./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor738735598 <...> Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. execve("./syz-executor738735598", ["./syz-executor738735598"], 0x7ffddbdee3b0 /* 10 vars */) = 0 brk(NULL) = 0x55557d686000 brk(0x55557d686d40) = 0x55557d686d40 arch_prctl(ARCH_SET_FS, 0x55557d6863c0) = 0 set_tid_address(0x55557d686690) = 5811 set_robust_list(0x55557d6866a0, 24) = 0 rseq(0x55557d686ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor738735598", 4096) = 27 getrandom("\x28\x1a\x25\x3c\x0c\xd6\xe4\x53", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557d686d40 brk(0x55557d6a7d40) = 0x55557d6a7d40 brk(0x55557d6a8000) = 0x55557d6a8000 mprotect(0x7f3eec687000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557d686690) = 5812 ./strace-static-x86_64: Process 5812 attached [pid 5812] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5812] setpgid(0, 0) = 0 [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5812] write(3, "1000", 4) = 4 executing program [pid 5812] close(3) = 0 [pid 5812] write(1, "executing program\n", 18) = 18 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5812] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5812] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0} => {parent_tid=[5813]}, 88) = 5813 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5813 attached ) = 0 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053) = 0 [pid 5813] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5812] <... futex resumed>) = 0 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... ioctl resumed>) = 0 [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] <... futex resumed>) = 0 [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5813] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... ioctl resumed>) = 0 [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [ 174.581721][ T5813] syz-executor738 uses obsolete (PF_INET,SOCK_PACKET) [pid 5813] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... socket resumed>) = 5 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... futex resumed>) = 0 [pid 5812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5812] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5812] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec57b000 [pid 5812] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0}./strace-static-x86_64: Process 5817 attached [pid 5817] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053) = 0 [pid 5812] <... clone3 resumed> => {parent_tid=[5817]}, 88) = 5817 [pid 5817] set_robust_list(0x7f3eec59b9a0, 24 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], [pid 5817] <... set_robust_list resumed>) = 0 [pid 5813] <... sendmsg resumed>) = 252 [pid 5812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5812] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] rt_sigprocmask(SIG_SETMASK, [], [pid 5812] <... futex resumed>) = 0 [pid 5812] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5813] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] <... write resumed>) = 4046 [pid 5817] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5812] exit_group(0 [pid 5813] <... futex resumed>) = ? [pid 5812] <... exit_group resumed>) = ? [pid 5817] +++ exited with 0 +++ [pid 5813] +++ exited with 0 +++ [pid 5812] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5812, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557d686690) = 5819 ./strace-static-x86_64: Process 5819 attached [pid 5819] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3executing program ) = 0 [pid 5819] write(1, "executing program\n", 18) = 18 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5819] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5820 attached => {parent_tid=[5820]}, 88) = 5820 [pid 5819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] <... rseq resumed>) = 0 [pid 5820] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5820] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] <... openat resumed>) = 3 [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5819] <... futex resumed>) = 0 [pid 5820] <... ioctl resumed>) = 0 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5820] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] <... socket resumed>) = 4 [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... ioctl resumed>) = 0 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 252 [pid 5819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = 0 [pid 5819] <... futex resumed>) = 0 [pid 5820] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5819] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] <... write resumed>) = 4046 [pid 5820] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] exit_group(0 [pid 5820] <... futex resumed>) = ? [pid 5819] <... exit_group resumed>) = ? [pid 5820] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5825 attached , child_tidptr=0x55557d686690) = 5825 [pid 5825] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] write(3, "1000", 4) = 4 [pid 5825] close(3) = 0 [pid 5825] write(1, "executing program\n", 18executing program ) = 18 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5825] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5826 attached [pid 5826] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5825] <... clone3 resumed> => {parent_tid=[5826]}, 88) = 5826 [pid 5826] <... rseq resumed>) = 0 [pid 5825] rt_sigprocmask(SIG_SETMASK, [], [pid 5826] set_robust_list(0x7f3eec5bc9a0, 24 [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5826] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5826] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... ioctl resumed>) = 0 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5825] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec57b000 [pid 5825] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5826] <... sendmsg resumed>) = 252 [pid 5825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0}./strace-static-x86_64: Process 5829 attached => {parent_tid=[5829]}, 88) = 5829 [pid 5826] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053 [pid 5825] rt_sigprocmask(SIG_SETMASK, [], [pid 5829] <... rseq resumed>) = 0 [pid 5826] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5825] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] set_robust_list(0x7f3eec59b9a0, 24 [pid 5825] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... set_robust_list resumed>) = 0 [pid 5829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5829] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5829] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5829] futex(0x7f3eec68d338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... futex resumed>) = 0 [pid 5825] exit_group(0 [pid 5829] <... futex resumed>) = ? [pid 5825] <... exit_group resumed>) = ? [pid 5829] +++ exited with 0 +++ [pid 5826] <... futex resumed>) = ? [pid 5826] +++ exited with 0 +++ [pid 5825] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557d686690) = 5830 ./strace-static-x86_64: Process 5830 attached [pid 5830] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] setpgid(0, 0) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1000", 4) = 4 [pid 5830] close(3) = 0 executing program [pid 5830] write(1, "executing program\n", 18) = 18 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5830] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5830] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5830] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5830] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5833 attached [pid 5833] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5830] <... clone3 resumed> => {parent_tid=[5833]}, 88) = 5833 [pid 5830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... rseq resumed>) = 0 [pid 5833] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5830] <... futex resumed>) = 0 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] <... futex resumed>) = 0 [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] ioctl(3, TUNSETIFF, 0x200000000200) = 0 [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5830] <... futex resumed>) = 0 [pid 5833] <... socket resumed>) = 4 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] <... futex resumed>) = 0 [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... futex resumed>) = 0 [pid 5833] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5833] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... socket resumed>) = 5 [pid 5830] <... futex resumed>) = 0 [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5830] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5833] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5830] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5830] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] <... sendmsg resumed>) = 252 [pid 5830] <... mmap resumed>) = 0x7f3eec57b000 [pid 5833] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE [pid 5833] <... futex resumed>) = 0 [pid 5830] <... mprotect resumed>) = 0 [pid 5833] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5830] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0}./strace-static-x86_64: Process 5837 attached => {parent_tid=[5837]}, 88) = 5837 [pid 5830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5830] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5837] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053) = 0 [pid 5837] set_robust_list(0x7f3eec59b9a0, 24) = 0 [pid 5837] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5837] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5837] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5837] futex(0x7f3eec68d338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] exit_group(0 [pid 5837] <... futex resumed>) = ? [pid 5833] <... futex resumed>) = ? [pid 5830] <... exit_group resumed>) = ? [pid 5837] +++ exited with 0 +++ [pid 5833] +++ exited with 0 +++ [pid 5830] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x55557d686690) = 5839 [pid 5839] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 executing program [pid 5839] close(3) = 0 [pid 5839] write(1, "executing program\n", 18) = 18 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5839] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5840 attached => {parent_tid=[5840]}, 88) = 5840 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5840] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... rseq resumed>) = 0 [pid 5839] <... futex resumed>) = 0 [pid 5840] set_robust_list(0x7f3eec5bc9a0, 24 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... set_robust_list resumed>) = 0 [pid 5840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5840] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... openat resumed>) = 3 [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5839] <... futex resumed>) = 0 [pid 5840] <... ioctl resumed>) = 0 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... socket resumed>) = 4 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5840] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5840] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5839] <... futex resumed>) = 0 [pid 5840] <... ioctl resumed>) = 0 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... sendmsg resumed>) = 252 [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5839] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5840] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] exit_group(0) = ? [pid 5840] <... futex resumed>) = ? [pid 5840] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5843 attached , child_tidptr=0x55557d686690) = 5843 [pid 5843] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5843] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5844 attached [pid 5844] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053) = 0 [pid 5844] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5844] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... clone3 resumed> => {parent_tid=[5844]}, 88) = 5844 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5843] <... futex resumed>) = 1 [pid 5844] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5843] <... futex resumed>) = 1 [pid 5844] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5844] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5843] <... futex resumed>) = 0 [pid 5844] <... ioctl resumed>) = 0 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5843] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... sendmsg resumed>) = 252 [pid 5843] <... futex resumed>) = 0 [pid 5844] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5844] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... mmap resumed>) = 0x7f3eec57b000 [pid 5843] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0}./strace-static-x86_64: Process 5846 attached => {parent_tid=[5846]}, 88) = 5846 [pid 5846] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] <... rseq resumed>) = 0 [pid 5846] set_robust_list(0x7f3eec59b9a0, 24 [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5843] <... futex resumed>) = 0 [pid 5846] <... write resumed>) = 4046 [pid 5843] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7f3eec68d338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] exit_group(0 [pid 5846] <... futex resumed>) = ? [pid 5843] <... exit_group resumed>) = ? [pid 5846] +++ exited with 0 +++ [pid 5844] <... futex resumed>) = ? [pid 5844] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached , child_tidptr=0x55557d686690) = 5849 [pid 5849] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3executing program ) = 0 [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5849] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5850 attached [pid 5850] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5849] <... clone3 resumed> => {parent_tid=[5850]}, 88) = 5850 [pid 5850] <... rseq resumed>) = 0 [pid 5849] rt_sigprocmask(SIG_SETMASK, [], [pid 5850] set_robust_list(0x7f3eec5bc9a0, 24 [pid 5849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5850] rt_sigprocmask(SIG_SETMASK, [], [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5849] <... futex resumed>) = 0 [pid 5850] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5850] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... openat resumed>) = 3 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5850] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] <... futex resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5849] <... futex resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5850] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... sendmsg resumed>) = 252 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5850] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5849] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... write resumed>) = 4046 [pid 5850] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] exit_group(0) = ? [pid 5850] +++ exited with 0 +++ [pid 5849] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached , child_tidptr=0x55557d686690) = 5856 [pid 5856] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "1000", 4) = 4 [pid 5856] close(3) = 0 executing program [pid 5856] write(1, "executing program\n", 18) = 18 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5856] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5856] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5857 attached => {parent_tid=[5857]}, 88) = 5857 [pid 5856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5856] <... futex resumed>) = 0 [pid 5857] <... rseq resumed>) = 0 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5857] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 1 [pid 5857] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 1 [pid 5857] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] <... ioctl resumed>) = 0 [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5857] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] <... ioctl resumed>) = 0 [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... futex resumed>) = 0 [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 1 [pid 5857] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] <... socket resumed>) = 5 [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 1 [pid 5856] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5857] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5856] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec57b000 [pid 5856] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0} => {parent_tid=[5860]}, 88) = 5860 [pid 5856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5860 attached [pid 5856] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5856] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053 [pid 5857] <... sendmsg resumed>) = 252 [pid 5857] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5860] <... rseq resumed>) = 0 [pid 5860] set_robust_list(0x7f3eec59b9a0, 24) = 0 [pid 5860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5860] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5860] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5856] exit_group(0 [pid 5857] <... futex resumed>) = ? [pid 5856] <... exit_group resumed>) = ? [pid 5857] +++ exited with 0 +++ [pid 5860] +++ exited with 0 +++ [pid 5856] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5811] <... clone resumed>, child_tidptr=0x55557d686690) = 5862 [pid 5862] <... prctl resumed>) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4executing program ) = 4 [pid 5862] close(3) = 0 [pid 5862] write(1, "executing program\n", 18) = 18 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5862] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5864 attached => {parent_tid=[5864]}, 88) = 5864 [pid 5864] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5862] rt_sigprocmask(SIG_SETMASK, [], [pid 5864] <... rseq resumed>) = 0 [pid 5864] set_robust_list(0x7f3eec5bc9a0, 24 [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5864] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5864] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... openat resumed>) = 3 [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5864] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 5864] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... ioctl resumed>) = 0 [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5862] <... futex resumed>) = 0 [pid 5864] <... socket resumed>) = 4 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5864] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5862] <... futex resumed>) = 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 252 [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5862] <... futex resumed>) = 0 [pid 5862] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... write resumed>) = 4046 [pid 5864] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5862] exit_group(0) = ? [pid 5864] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached , child_tidptr=0x55557d686690) = 5869 [pid 5869] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4executing program ) = 4 [pid 5869] close(3) = 0 [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5869] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5869] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5869] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0} => {parent_tid=[5870]}, 88) = 5870 ./strace-static-x86_64: Process 5870 attached [pid 5869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053) = 0 [pid 5870] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5870] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] <... openat resumed>) = 3 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5870] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5869] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... ioctl resumed>) = 0 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... ioctl resumed>) = 0 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... sendmsg resumed>) = 252 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5870] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 5869] exit_group(0) = ? [pid 5870] +++ exited with 0 +++ [pid 5869] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5876 attached , child_tidptr=0x55557d686690) = 5876 [pid 5876] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5876] write(3, "1000", 4) = 4 [pid 5876] close(3executing program ) = 0 [pid 5876] write(1, "executing program\n", 18) = 18 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5876] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5876] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5876] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5876] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0} => {parent_tid=[5877]}, 88) = 5877 [pid 5876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5877 attached [pid 5877] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053) = 0 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5877] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5876] <... futex resumed>) = 0 [pid 5877] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... futex resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5877] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] <... futex resumed>) = 0 [pid 5877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5876] <... futex resumed>) = 0 [pid 5877] <... ioctl resumed>) = 0 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5877] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] <... futex resumed>) = 0 [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... futex resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5877] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] <... socket resumed>) = 4 [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5876] <... futex resumed>) = 0 [pid 5877] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5877] <... ioctl resumed>) = 0 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5877] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... socket resumed>) = 5 [pid 5876] <... futex resumed>) = 0 [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] <... futex resumed>) = 0 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] <... futex resumed>) = 0 [pid 5877] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] <... sendmsg resumed>) = 252 [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5877] <... futex resumed>) = 0 [pid 5876] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5876] <... futex resumed>) = 0 [pid 5877] <... write resumed>) = 4046 [pid 5876] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5876] <... futex resumed>) = 0 [pid 5876] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ [pid 5876] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached , child_tidptr=0x55557d686690) = 5881 [pid 5881] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 executing program [pid 5881] close(3) = 0 [pid 5881] write(1, "executing program\n", 18) = 18 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5881] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5883 attached => {parent_tid=[5883]}, 88) = 5883 [pid 5881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5881] <... futex resumed>) = 0 [pid 5883] <... rseq resumed>) = 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5883] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5883] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000 [pid 5881] <... futex resumed>) = 0 [pid 5883] <... openat resumed>) = 3 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5883] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] ioctl(3, TUNSETIFF, 0x200000000200 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] <... ioctl resumed>) = 0 [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5881] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5881] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] <... sendmsg resumed>) = 252 [pid 5881] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = 0 [pid 5883] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec57b000 [pid 5881] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0} => {parent_tid=[5884]}, 88) = 5884 [pid 5881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5881] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5884 attached [pid 5884] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053) = 0 [pid 5884] set_robust_list(0x7f3eec59b9a0, 24) = 0 [pid 5884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5884] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046) = 4046 [pid 5884] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5884] futex(0x7f3eec68d338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] <... futex resumed>) = 0 [pid 5881] exit_group(0 [pid 5884] <... futex resumed>) = ? [pid 5883] <... futex resumed>) = ? [pid 5881] <... exit_group resumed>) = ? [pid 5884] +++ exited with 0 +++ [pid 5883] +++ exited with 0 +++ [pid 5881] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached , child_tidptr=0x55557d686690) = 5887 [pid 5887] set_robust_list(0x55557d6866a0, 24) = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4executing program ) = 4 [pid 5887] close(3) = 0 [pid 5887] write(1, "executing program\n", 18) = 18 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] rt_sigaction(SIGRT_1, {sa_handler=0x7f3eec629520, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3eec61aba0}, NULL, 8) = 0 [pid 5887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec59c000 [pid 5887] mprotect(0x7f3eec59d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec5bc990, parent_tid=0x7f3eec5bc990, exit_signal=0, stack=0x7f3eec59c000, stack_size=0x20300, tls=0x7f3eec5bc6c0}./strace-static-x86_64: Process 5888 attached => {parent_tid=[5888]}, 88) = 5888 [pid 5887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] rseq(0x7f3eec5bcfe0, 0x20, 0, 0x53053053 [pid 5887] <... futex resumed>) = 0 [pid 5888] <... rseq resumed>) = 0 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] set_robust_list(0x7f3eec5bc9a0, 24) = 0 [pid 5888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5888] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5887] <... futex resumed>) = 0 [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] ioctl(3, TUNSETIFF, 0x200000000200) = 0 [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5888] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... socket resumed>) = 4 [pid 5887] <... futex resumed>) = 0 [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5887] <... futex resumed>) = 0 [pid 5888] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC} [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] <... ioctl resumed>) = 0 [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5888] futex(0x7f3eec68d32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5888] futex(0x7f3eec68d328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5887] futex(0x7f3eec68d328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5887] futex(0x7f3eec68d32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5888] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x6c\x00\x00\x00\x16\x0a\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x03\x80"..., iov_len=252}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5887] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5887] futex(0x7f3eec68d33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3eec57b000 [pid 5887] mprotect(0x7f3eec57c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3eec59b990, parent_tid=0x7f3eec59b990, exit_signal=0, stack=0x7f3eec57b000, stack_size=0x20300, tls=0x7f3eec59b6c0}./strace-static-x86_64: Process 5890 attached => {parent_tid=[5890]}, 88) = 5890 [pid 5887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5890] rseq(0x7f3eec59bfe0, 0x20, 0, 0x53053053) = 0 [pid 5887] futex(0x7f3eec68d338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] set_robust_list(0x7f3eec59b9a0, 24 [pid 5887] <... futex resumed>) = 0 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5890] rt_sigprocmask(SIG_SETMASK, [], [pid 5887] futex(0x7f3eec68d33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5890] write(3, "\x12\x00\x88\x64\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4046 [pid 5887] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 178.496570][ T5890] ===================================================== [ 178.503967][ T5890] BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x7e4/0x940 [ 178.512310][ T5890] nf_flow_offload_inet_hook+0x7e4/0x940 [ 178.518171][ T5890] nf_hook_slow+0xe1/0x3d0 [ 178.522883][ T5890] __netif_receive_skb_core+0x4aff/0x70c0 [ 178.528849][ T5890] __netif_receive_skb+0xcc/0xac0 [ 178.534113][ T5890] netif_receive_skb+0x57/0x630 [ 178.539192][ T5890] tun_rx_batched+0x1df/0x980 [ 178.544223][ T5890] tun_get_user+0x4ee0/0x6b40 [ 178.549084][ T5890] tun_chr_write_iter+0x3e9/0x5c0 [ 178.554351][ T5890] vfs_write+0xb4b/0x1580 [ 178.558880][ T5890] __x64_sys_write+0x1fb/0x4d0 [ 178.564022][ T5890] x64_sys_call+0x38c3/0x3db0 [ 178.568915][ T5890] do_syscall_64+0xd9/0x210 [ 178.574035][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.580198][ T5890] [ 178.582633][ T5890] Uninit was created at: [ 178.587117][ T5890] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 178.593322][ T5890] kmalloc_reserve+0x13c/0x4b0 [ 178.598373][ T5890] __alloc_skb+0x347/0x7d0 [ 178.603112][ T5890] alloc_skb_with_frags+0xc5/0xa60 [ 178.608443][ T5890] sock_alloc_send_pskb+0xad8/0xc70 [ 178.613939][ T5890] tun_get_user+0x1019/0x6b40 [ 178.618805][ T5890] tun_chr_write_iter+0x3e9/0x5c0 [ 178.624142][ T5890] vfs_write+0xb4b/0x1580 [ 178.628688][ T5890] __x64_sys_write+0x1fb/0x4d0 [ 178.633818][ T5890] x64_sys_call+0x38c3/0x3db0 [ 178.638698][ T5890] do_syscall_64+0xd9/0x210 [ 178.643492][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.649644][ T5890] [ 178.652099][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz-executor738 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 178.664883][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.675175][ T5890] ===================================================== [ 178.682308][ T5890] Disabling lock debugging due to kernel taint [ 178.688581][ T5890] Kernel panic - not syncing: kmsan.panic set ... [ 178.695159][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz-executor738 Tainted: G B 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 178.709449][ T5890] Tainted: [B]=BAD_PAGE [ 178.713720][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.723930][ T5890] Call Trace: [ 178.727326][ T5890] [ 178.730376][ T5890] __dump_stack+0x26/0x30 [ 178.734910][ T5890] dump_stack_lvl+0x53/0x270 [ 178.739701][ T5890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 178.745744][ T5890] dump_stack+0x1e/0x25 [ 178.750093][ T5890] panic+0x4bd/0xd50 [ 178.754258][ T5890] kmsan_report+0x31c/0x320 [ 178.758978][ T5890] ? __msan_warning+0x1b/0x30 [ 178.763857][ T5890] ? nf_flow_offload_inet_hook+0x7e4/0x940 [ 178.769882][ T5890] ? nf_hook_slow+0xe1/0x3d0 [ 178.774679][ T5890] ? __netif_receive_skb_core+0x4aff/0x70c0 [ 178.780813][ T5890] ? __netif_receive_skb+0xcc/0xac0 [ 178.786195][ T5890] ? netif_receive_skb+0x57/0x630 [ 178.791445][ T5890] ? tun_rx_batched+0x1df/0x980 [ 178.796482][ T5890] ? tun_get_user+0x4ee0/0x6b40 [ 178.801522][ T5890] ? tun_chr_write_iter+0x3e9/0x5c0 [ 178.806914][ T5890] ? vfs_write+0xb4b/0x1580 [ 178.811632][ T5890] ? __x64_sys_write+0x1fb/0x4d0 [ 178.816788][ T5890] ? x64_sys_call+0x38c3/0x3db0 [ 178.821850][ T5890] ? do_syscall_64+0xd9/0x210 [ 178.826752][ T5890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.833033][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.838379][ T5890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 178.844424][ T5890] ? __pskb_pull_tail+0x1779/0x2660 [ 178.849840][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.855189][ T5890] __msan_warning+0x1b/0x30 [ 178.859900][ T5890] nf_flow_offload_inet_hook+0x7e4/0x940 [ 178.865749][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.871090][ T5890] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 178.877476][ T5890] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 178.883845][ T5890] nf_hook_slow+0xe1/0x3d0 [ 178.888490][ T5890] __netif_receive_skb_core+0x4aff/0x70c0 [ 178.894469][ T5890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 178.901389][ T5890] ? filter_irq_stacks+0x49/0x190 [ 178.906648][ T5890] __netif_receive_skb+0xcc/0xac0 [ 178.911885][ T5890] netif_receive_skb+0x57/0x630 [ 178.916964][ T5890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 178.923009][ T5890] ? tun_rx_batched+0x16c/0x980 [ 178.928063][ T5890] tun_rx_batched+0x1df/0x980 [ 178.932947][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.938299][ T5890] tun_get_user+0x4ee0/0x6b40 [ 178.943173][ T5890] ? stack_depot_save_flags+0x35/0x7b0 [ 178.948828][ T5890] ? __rcu_read_unlock+0x6d/0xd0 [ 178.953952][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.959289][ T5890] ? kmsan_get_metadata+0xfb/0x160 [ 178.964616][ T5890] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 178.971176][ T5890] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 178.977531][ T5890] tun_chr_write_iter+0x3e9/0x5c0 [ 178.982781][ T5890] vfs_write+0xb4b/0x1580 [ 178.987352][ T5890] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 178.993100][ T5890] __x64_sys_write+0x1fb/0x4d0 [ 178.998122][ T5890] x64_sys_call+0x38c3/0x3db0 [ 179.003025][ T5890] do_syscall_64+0xd9/0x210 [ 179.007762][ T5890] ? ret_from_fork+0x1a5/0x310 [ 179.012713][ T5890] ? clear_bhb_loop+0x40/0x90 [ 179.017582][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.023671][ T5890] RIP: 0033:0x7f3eec6035e9 [ 179.028248][ T5890] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 179.048054][ T5890] RSP: 002b:00007f3eec59b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.056683][ T5890] RAX: ffffffffffffffda RBX: 00007f3eec68d338 RCX: 00007f3eec6035e9 [ 179.064821][ T5890] RDX: 0000000000000fce RSI: 00002000000003c0 RDI: 0000000000000003 [ 179.072953][ T5890] RBP: 00007f3eec68d330 R08: 00007ffc6e586c17 R09: 0000000000000000 [ 179.081099][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3eec65a074 [ 179.089231][ T5890] R13: 0000200000000200 R14: 00002000000003c0 R15: 0000200000000210 [ 179.097397][ T5890] [ 179.100810][ T5890] Kernel Offset: disabled [ 179.105209][ T5890] Rebooting in 86400 seconds..