [pid 381] close(11) = -1 EBADF (Bad file descriptor) [pid 381] close(12) = -1 EBADF (Bad file descriptor) [pid 381] close(13) = -1 EBADF (Bad file descriptor) [pid 381] close(14) = -1 EBADF (Bad file descriptor) [pid 381] close(15) = -1 EBADF (Bad file descriptor) [pid 381] close(16) = -1 EBADF (Bad file descriptor) [pid 381] close(17) = -1 EBADF (Bad file descriptor) [pid 381] close(18) = -1 EBADF (Bad file descriptor) [pid 381] close(19) = -1 EBADF (Bad file descriptor) [pid 381] close(20) = -1 EBADF (Bad file descriptor) [pid 381] close(21) = -1 EBADF (Bad file descriptor) [pid 381] close(22) = -1 EBADF (Bad file descriptor) [pid 381] close(23) = -1 EBADF (Bad file descriptor) [pid 381] close(24) = -1 EBADF (Bad file descriptor) [pid 381] close(25) = -1 EBADF (Bad file descriptor) [pid 381] close(26) = -1 EBADF (Bad file descriptor) [pid 381] close(27) = -1 EBADF (Bad file descriptor) [pid 381] close(28) = -1 EBADF (Bad file descriptor) [pid 381] close(29) = -1 EBADF (Bad file descriptor) [pid 381] exit_group(0) = ? [pid 379] close(3) = -1 EBADF (Bad file descriptor) [pid 379] close(4) = -1 EBADF (Bad file descriptor) [pid 379] close(5) = -1 EBADF (Bad file descriptor) [pid 379] close(6) = -1 EBADF (Bad file descriptor) [pid 379] close(7) = -1 EBADF (Bad file descriptor) [pid 379] close(8) = -1 EBADF (Bad file descriptor) [pid 379] close(9) = -1 EBADF (Bad file descriptor) [pid 379] close(10) = -1 EBADF (Bad file descriptor) [pid 379] close(11) = -1 EBADF (Bad file descriptor) [pid 379] close(12) = -1 EBADF (Bad file descriptor) [pid 379] close(13) = -1 EBADF (Bad file descriptor) [pid 379] close(14) = -1 EBADF (Bad file descriptor) [pid 379] close(15) = -1 EBADF (Bad file descriptor) [pid 379] close(16) = -1 EBADF (Bad file descriptor) [pid 379] close(17) = -1 EBADF (Bad file descriptor) [pid 379] close(18) = -1 EBADF (Bad file descriptor) [pid 379] close(19) = -1 EBADF (Bad file descriptor) [pid 379] close(20) = -1 EBADF (Bad file descriptor) [pid 379] close(21) = -1 EBADF (Bad file descriptor) [pid 379] close(22) = -1 EBADF (Bad file descriptor) [pid 379] close(23) = -1 EBADF (Bad file descriptor) [pid 379] close(24) = -1 EBADF (Bad file descriptor) [pid 379] close(25) = -1 EBADF (Bad file descriptor) [pid 379] close(26) = -1 EBADF (Bad file descriptor) [pid 379] close(27) = -1 EBADF (Bad file descriptor) [pid 379] close(28) = -1 EBADF (Bad file descriptor) [pid 379] close(29) = -1 EBADF (Bad file descriptor) [pid 379] exit_group(0) = ? [ 28.756767][ T384] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 28.764581][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.772391][ T384] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.780201][ T384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 28.788273][ T384] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 28.796086][ T384] [ 28.798953][ T387] CPU: 1 PID: 387 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.810406][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.820298][ T387] Call Trace: [ 28.823420][ T387] [ 28.826205][ T387] dump_stack_lvl+0x151/0x1b7 [ 28.830714][ T387] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.836180][ T387] dump_stack+0x15/0x17 [ 28.840173][ T387] should_fail+0x3c6/0x510 [ 28.844427][ T387] __should_failslab+0xa4/0xe0 [ 28.849023][ T387] ? anon_vma_fork+0xf7/0x4e0 [ 28.853536][ T387] should_failslab+0x9/0x20 [ 28.857896][ T387] slab_pre_alloc_hook+0x37/0xd0 [ 28.862877][ T387] ? anon_vma_fork+0xf7/0x4e0 [ 28.867369][ T387] kmem_cache_alloc+0x44/0x200 [ 28.871969][ T387] anon_vma_fork+0xf7/0x4e0 [ 28.876482][ T387] ? anon_vma_name+0x43/0x70 [ 28.880995][ T387] ? vm_area_dup+0x17a/0x230 [ 28.885423][ T387] copy_mm+0xa3a/0x13e0 [ 28.889419][ T387] ? copy_signal+0x610/0x610 [ 28.894015][ T387] ? __init_rwsem+0xd6/0x1c0 [ 28.898442][ T387] ? copy_signal+0x4e3/0x610 [ 28.902868][ T387] copy_process+0x12bc/0x3260 [ 28.907385][ T387] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.912414][ T387] ? __kasan_check_write+0x14/0x20 [ 28.917362][ T387] kernel_clone+0x21e/0x9e0 [ 28.921818][ T387] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.926843][ T387] ? create_io_thread+0x1e0/0x1e0 [ 28.931710][ T387] __x64_sys_clone+0x23f/0x290 [ 28.936394][ T387] ? __do_sys_vfork+0x130/0x130 [ 28.941168][ T387] ? __kasan_check_read+0x11/0x20 [ 28.946035][ T387] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.951841][ T387] do_syscall_64+0x3d/0xb0 [ 28.956160][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.961909][ T387] RIP: 0033:0x7f517cc0f399 [ 28.966159][ T387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.986033][ T387] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.994278][ T387] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 ./strace-static-x86_64: Process 388 attached ./strace-static-x86_64: Process 386 attached [pid 384] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 377] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 387] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 387] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] close(3) = 0 [pid 380] close(4) = -1 EBADF (Bad file descriptor) [pid 380] close(5) = -1 EBADF (Bad file descriptor) [pid 380] close(6) = -1 EBADF (Bad file descriptor) [pid 380] close(7) = -1 EBADF (Bad file descriptor) [pid 380] close(8) = -1 EBADF (Bad file descriptor) [pid 380] close(9) = -1 EBADF (Bad file descriptor) [pid 380] close(10) = -1 EBADF (Bad file descriptor) [pid 380] close(11) = -1 EBADF (Bad file descriptor) [pid 380] close(12) = -1 EBADF (Bad file descriptor) [pid 380] close(13) = -1 EBADF (Bad file descriptor) [pid 380] close(14) = -1 EBADF (Bad file descriptor) [pid 380] close(15) = -1 EBADF (Bad file descriptor) [pid 380] close(16) = -1 EBADF (Bad file descriptor) [pid 380] close(17) = -1 EBADF (Bad file descriptor) [pid 380] close(18) = -1 EBADF (Bad file descriptor) [pid 380] close(19) = -1 EBADF (Bad file descriptor) [pid 380] close(20) = -1 EBADF (Bad file descriptor) [pid 380] close(21) = -1 EBADF (Bad file descriptor) [pid 380] close(22) = -1 EBADF (Bad file descriptor) [pid 380] close(23) = -1 EBADF (Bad file descriptor) [pid 380] close(24) = -1 EBADF (Bad file descriptor) [pid 380] close(25) = -1 EBADF (Bad file descriptor) [pid 380] close(26) = -1 EBADF (Bad file descriptor) [pid 380] close(27) = -1 EBADF (Bad file descriptor) [pid 380] close(28) = -1 EBADF (Bad file descriptor) [pid 380] close(29) = -1 EBADF (Bad file descriptor) [pid 380] exit_group(0) = ? [ 29.002089][ T387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.009900][ T387] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.017715][ T387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 29.025524][ T387] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 29.033337][ T387] [ 29.036397][ T389] CPU: 0 PID: 389 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.047854][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [pid 387] <... futex resumed>) = ? [pid 387] +++ exited with 0 +++ [pid 380] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 13 ./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x55555697d6a0, 24) = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 390] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 390] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[14]}, 88) = 14 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 391] write(3, "67", 2) = 2 [ 29.057753][ T389] Call Trace: [ 29.060874][ T389] [ 29.063646][ T389] dump_stack_lvl+0x151/0x1b7 [ 29.068165][ T389] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.073632][ T389] dump_stack+0x15/0x17 [ 29.077622][ T389] should_fail+0x3c6/0x510 [ 29.081876][ T389] __should_failslab+0xa4/0xe0 [ 29.086475][ T389] ? anon_vma_fork+0xf7/0x4e0 [ 29.087785][ T391] FAULT_INJECTION: forcing a failure. [ 29.087785][ T391] name failslab, interval 1, probability 0, space 0, times 0 [ 29.090985][ T389] should_failslab+0x9/0x20 [pid 391] clone(child_stack=NULL, flags=0 [pid 390] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 29.091009][ T389] slab_pre_alloc_hook+0x37/0xd0 [ 29.112606][ T389] ? anon_vma_fork+0xf7/0x4e0 [ 29.117116][ T389] kmem_cache_alloc+0x44/0x200 [ 29.121707][ T389] anon_vma_fork+0xf7/0x4e0 [ 29.126051][ T389] ? anon_vma_name+0x43/0x70 [ 29.130475][ T389] ? vm_area_dup+0x17a/0x230 [ 29.135005][ T389] copy_mm+0xa3a/0x13e0 [ 29.138996][ T389] ? copy_signal+0x610/0x610 [ 29.143424][ T389] ? __init_rwsem+0xd6/0x1c0 [ 29.147847][ T389] ? copy_signal+0x4e3/0x610 [ 29.152271][ T389] copy_process+0x12bc/0x3260 [pid 388] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ [pid 384] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 377] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 383] close(3 [pid 377] <... futex resumed>) = 0 [pid 370] close(3 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 384] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] <... close resumed>) = 0 [pid 377] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] <... close resumed>) = 0 [pid 383] close(4 [pid 370] close(4 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 383] close(5 [pid 370] close(5 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 14 [pid 300] <... clone resumed>, child_tidptr=0x55555697d690) = 15 [pid 383] close(6 [pid 370] close(6 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(7 [pid 370] close(7 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(8 [pid 370] close(8 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(9 [pid 370] close(9 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(10 [pid 370] close(10 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(11 [pid 370] close(11 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(12 [pid 370] close(12 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(13 [pid 370] close(13 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(14 [pid 370] close(14 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(15 [pid 370] close(15 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(16 [pid 370] close(16 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(17 [pid 370] close(17 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(18 [pid 370] close(18 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(19 [pid 370] close(19 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(20 [pid 370] close(20 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(21 [pid 370] close(21 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(22 [pid 370] close(22 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(23 [pid 370] close(23 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(24 [pid 370] close(24 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(25 [pid 370] close(25 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(26 [pid 370] close(26 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(27 [pid 370] close(27 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(28 [pid 370] close(28 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(29 [pid 370] close(29 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] exit_group(0 [pid 370] exit_group(0 [pid 384] <... futex resumed>) = ? [pid 383] <... exit_group resumed>) = ? [pid 377] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [ 29.156792][ T389] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.161735][ T389] ? __kasan_check_write+0x14/0x20 [ 29.166682][ T389] kernel_clone+0x21e/0x9e0 [ 29.171015][ T389] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.176051][ T389] ? create_io_thread+0x1e0/0x1e0 [ 29.180921][ T389] __x64_sys_clone+0x23f/0x290 [ 29.185519][ T389] ? __do_sys_vfork+0x130/0x130 [ 29.190202][ T389] ? __kasan_check_read+0x11/0x20 [ 29.195064][ T389] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.200876][ T389] do_syscall_64+0x3d/0xb0 [pid 384] +++ exited with 0 +++ [pid 383] +++ exited with 0 +++ [pid 377] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 16 [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 18 ./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x55555697d6a0, 24) = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] read(200, ./strace-static-x86_64: Process 394 attached 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 395] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] set_robust_list(0x55555697d6a0, 24 [pid 395] <... futex resumed>) = 0 [pid 394] <... set_robust_list resumed>) = 0 [pid 395] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 395] <... rt_sigaction resumed>NULL, 8) = 0 [pid 394] <... prctl resumed>) = 0 [pid 395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 394] setpgid(0, 0 [pid 395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 394] <... setpgid resumed>) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 395] <... mmap resumed>) = 0x7f517cbaf000 [pid 394] <... openat resumed>) = 3 [pid 395] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 394] write(3, "1000", 4 [pid 395] <... mprotect resumed>) = 0 [pid 394] <... write resumed>) = 4 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 394] close(3 [pid 395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 394] <... close resumed>) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 394] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 395] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 394] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] rt_sigprocmask(SIG_SETMASK, [], [pid 394] <... futex resumed>) = 0 [pid 395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 394] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 395] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... rt_sigaction resumed>NULL, 8) = 0 [pid 395] <... futex resumed>) = 0 [pid 394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 395] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 394] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[17]}, 88) = 17 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 397] write(3, "67", 2) = 2 [ 29.205132][ T389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.210855][ T389] RIP: 0033:0x7f517cc0f399 [ 29.215118][ T389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.234648][ T389] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.242883][ T389] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 29.247138][ T397] FAULT_INJECTION: forcing a failure. [pid 397] clone(child_stack=NULL, flags=0 [pid 395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 29.247138][ T397] name failslab, interval 1, probability 0, space 0, times 0 [ 29.250693][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.250714][ T389] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.250728][ T389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 29.250741][ T389] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 29.294354][ T389] [ 29.297214][ T391] CPU: 1 PID: 391 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.308676][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.318567][ T391] Call Trace: [ 29.321691][ T391] [ 29.324466][ T391] dump_stack_lvl+0x151/0x1b7 [ 29.328980][ T391] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.334448][ T391] dump_stack+0x15/0x17 [ 29.338437][ T391] should_fail+0x3c6/0x510 [ 29.342690][ T391] __should_failslab+0xa4/0xe0 [ 29.347291][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 29.351808][ T391] should_failslab+0x9/0x20 [ 29.356144][ T391] slab_pre_alloc_hook+0x37/0xd0 [ 29.360924][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 29.365429][ T391] kmem_cache_alloc+0x44/0x200 [ 29.370031][ T391] anon_vma_fork+0xf7/0x4e0 [ 29.374374][ T391] ? anon_vma_name+0x43/0x70 [ 29.378804][ T391] ? vm_area_dup+0x17a/0x230 [ 29.383230][ T391] copy_mm+0xa3a/0x13e0 [ 29.387220][ T391] ? copy_signal+0x610/0x610 [ 29.391646][ T391] ? __init_rwsem+0xd6/0x1c0 [ 29.396067][ T391] ? copy_signal+0x4e3/0x610 [ 29.400495][ T391] copy_process+0x12bc/0x3260 [ 29.405014][ T391] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.409955][ T391] ? __kasan_check_write+0x14/0x20 [ 29.414904][ T391] kernel_clone+0x21e/0x9e0 [ 29.419244][ T391] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.424275][ T391] ? create_io_thread+0x1e0/0x1e0 [ 29.429139][ T391] __x64_sys_clone+0x23f/0x290 [ 29.433751][ T391] ? __do_sys_vfork+0x130/0x130 [ 29.438423][ T391] ? __kasan_check_read+0x11/0x20 [ 29.443287][ T391] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.449109][ T391] do_syscall_64+0x3d/0xb0 [ 29.453350][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb ./strace-static-x86_64: Process 396 attached ./strace-static-x86_64: Process 393 attached ./strace-static-x86_64: Process 392 attached [pid 396] set_robust_list(0x7f517cbcf9a0, 24 [pid 393] set_robust_list(0x55555697d6a0, 24 [pid 392] set_robust_list(0x55555697d6a0, 24 [pid 396] <... set_robust_list resumed>) = 0 [pid 393] <... set_robust_list resumed>) = 0 [pid 392] <... set_robust_list resumed>) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 396] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 393] <... prctl resumed>) = 0 [pid 392] <... prctl resumed>) = 0 [pid 396] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 393] setpgid(0, 0 [pid 392] setpgid(0, 0 [pid 396] <... openat resumed>) = 3 [pid 393] <... setpgid resumed>) = 0 [pid 392] <... setpgid resumed>) = 0 [pid 396] write(3, "67", 2 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 396] <... write resumed>) = 2 [pid 393] <... openat resumed>) = 3 [pid 392] <... openat resumed>) = 3 [pid 396] clone(child_stack=NULL, flags=0 [pid 393] write(3, "1000", 4 [pid 392] write(3, "1000", 4 [pid 393] <... write resumed>) = 4 [pid 392] <... write resumed>) = 4 [pid 393] close(3 [pid 392] close(3 [pid 393] <... close resumed>) = 0 [pid 392] <... close resumed>) = 0 [pid 393] read(200, [pid 392] read(200, [pid 393] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 393] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 392] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 393] <... rt_sigaction resumed>NULL, 8) = 0 [pid 392] <... rt_sigaction resumed>NULL, 8) = 0 [pid 393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 393] <... mmap resumed>) = 0x7f517cbaf000 [pid 392] <... mmap resumed>) = 0x7f517cbaf000 [pid 393] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 392] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 393] <... mprotect resumed>) = 0 [pid 392] <... mprotect resumed>) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 392] rt_sigprocmask(SIG_BLOCK, ~[], [pid 393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 392] <... rt_sigprocmask resumed>[], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 393] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15 [pid 392] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 393] rt_sigprocmask(SIG_SETMASK, [], [pid 392] rt_sigprocmask(SIG_SETMASK, [], [pid 393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 393] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 399] write(3, "67", 2) = 2 [pid 399] clone(child_stack=NULL, flags=0 [pid 393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 393] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 393] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 393] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 29.459079][ T391] RIP: 0033:0x7f517cc0f399 [ 29.463337][ T391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.482780][ T391] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.491018][ T391] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 29.498830][ T391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 ./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 398] write(3, "67", 2) = 2 [ 29.506641][ T391] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.514458][ T391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 29.522351][ T391] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 29.530169][ T391] [ 29.533046][ T397] CPU: 0 PID: 397 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.544493][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.554386][ T397] Call Trace: [ 29.557503][ T397] [ 29.560281][ T397] dump_stack_lvl+0x151/0x1b7 [ 29.564798][ T397] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.570264][ T397] dump_stack+0x15/0x17 [ 29.574255][ T397] should_fail+0x3c6/0x510 [ 29.578512][ T397] __should_failslab+0xa4/0xe0 [ 29.583110][ T397] ? anon_vma_clone+0x9a/0x500 [ 29.587705][ T397] should_failslab+0x9/0x20 [ 29.592044][ T397] slab_pre_alloc_hook+0x37/0xd0 [ 29.596831][ T397] ? anon_vma_clone+0x9a/0x500 [ 29.601421][ T397] kmem_cache_alloc+0x44/0x200 [ 29.606029][ T397] anon_vma_clone+0x9a/0x500 [ 29.610446][ T397] anon_vma_fork+0x91/0x4e0 [ 29.614788][ T397] ? anon_vma_name+0x43/0x70 [ 29.619210][ T397] ? vm_area_dup+0x17a/0x230 [ 29.623641][ T397] copy_mm+0xa3a/0x13e0 [ 29.627639][ T397] ? copy_signal+0x610/0x610 [ 29.632056][ T397] ? __init_rwsem+0xd6/0x1c0 [ 29.636489][ T397] ? copy_signal+0x4e3/0x610 [ 29.640928][ T397] copy_process+0x12bc/0x3260 [ 29.645427][ T397] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.650367][ T397] ? __kasan_check_write+0x14/0x20 [ 29.655316][ T397] kernel_clone+0x21e/0x9e0 [ 29.659664][ T397] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.664695][ T397] ? create_io_thread+0x1e0/0x1e0 [ 29.669556][ T397] __x64_sys_clone+0x23f/0x290 [ 29.674149][ T397] ? __do_sys_vfork+0x130/0x130 [ 29.678837][ T397] ? __kasan_check_read+0x11/0x20 [ 29.683697][ T397] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.689519][ T397] do_syscall_64+0x3d/0xb0 [ 29.693787][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.699499][ T397] RIP: 0033:0x7f517cc0f399 [ 29.703748][ T397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.723197][ T397] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.731441][ T397] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 29.740897][ T397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.748711][ T397] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.756523][ T397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 29.764326][ T397] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 29.772143][ T397] [ 29.775587][ T396] FAULT_INJECTION: forcing a failure. [ 29.775587][ T396] name failslab, interval 1, probability 0, space 0, times 0 [ 29.778013][ T399] FAULT_INJECTION: forcing a failure. [ 29.778013][ T399] name failslab, interval 1, probability 0, space 0, times 0 [ 29.788169][ T396] CPU: 0 PID: 396 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [pid 398] clone(child_stack=NULL, flags=0 [pid 389] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 391] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 391] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] close(3) = 0 [pid 390] close(4) = -1 EBADF (Bad file descriptor) [pid 390] close(5) = -1 EBADF (Bad file descriptor) [pid 390] close(6) = -1 EBADF (Bad file descriptor) [pid 390] close(7) = -1 EBADF (Bad file descriptor) [pid 390] close(8) = -1 EBADF (Bad file descriptor) [pid 390] close(9) = -1 EBADF (Bad file descriptor) [pid 390] close(10) = -1 EBADF (Bad file descriptor) [pid 390] close(11) = -1 EBADF (Bad file descriptor) [pid 390] close(12) = -1 EBADF (Bad file descriptor) [pid 390] close(13) = -1 EBADF (Bad file descriptor) [pid 390] close(14) = -1 EBADF (Bad file descriptor) [pid 390] close(15) = -1 EBADF (Bad file descriptor) [pid 390] close(16) = -1 EBADF (Bad file descriptor) [pid 390] close(17) = -1 EBADF (Bad file descriptor) [pid 390] close(18) = -1 EBADF (Bad file descriptor) [pid 390] close(19) = -1 EBADF (Bad file descriptor) [pid 390] close(20) = -1 EBADF (Bad file descriptor) [pid 390] close(21) = -1 EBADF (Bad file descriptor) [pid 390] close(22) = -1 EBADF (Bad file descriptor) [pid 390] close(23) = -1 EBADF (Bad file descriptor) [pid 390] close(24) = -1 EBADF (Bad file descriptor) [pid 390] close(25) = -1 EBADF (Bad file descriptor) [pid 390] close(26) = -1 EBADF (Bad file descriptor) [pid 390] close(27) = -1 EBADF (Bad file descriptor) [pid 390] close(28) = -1 EBADF (Bad file descriptor) [pid 390] close(29) = -1 EBADF (Bad file descriptor) [pid 390] exit_group(0 [pid 391] <... futex resumed>) = ? [pid 390] <... exit_group resumed>) = ? [pid 391] +++ exited with 0 +++ [ 29.801570][ T398] FAULT_INJECTION: forcing a failure. [ 29.801570][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 29.811949][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.811962][ T396] Call Trace: [ 29.811968][ T396] [ 29.811976][ T396] dump_stack_lvl+0x151/0x1b7 [ 29.844677][ T396] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.850142][ T396] dump_stack+0x15/0x17 [ 29.854130][ T396] should_fail+0x3c6/0x510 [ 29.858383][ T396] __should_failslab+0xa4/0xe0 [ 29.862984][ T396] ? anon_vma_clone+0x9a/0x500 [ 29.867583][ T396] should_failslab+0x9/0x20 [ 29.871919][ T396] slab_pre_alloc_hook+0x37/0xd0 [ 29.876698][ T396] ? anon_vma_clone+0x9a/0x500 [ 29.881294][ T396] kmem_cache_alloc+0x44/0x200 [ 29.885900][ T396] anon_vma_clone+0x9a/0x500 [ 29.890325][ T396] anon_vma_fork+0x91/0x4e0 [ 29.894663][ T396] ? anon_vma_name+0x4c/0x70 [ 29.899087][ T396] ? vm_area_dup+0x17a/0x230 [ 29.903518][ T396] copy_mm+0xa3a/0x13e0 [ 29.907611][ T396] ? copy_signal+0x610/0x610 [ 29.912029][ T396] ? __init_rwsem+0xd6/0x1c0 [ 29.916554][ T396] ? copy_signal+0x4e3/0x610 [ 29.920981][ T396] copy_process+0x12bc/0x3260 [ 29.925510][ T396] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.930443][ T396] ? __kasan_check_write+0x14/0x20 [ 29.935392][ T396] kernel_clone+0x21e/0x9e0 [ 29.939733][ T396] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.944763][ T396] ? create_io_thread+0x1e0/0x1e0 [ 29.949632][ T396] __x64_sys_clone+0x23f/0x290 [ 29.954227][ T396] ? __do_sys_vfork+0x130/0x130 [pid 382] close(3) = 0 [pid 382] close(4) = -1 EBADF (Bad file descriptor) [pid 382] close(5) = -1 EBADF (Bad file descriptor) [pid 382] close(6) = -1 EBADF (Bad file descriptor) [pid 382] close(7) = -1 EBADF (Bad file descriptor) [pid 382] close(8) = -1 EBADF (Bad file descriptor) [pid 382] close(9) = -1 EBADF (Bad file descriptor) [pid 382] close(10) = -1 EBADF (Bad file descriptor) [pid 382] close(11) = -1 EBADF (Bad file descriptor) [pid 382] close(12) = -1 EBADF (Bad file descriptor) [pid 382] close(13) = -1 EBADF (Bad file descriptor) [pid 382] close(14) = -1 EBADF (Bad file descriptor) [pid 382] close(15) = -1 EBADF (Bad file descriptor) [pid 382] close(16) = -1 EBADF (Bad file descriptor) [pid 382] close(17) = -1 EBADF (Bad file descriptor) [pid 382] close(18) = -1 EBADF (Bad file descriptor) [pid 382] close(19) = -1 EBADF (Bad file descriptor) [pid 382] close(20) = -1 EBADF (Bad file descriptor) [pid 382] close(21) = -1 EBADF (Bad file descriptor) [pid 382] close(22) = -1 EBADF (Bad file descriptor) [pid 382] close(23) = -1 EBADF (Bad file descriptor) [pid 382] close(24) = -1 EBADF (Bad file descriptor) [pid 382] close(25) = -1 EBADF (Bad file descriptor) [pid 382] close(26) = -1 EBADF (Bad file descriptor) [pid 382] close(27) = -1 EBADF (Bad file descriptor) [pid 382] close(28) = -1 EBADF (Bad file descriptor) [pid 382] close(29) = -1 EBADF (Bad file descriptor) [pid 382] exit_group(0) = ? [ 29.958912][ T396] ? __kasan_check_read+0x11/0x20 [ 29.963774][ T396] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.969588][ T396] do_syscall_64+0x3d/0xb0 [ 29.973844][ T396] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.979578][ T396] RIP: 0033:0x7f517cc0f399 [ 29.983823][ T396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 30.003272][ T396] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 30.011512][ T396] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 30.019321][ T396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.027129][ T396] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.034945][ T396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 30.042756][ T396] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 30.050702][ T396] [ 30.053565][ T398] CPU: 1 PID: 398 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 30.065018][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 30.074914][ T398] Call Trace: [ 30.078034][ T398] [ 30.080811][ T398] dump_stack_lvl+0x151/0x1b7 [ 30.085326][ T398] ? io_uring_drop_tctx_refs+0x190/0x190 [ 30.090881][ T398] dump_stack+0x15/0x17 [ 30.094871][ T398] should_fail+0x3c6/0x510 [ 30.099129][ T398] __should_failslab+0xa4/0xe0 [ 30.103725][ T398] ? anon_vma_fork+0xf7/0x4e0 [ 30.108237][ T398] should_failslab+0x9/0x20 [ 30.112755][ T398] slab_pre_alloc_hook+0x37/0xd0 [ 30.117529][ T398] ? anon_vma_fork+0xf7/0x4e0 [ 30.122038][ T398] kmem_cache_alloc+0x44/0x200 [ 30.126637][ T398] anon_vma_fork+0xf7/0x4e0 [ 30.130976][ T398] ? anon_vma_name+0x43/0x70 [ 30.135582][ T398] ? vm_area_dup+0x17a/0x230 [ 30.140006][ T398] copy_mm+0xa3a/0x13e0 [ 30.144001][ T398] ? copy_signal+0x610/0x610 [ 30.148424][ T398] ? __init_rwsem+0xd6/0x1c0 [ 30.152848][ T398] ? copy_signal+0x4e3/0x610 [ 30.157278][ T398] copy_process+0x12bc/0x3260 ./strace-static-x86_64: Process 401 attached [pid 390] +++ exited with 0 +++ [pid 397] <... clone resumed>) = 18 [pid 396] <... clone resumed>) = 20 [pid 389] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ [pid 397] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 0 [pid 396] <... futex resumed>) = 0 [pid 397] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 395] close(3) = 0 [pid 395] close(4) = -1 EBADF (Bad file descriptor) [pid 395] close(5) = -1 EBADF (Bad file descriptor) [pid 395] close(6) = -1 EBADF (Bad file descriptor) [pid 395] close(7) = -1 EBADF (Bad file descriptor) [pid 395] close(8) = -1 EBADF (Bad file descriptor) [pid 394] close(3 [pid 395] close(9 [pid 394] <... close resumed>) = 0 [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(4 [pid 395] close(10 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(5 [pid 395] close(11 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(6 [pid 395] close(12 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(7 [pid 395] close(13 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(8 [pid 395] close(14 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(9 [pid 395] close(15 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(10 [pid 395] close(16 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(11 [pid 395] close(17 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(12 [pid 395] close(18 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(13 [pid 395] close(19 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(14 [pid 395] close(20 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(15 [pid 395] close(21 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(16 [pid 395] close(22 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(17 [pid 395] close(23 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(18 [pid 395] close(24 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(19 [pid 395] close(25 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(20 [pid 395] close(26 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(21 [pid 395] close(27 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(22 [pid 395] close(28 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(23 [pid 395] close(29 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 395] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(24 [pid 395] exit_group(0 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 396] <... futex resumed>) = ? [pid 395] <... exit_group resumed>) = ? [pid 394] close(25 [pid 396] +++ exited with 0 +++ [pid 395] +++ exited with 0 +++ [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(26) = -1 EBADF (Bad file descriptor) [pid 394] close(27) = -1 EBADF (Bad file descriptor) [pid 394] close(28) = -1 EBADF (Bad file descriptor) [pid 394] close(29) = -1 EBADF (Bad file descriptor) [pid 394] exit_group(0 [pid 397] <... futex resumed>) = ? [pid 394] <... exit_group resumed>) = ? [pid 397] +++ exited with 0 +++ [pid 394] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 302] <... restart_syscall resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x55555697d690) = 19 [pid 301] <... clone resumed>, child_tidptr=0x55555697d690) = 15 [pid 299] <... clone resumed>, child_tidptr=0x55555697d690) = 21 [pid 298] <... clone resumed>, child_tidptr=0x55555697d690) = 15 ./strace-static-x86_64: Process 405 attached [ 30.161916][ T398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 30.166861][ T398] ? __kasan_check_write+0x14/0x20 [ 30.171823][ T398] kernel_clone+0x21e/0x9e0 [ 30.176147][ T398] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.181181][ T398] ? create_io_thread+0x1e0/0x1e0 [ 30.186039][ T398] __x64_sys_clone+0x23f/0x290 [ 30.190639][ T398] ? __do_sys_vfork+0x130/0x130 [ 30.195328][ T398] ? __kasan_check_read+0x11/0x20 [ 30.200189][ T398] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.206002][ T398] do_syscall_64+0x3d/0xb0 [pid 405] set_robust_list(0x55555697d6a0, 24) = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 405] write(3, "1000", 4) = 4 [pid 405] close(3) = 0 [pid 405] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 405] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[16]}, 88) = 16 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 407] write(3, "67", 2) = 2 [pid 407] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 406 attached ./strace-static-x86_64: Process 404 attached ./strace-static-x86_64: Process 403 attached ./strace-static-x86_64: Process 402 attached [pid 405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 30.210257][ T398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.215987][ T398] RIP: 0033:0x7f517cc0f399 [ 30.220250][ T398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 30.223703][ T407] FAULT_INJECTION: forcing a failure. [ 30.223703][ T407] name failslab, interval 1, probability 0, space 0, times 0 [ 30.239677][ T398] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 406] set_robust_list(0x55555697d6a0, 24) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 406] setpgid(0, 0) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 406] close(3) = 0 [pid 406] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 406] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[16]}, 88) = 16 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x7f517cbcf9a0, 24) = 0 [ 30.239703][ T398] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 30.239717][ T398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.239729][ T398] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.239741][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 30.239753][ T398] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 30.239769][ T398] [ 30.240479][ T399] CPU: 1 PID: 399 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 30.313858][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 30.323753][ T399] Call Trace: [ 30.326877][ T399] [ 30.329651][ T399] dump_stack_lvl+0x151/0x1b7 [ 30.334163][ T399] ? io_uring_drop_tctx_refs+0x190/0x190 [ 30.339637][ T399] ? avc_denied+0x1b0/0x1b0 [ 30.343973][ T399] dump_stack+0x15/0x17 [ 30.347971][ T399] should_fail+0x3c6/0x510 [ 30.352222][ T399] __should_failslab+0xa4/0xe0 [ 30.356816][ T399] ? vm_area_dup+0x26/0x230 [ 30.361157][ T399] should_failslab+0x9/0x20 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 408] write(3, "67", 2) = 2 [pid 408] clone(child_stack=NULL, flags=0 [pid 401] exit(0) = ? [pid 406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 30.365501][ T399] slab_pre_alloc_hook+0x37/0xd0 [ 30.370268][ T399] ? vm_area_dup+0x26/0x230 [ 30.374610][ T399] kmem_cache_alloc+0x44/0x200 [ 30.379210][ T399] vm_area_dup+0x26/0x230 [ 30.383384][ T399] copy_mm+0x9a1/0x13e0 [ 30.387377][ T399] ? copy_signal+0x610/0x610 [ 30.391798][ T399] ? __init_rwsem+0xd6/0x1c0 [ 30.396231][ T399] ? copy_signal+0x4e3/0x610 [ 30.400648][ T399] copy_process+0x12bc/0x3260 [ 30.405167][ T399] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 30.410106][ T399] ? __kasan_check_write+0x14/0x20 [ 30.415059][ T399] kernel_clone+0x21e/0x9e0 [ 30.419401][ T399] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.424432][ T399] ? create_io_thread+0x1e0/0x1e0 [ 30.429299][ T399] __x64_sys_clone+0x23f/0x290 [ 30.433891][ T399] ? __do_sys_vfork+0x130/0x130 [ 30.438579][ T399] ? __kasan_check_read+0x11/0x20 [ 30.443442][ T399] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.449259][ T399] do_syscall_64+0x3d/0xb0 [ 30.453505][ T399] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.459231][ T399] RIP: 0033:0x7f517cc0f399 [ 30.463491][ T399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 30.483037][ T399] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 30.491296][ T399] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 30.499099][ T399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.506904][ T399] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [pid 404] set_robust_list(0x55555697d6a0, 24) = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 404] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[22]}, 88) = 22 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 403] set_robust_list(0x55555697d6a0, 24) = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] read(200, 0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, NULL, 8) = 0 [pid 403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517cbaf000 [pid 403] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} => {parent_tid=[20]}, 88) = 20 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.514715][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 30.522534][ T399] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 30.530353][ T399] [ 30.533203][ T407] CPU: 0 PID: 407 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 30.544658][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 30.554564][ T407] Call Trace: [ 30.557855][ T407] [ 30.560627][ T407] dump_stack_lvl+0x151/0x1b7 [ 30.565141][ T407] ? io_uring_drop_tctx_refs+0x190/0x190 [ 30.570610][ T407] dump_stack+0x15/0x17 [ 30.574603][ T407] should_fail+0x3c6/0x510 [ 30.578856][ T407] __should_failslab+0xa4/0xe0 [ 30.583453][ T407] ? anon_vma_clone+0x9a/0x500 [ 30.588053][ T407] should_failslab+0x9/0x20 [ 30.592391][ T407] slab_pre_alloc_hook+0x37/0xd0 [ 30.597166][ T407] ? anon_vma_clone+0x9a/0x500 [ 30.601768][ T407] kmem_cache_alloc+0x44/0x200 [ 30.606370][ T407] anon_vma_clone+0x9a/0x500 [ 30.610793][ T407] anon_vma_fork+0x91/0x4e0 [ 30.615135][ T407] ? anon_vma_name+0x43/0x70 [ 30.619562][ T407] ? vm_area_dup+0x17a/0x230 [ 30.623987][ T407] copy_mm+0xa3a/0x13e0 [ 30.627984][ T407] ? copy_signal+0x610/0x610 [ 30.632494][ T407] ? __init_rwsem+0xd6/0x1c0 [ 30.636914][ T407] ? copy_signal+0x4e3/0x610 [ 30.641345][ T407] copy_process+0x12bc/0x3260 [ 30.645870][ T407] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 30.650805][ T407] ? __kasan_check_write+0x14/0x20 [ 30.655752][ T407] kernel_clone+0x21e/0x9e0 [ 30.660094][ T407] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.665128][ T407] ? create_io_thread+0x1e0/0x1e0 [ 30.669987][ T407] __x64_sys_clone+0x23f/0x290 [ 30.674589][ T407] ? __do_sys_vfork+0x130/0x130 [ 30.679281][ T407] ? __kasan_check_read+0x11/0x20 [ 30.684133][ T407] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.689950][ T407] do_syscall_64+0x3d/0xb0 [ 30.694393][ T407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.700122][ T407] RIP: 0033:0x7f517cc0f399 [ 30.704378][ T407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 30.723813][ T407] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 30.732061][ T407] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 30.739874][ T407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.747687][ T407] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.755502][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [pid 403] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 411 attached ./strace-static-x86_64: Process 410 attached ./strace-static-x86_64: Process 409 attached [pid 398] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 410] set_robust_list(0x7f517cbcf9a0, 24 [pid 409] set_robust_list(0x7f517cbcf9a0, 24 [pid 407] <... clone resumed>) = 17 [pid 403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 398] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... set_robust_list resumed>) = 0 [pid 409] <... set_robust_list resumed>) = 0 [pid 407] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 410] rt_sigprocmask(SIG_SETMASK, [], [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 407] <... futex resumed>) = 0 [pid 398] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 407] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 409] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 410] <... openat resumed>) = 3 [pid 409] <... openat resumed>) = 3 [pid 410] write(3, "67", 2 [pid 409] write(3, "67", 2 [pid 410] <... write resumed>) = 2 [pid 409] <... write resumed>) = 2 [pid 410] clone(child_stack=NULL, flags=0 [ 30.763357][ T407] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 30.771122][ T407] [ 30.775017][ T408] FAULT_INJECTION: forcing a failure. [ 30.775017][ T408] name failslab, interval 1, probability 0, space 0, times 0 [ 30.776870][ T409] FAULT_INJECTION: forcing a failure. [ 30.776870][ T409] name failslab, interval 1, probability 0, space 0, times 0 [ 30.793518][ T408] CPU: 0 PID: 408 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 30.800369][ T410] FAULT_INJECTION: forcing a failure. [ 30.800369][ T410] name failslab, interval 1, probability 0, space 0, times 0 [ 30.811297][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 30.811317][ T408] Call Trace: [ 30.811323][ T408] [ 30.811332][ T408] dump_stack_lvl+0x151/0x1b7 [ 30.811361][ T408] ? io_uring_drop_tctx_refs+0x190/0x190 [ 30.849484][ T408] ? rwsem_wake+0x12e/0x220 [ 30.853823][ T408] dump_stack+0x15/0x17 [ 30.857817][ T408] should_fail+0x3c6/0x510 [ 30.862072][ T408] __should_failslab+0xa4/0xe0 [ 30.866664][ T408] ? anon_vma_fork+0xf7/0x4e0 [ 30.871180][ T408] should_failslab+0x9/0x20 [ 30.875519][ T408] slab_pre_alloc_hook+0x37/0xd0 [ 30.880296][ T408] ? anon_vma_fork+0xf7/0x4e0 [ 30.884804][ T408] kmem_cache_alloc+0x44/0x200 [ 30.889405][ T408] anon_vma_fork+0xf7/0x4e0 [ 30.893832][ T408] ? anon_vma_name+0x43/0x70 [ 30.898257][ T408] ? vm_area_dup+0x17a/0x230 [ 30.902688][ T408] copy_mm+0xa3a/0x13e0 [ 30.906683][ T408] ? copy_signal+0x610/0x610 [ 30.911104][ T408] ? __init_rwsem+0xd6/0x1c0 [pid 409] clone(child_stack=NULL, flags=0 [pid 405] close(3 [pid 401] +++ exited with 0 +++ [pid 393] close(3 [pid 402] exit(0) = ? [pid 402] +++ exited with 0 +++ [pid 405] <... close resumed>) = 0 [pid 393] <... close resumed>) = 0 [pid 405] close(4 [pid 393] close(4 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(5 [pid 393] close(5 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(6 [pid 393] close(6 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(7 [pid 393] close(7 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(8 [pid 393] close(8 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(9 [pid 393] close(9 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(10 [pid 393] close(10 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(11 [pid 393] close(11 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(12 [pid 393] close(12 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(13 [pid 393] close(13 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(14 [pid 393] close(14 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(15 [pid 393] close(15 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(16 [pid 393] close(16 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(17 [pid 393] close(17 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(18 [pid 393] close(18 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(19 [pid 393] close(19 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(20 [pid 393] close(20 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(21 [pid 393] close(21 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(22 [pid 393] close(22 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(23 [pid 393] close(23 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(24 [pid 393] close(24 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(25 [pid 393] close(25 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(26 [pid 393] close(26 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(27 [pid 393] close(27 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(28 [pid 393] close(28 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 30.915532][ T408] ? copy_signal+0x4e3/0x610 [ 30.919958][ T408] copy_process+0x12bc/0x3260 [ 30.924494][ T408] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 30.929420][ T408] ? __kasan_check_write+0x14/0x20 [ 30.934366][ T408] kernel_clone+0x21e/0x9e0 [ 30.938713][ T408] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.943742][ T408] ? create_io_thread+0x1e0/0x1e0 [ 30.948617][ T408] __x64_sys_clone+0x23f/0x290 [ 30.953201][ T408] ? __do_sys_vfork+0x130/0x130 [ 30.957890][ T408] ? __kasan_check_read+0x11/0x20 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(29 [pid 393] close(29 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] exit_group(0 [pid 393] exit_group(0 [pid 407] <... futex resumed>) = ? [pid 405] <... exit_group resumed>) = ? [pid 398] <... futex resumed>) = ? [pid 393] <... exit_group resumed>) = ? [pid 407] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ [pid 398] +++ exited with 0 +++ [pid 393] +++ exited with 0 +++ [pid 411] exit(0 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- [pid 411] <... exit resumed>) = ? [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 411] +++ exited with 0 +++ [pid 301] <... restart_syscall resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 303] <... clone resumed>, child_tidptr=0x55555697d690) = 16 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697d690) = 18 [ 30.962749][ T408] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.968563][ T408] do_syscall_64+0x3d/0xb0 [ 30.972817][ T408] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.978541][ T408] RIP: 0033:0x7f517cc0f399 [ 30.982796][ T408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.002236][ T408] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.010488][ T408] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 31.018322][ T408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.026107][ T408] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 31.033925][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 31.041724][ T408] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 31.049545][ T408] [ 31.052406][ T410] CPU: 1 PID: 410 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 31.063863][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 31.073755][ T410] Call Trace: [ 31.076879][ T410] [ 31.079654][ T410] dump_stack_lvl+0x151/0x1b7 [ 31.084167][ T410] ? io_uring_drop_tctx_refs+0x190/0x190 [ 31.089637][ T410] dump_stack+0x15/0x17 [ 31.093717][ T410] should_fail+0x3c6/0x510 [ 31.097973][ T410] __should_failslab+0xa4/0xe0 [ 31.102565][ T410] ? anon_vma_fork+0xf7/0x4e0 [ 31.107079][ T410] should_failslab+0x9/0x20 [ 31.111432][ T410] slab_pre_alloc_hook+0x37/0xd0 [ 31.116194][ T410] ? anon_vma_fork+0xf7/0x4e0 [ 31.120706][ T410] kmem_cache_alloc+0x44/0x200 [ 31.125310][ T410] anon_vma_fork+0xf7/0x4e0 [ 31.129645][ T410] ? anon_vma_name+0x4c/0x70 [ 31.134071][ T410] ? vm_area_dup+0x17a/0x230 [ 31.138499][ T410] copy_mm+0xa3a/0x13e0 [ 31.142495][ T410] ? copy_signal+0x610/0x610 [ 31.146921][ T410] ? __init_rwsem+0xd6/0x1c0 [ 31.151358][ T410] ? copy_signal+0x4e3/0x610 [ 31.155881][ T410] copy_process+0x12bc/0x3260 [ 31.159711][ T416] general protection fault, probably for non-canonical address 0xdffffc1800000000: 0000 [#1] PREEMPT SMP KASAN [ 31.160396][ T410] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.171931][ T416] KASAN: probably user-memory-access in range [0x000000c000000000-0x000000c000000007] [ 31.176883][ T410] ? __kasan_check_write+0x14/0x20 [ 31.186252][ T416] CPU: 0 PID: 416 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 31.191204][ T410] kernel_clone+0x21e/0x9e0 [ 31.202682][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 31.206994][ T410] ? _raw_spin_unlock_irq+0x4e/0x70 [ 31.217068][ T416] RIP: 0010:__rb_insert_augmented+0x63/0x610 [ 31.222101][ T410] ? create_io_thread+0x1e0/0x1e0 [ 31.227915][ T416] Code: b8 2b ff 4d 8b 2f 4d 85 ed 75 18 e9 a7 05 00 00 4c 8b 2b 49 89 df 49 83 e5 fc 4c 89 2b 0f 84 91 05 00 00 4c 89 eb 48 c1 eb 03 <42> 80 3c 23 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f [ 31.232782][ T410] __x64_sys_clone+0x23f/0x290 [ 31.252300][ T416] RSP: 0018:ffffc90000f178f8 EFLAGS: 00010206 [ 31.257001][ T410] ? __do_sys_vfork+0x130/0x130 [ 31.262901][ T416] RAX: 1ffff11023d587c7 RBX: 0000001800000000 RCX: dffffc0000000000 [ 31.267592][ T410] ? __kasan_check_read+0x11/0x20 [ 31.275399][ T416] RDX: ffffffff81a4c130 RSI: ffff88810be64390 RDI: ffff88811ff94e38 [ 31.280265][ T410] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 31.288072][ T416] RBP: ffffc90000f17960 R08: dffffc0000000000 R09: ffff88811ff94e40 [ 31.293889][ T410] do_syscall_64+0x3d/0xb0 [ 31.301785][ T416] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 31.306040][ T410] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.313866][ T416] R13: 000000c000000000 R14: ffff88811eac3e39 R15: ffff88811eac3e38 [ 31.319662][ T410] RIP: 0033:0x7f517cc0f399 [ 31.327478][ T416] FS: 00007f517cbcf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.331729][ T410] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.340493][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.359938][ T410] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.366360][ T416] CR2: 00007f517cc7ba94 CR3: 000000011ff72000 CR4: 00000000003506b0 [ 31.366381][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.374690][ T410] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 31.382510][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.390314][ T410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.398121][ T416] Call Trace: [ 31.398127][ T416] ./strace-static-x86_64: Process 413 attached ./strace-static-x86_64: Process 412 attached [pid 408] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 399] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 413] set_robust_list(0x55555697d6a0, 24 [pid 412] set_robust_list(0x55555697d6a0, 24 [pid 408] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... set_robust_list resumed>) = 0 [pid 412] <... set_robust_list resumed>) = 0 [pid 408] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 408] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f517cc993c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] <... prctl resumed>) = 0 [pid 412] <... prctl resumed>) = 0 [pid 413] setpgid(0, 0 [pid 412] setpgid(0, 0 [pid 413] <... setpgid resumed>) = 0 [pid 412] <... setpgid resumed>) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 413] <... openat resumed>) = 3 [pid 412] <... openat resumed>) = 3 [pid 406] close(3 [pid 392] close(3 [pid 413] write(3, "1000", 4 [pid 412] write(3, "1000", 4 [pid 406] <... close resumed>) = 0 [pid 392] <... close resumed>) = 0 [pid 413] <... write resumed>) = 4 [pid 412] <... write resumed>) = 4 [pid 406] close(4 [pid 392] close(4 [pid 413] close(3 [pid 412] close(3 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 406] close(5 [pid 392] close(5 [pid 413] read(200, [pid 412] read(200, [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... read resumed>0x7ffdf983d000, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] close(6 [pid 392] close(6 [pid 413] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] futex(0x7f517cc993cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... futex resumed>) = 0 [pid 412] <... futex resumed>) = 0 [pid 406] close(7 [pid 392] close(7 [pid 413] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f517cc36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517cc28620}, [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... rt_sigaction resumed>NULL, 8) = 0 [pid 412] <... rt_sigaction resumed>NULL, 8) = 0 [pid 406] close(8 [pid 392] close(8 [pid 413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 406] close(9 [pid 392] close(9 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... mmap resumed>) = 0x7f517cbaf000 [pid 412] <... mmap resumed>) = 0x7f517cbaf000 [pid 406] close(10 [pid 392] close(10 [pid 413] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 412] mprotect(0x7f517cbb0000, 131072, PROT_READ|PROT_WRITE [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... mprotect resumed>) = 0 [pid 412] <... mprotect resumed>) = 0 [pid 406] close(11 [pid 392] close(11 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 412] <... rt_sigprocmask resumed>[], 8) = 0 [pid 406] close(12 [pid 392] close(12 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517cbcf990, parent_tid=0x7f517cbcf990, exit_signal=0, stack=0x7f517cbaf000, stack_size=0x20300, tls=0x7f517cbcf6c0} [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(13 [pid 392] close(13 [pid 413] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 412] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] rt_sigprocmask(SIG_SETMASK, [], [pid 412] rt_sigprocmask(SIG_SETMASK, [], [pid 406] close(14 [pid 392] close(14 [pid 413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] futex(0x7f517cc993c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] close(15 [pid 392] close(15 [pid 413] <... futex resumed>) = 0 [pid 412] <... futex resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] futex(0x7f517cc993cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] close(16 [pid 392] close(16 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(17 [pid 392] close(17 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(18 [pid 392] close(18 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(19 [pid 392] close(19 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(20 [pid 392] close(20 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(21 [pid 392] close(21 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(22 [pid 392] close(22 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(23 [pid 392] close(23 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(24 [pid 392] close(24 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(25 [pid 392] close(25 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(26 [pid 392] close(26 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(27 [pid 392] close(27 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(28 [pid 392] close(28 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(29 [pid 392] close(29 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] exit_group(0 [pid 392] exit_group(0 [pid 408] <... futex resumed>) = ? [pid 406] <... exit_group resumed>) = ? [pid 399] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 408] +++ exited with 0 +++ [pid 406] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ ./strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x7f517cbcf9a0, 24) = 0 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 416] write(3, "67", 2) = 2 [ 31.405935][ T410] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 31.413834][ T416] ? __die_body+0x62/0xb0 [ 31.416963][ T410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 31.419745][ T416] ? die_addr+0x9f/0xd0 [ 31.427549][ T410] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 31.431715][ T416] ? exc_general_protection+0x311/0x4b0 [ 31.439546][ T410] [ 31.443533][ T416] ? asm_exc_general_protection+0x27/0x30 [ 31.453012][ T409] CPU: 1 PID: 409 Comm: syz-executor257 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 31.456711][ T416] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 31.459574][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 31.465129][ T416] ? __rb_insert_augmented+0x63/0x610 [ 31.476586][ T409] Call Trace: [ 31.476593][ T409] [ 31.482834][ T416] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 31.492728][ T409] dump_stack_lvl+0x151/0x1b7 [ 31.497937][ T416] vma_interval_tree_insert_after+0x2be/0x2d0 [ 31.501059][ T409] ? io_uring_drop_tctx_refs+0x190/0x190 [ 31.503838][ T416] copy_mm+0xba2/0x13e0 [ 31.510090][ T409] dump_stack+0x15/0x17 [ 31.514604][ T416] ? copy_signal+0x610/0x610 [ 31.520502][ T409] should_fail+0x3c6/0x510 [ 31.525984][ T416] ? __init_rwsem+0xd6/0x1c0 [ 31.529963][ T409] __should_failslab+0xa4/0xe0 [ 31.533952][ T416] ? copy_signal+0x4e3/0x610 [ 31.538383][ T409] ? anon_vma_fork+0x1df/0x4e0 [ 31.542633][ T416] copy_process+0x12bc/0x3260 [ 31.547067][ T409] should_failslab+0x9/0x20 [ 31.551663][ T416] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.556089][ T409] slab_pre_alloc_hook+0x37/0xd0 [ 31.560691][ T416] ? __kasan_check_write+0x14/0x20 [ 31.565200][ T409] ? anon_vma_fork+0x1df/0x4e0 [ 31.569539][ T416] kernel_clone+0x21e/0x9e0 [ 31.574488][ T409] kmem_cache_alloc+0x44/0x200 [ 31.579280][ T416] ? _raw_spin_unlock_irq+0x4e/0x70 [ 31.584219][ T409] anon_vma_fork+0x1df/0x4e0 [ 31.588825][ T416] ? create_io_thread+0x1e0/0x1e0 [ 31.593152][ T409] copy_mm+0xa3a/0x13e0 [ 31.597751][ T416] __x64_sys_clone+0x23f/0x290 [ 31.602786][ T409] ? copy_signal+0x610/0x610 [ 31.607208][ T416] ? __do_sys_vfork+0x130/0x130 [ 31.612074][ T409] ? __init_rwsem+0xd6/0x1c0 [ 31.616061][ T416] ? __kasan_check_read+0x11/0x20 [ 31.620660][ T409] ? copy_signal+0x4e3/0x610 [ 31.625087][ T416] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 31.629776][ T409] copy_process+0x12bc/0x3260 [ 31.634197][ T416] do_syscall_64+0x3d/0xb0 [ 31.639065][ T409] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.643495][ T416] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.649301][ T409] ? __kasan_check_write+0x14/0x20 [ 31.653816][ T416] RIP: 0033:0x7f517cc0f399 [ 31.658067][ T409] kernel_clone+0x21e/0x9e0 [ 31.663015][ T416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.668744][ T409] ? _raw_spin_unlock_irq+0x4e/0x70 [ 31.673694][ T416] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 [ 31.677943][ T409] ? create_io_thread+0x1e0/0x1e0 [ 31.682283][ T416] ORIG_RAX: 0000000000000038 [ 31.701725][ T409] __x64_sys_clone+0x23f/0x290 [ 31.706756][ T416] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 31.712660][ T409] ? __do_sys_vfork+0x130/0x130 [ 31.717518][ T416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.722036][ T409] ? __kasan_check_read+0x11/0x20 [ 31.726633][ T416] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 31.734445][ T409] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 31.739130][ T416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 31.746944][ T409] do_syscall_64+0x3d/0xb0 [ 31.751810][ T416] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 31.759616][ T409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.765437][ T416] [ 31.773243][ T409] RIP: 0033:0x7f517cc0f399 [ 31.777494][ T416] Modules linked in: [ 31.785306][ T409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 416] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 415 attached [pid 413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 31.799268][ T416] ---[ end trace 413cad65730f18ac ]--- [ 31.801886][ T409] RSP: 002b:00007f517cbcf208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.821520][ T416] RIP: 0010:__rb_insert_augmented+0x63/0x610 [ 31.826619][ T409] RAX: ffffffffffffffda RBX: 00007f517cc993c8 RCX: 00007f517cc0f399 [ 31.826639][ T409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [pid 415] set_robust_list(0x7f517cbcf9a0, 24 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=25} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 415] <... set_robust_list resumed>) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 415] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 415] write(3, "67", 2) = 2 [ 31.835470][ T416] Code: b8 2b ff 4d 8b 2f 4d 85 ed 75 18 e9 a7 05 00 00 4c 8b 2b 49 89 df 49 83 e5 fc 4c 89 2b 0f 84 91 05 00 00 4c 89 eb 48 c1 eb 03 <42> 80 3c 23 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f [ 31.840679][ T409] RBP: 00007f517cc993c0 R08: 0000000000000000 R09: 0000000000003736 [ 31.840698][ T409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517cc993cc [ 31.840711][ T409] R13: 00007f517cbcf210 R14: 0000000000000002 R15: 00007f517cc6601d [ 31.840729][ T409] [ 31.849010][ T416] RSP: 0018:ffffc90000f178f8 EFLAGS: 00010206 [ 31.908524][ T416] RAX: 1ffff11023d587c7 RBX: 0000001800000000 RCX: dffffc0000000000 [pid 415] clone(child_stack=NULL, flags=0 [pid 404] close(3) = 0 [pid 404] close(4) = -1 EBADF (Bad file descriptor) [pid 404] close(5) = -1 EBADF (Bad file descriptor) [pid 404] close(6) = -1 EBADF (Bad file descriptor) [pid 404] close(7) = -1 EBADF (Bad file descriptor) [ 31.916329][ T416] RDX: ffffffff81a4c130 RSI: ffff88810be64390 RDI: ffff88811ff94e38 [ 31.924416][ T416] RBP: ffffc90000f17960 R08: dffffc0000000000 R09: ffff88811ff94e40 [ 31.932504][ T416] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 31.940593][ T416] R13: 000000c000000000 R14: ffff88811eac3e39 R15: ffff88811eac3e38 [ 31.948526][ T416] FS: 00007f517cbcf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.957275][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.963945][ T416] CR2: 000055555697d370 CR3: 000000011ff72000 CR4: 00000000003506b0 [pid 404] close(8) = -1 EBADF (Bad file descriptor) [pid 404] close(9) = -1 EBADF (Bad file descriptor) [pid 404] close(10) = -1 EBADF (Bad file descriptor) [pid 404] close(11) = -1 EBADF (Bad file descriptor) [pid 404] close(12) = -1 EBADF (Bad file descriptor) [pid 404] close(13) = -1 EBADF (Bad file descriptor) [pid 404] close(14) = -1 EBADF (Bad file descriptor) [pid 404] close(15) = -1 EBADF (Bad file descriptor) [pid 404] close(16) = -1 EBADF (Bad file descriptor) [pid 404] close(17) = -1 EBADF (Bad file descriptor) [pid 404] close(18) = -1 EBADF (Bad file descriptor) [pid 404] close(19) = -1 EBADF (Bad file descriptor) [pid 404] close(20) = -1 EBADF (Bad file descriptor) [pid 404] close(21) = -1 EBADF (Bad file descriptor) [pid 404] close(22) = -1 EBADF (Bad file descriptor) [pid 404] close(23) = -1 EBADF (Bad file descriptor) [pid 404] close(24) = -1 EBADF (Bad file descriptor) [pid 404] close(25) = -1 EBADF (Bad file descriptor) [pid 404] close(26) = -1 EBADF (Bad file descriptor) [pid 404] close(27) = -1 EBADF (Bad file descriptor) [pid 404] close(28) = -1 EBADF (Bad file descriptor) [pid 404] close(29) = -1 EBADF (Bad file descriptor) [pid 404] exit_group(0) = ? [ 31.972000][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.979967][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.987772][ T416] Kernel panic - not syncing: Fatal exception [ 31.993934][ T416] Kernel Offset: disabled [ 31.998066][ T416] Rebooting in 86400 seconds..