./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor839155525 <...> forked to background, child pid 3174 no interfaces have a carri[ 22.075891][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 22.089823][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. execve("./syz-executor839155525", ["./syz-executor839155525"], 0x7ffe0b83d620 /* 10 vars */) = 0 brk(NULL) = 0x5555570bd000 brk(0x5555570bdc40) = 0x5555570bdc40 arch_prctl(ARCH_SET_FS, 0x5555570bd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor839155525", 4096) = 27 brk(0x5555570dec40) = 0x5555570dec40 brk(0x5555570df000) = 0x5555570df000 mprotect(0x7fc6cd329000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 3603 ./strace-static-x86_64: Process 3603 attached [pid 3603] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3603] setsid() = 1 [pid 3603] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3603] unshare(CLONE_NEWNS) = 0 [pid 3603] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3603] unshare(CLONE_NEWIPC) = 0 [pid 3603] unshare(CLONE_NEWCGROUP) = 0 [pid 3603] unshare(CLONE_NEWUTS) = 0 [pid 3603] unshare(CLONE_SYSVSEM) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "16777216", 8) = 8 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "536870912", 9) = 9 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "8192", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3603] close(3) = 0 [pid 3603] getpid() = 1 [pid 3603] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 42.638873][ T3620] dump_stack_lvl+0xcd/0x134 [ 42.643486][ T3620] should_fail.cold+0x5/0xa [ 42.647983][ T3620] should_failslab+0x5/0x10 [ 42.652471][ T3620] kmem_cache_alloc_trace+0x60/0x3f0 [ 42.657740][ T3620] ? ref_tracker_alloc+0x14c/0x550 [ 42.662853][ T3620] ref_tracker_alloc+0x14c/0x550 [ 42.667782][ T3620] ? ref_tracker_free+0x6b0/0x6b0 [ 42.672800][ T3620] ? lock_release+0x720/0x720 [ 42.677470][ T3620] ? do_raw_spin_lock+0x120/0x2a0 [ 42.682576][ T3620] ? rwlock_bug.part.0+0x90/0x90 [ 42.687504][ T3620] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 42.692875][ T3620] linkwatch_fire_event+0x202/0x260 [ 42.698073][ T3620] netif_carrier_off+0x96/0xb0 [ 42.702835][ T3620] __tun_detach+0xfe7/0x13e0 [ 42.707427][ T3620] tun_chr_close+0xc4/0x180 [ 42.711922][ T3620] __fput+0x277/0x9d0 [ 42.715898][ T3620] ? __tun_detach+0x13e0/0x13e0 [ 42.720770][ T3620] task_work_run+0xdd/0x1a0 [ 42.725276][ T3620] ptrace_notify+0x114/0x140 [ 42.729966][ T3620] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 42.736205][ T3620] syscall_exit_to_user_mode+0x9/0x60 [ 42.741575][ T3620] do_syscall_64+0x42/0xb0 [ 42.745994][ T3620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 42.752057][ T3620] RIP: 0033:0x7fc6cd2767a3 [ 42.756482][ T3620] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 42.776088][ T3620] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 42.784501][ T3620] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 42.792472][ T3620] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 42.800448][ T3620] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 42.808429][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 42.816477][ T3620] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 42.824452][ T3620] [ 42.827472][ T3620] memory allocation failure, unreliable refcount tracker. [pid 3620] close(3) = 0 [pid 3620] close(4) = 0 [pid 3620] close(5) = -1 EBADF (Bad file descriptor) [pid 3620] close(6) = -1 EBADF (Bad file descriptor) [pid 3620] close(7) = -1 EBADF (Bad file descriptor) [pid 3620] close(8) = -1 EBADF (Bad file descriptor) [pid 3620] close(9) = -1 EBADF (Bad file descriptor) [pid 3620] close(10) = -1 EBADF (Bad file descriptor) [pid 3620] close(11) = -1 EBADF (Bad file descriptor) [pid 3620] close(12) = -1 EBADF (Bad file descriptor) [pid 3620] close(13) = -1 EBADF (Bad file descriptor) [pid 3620] close(14) = -1 EBADF (Bad file descriptor) [pid 3620] close(15) = -1 EBADF (Bad file descriptor) [pid 3620] close(16) = -1 EBADF (Bad file descriptor) [pid 3620] close(17) = -1 EBADF (Bad file descriptor) [pid 3620] close(18) = -1 EBADF (Bad file descriptor) [pid 3620] close(19) = -1 EBADF (Bad file descriptor) [pid 3620] close(20) = -1 EBADF (Bad file descriptor) [pid 3620] close(21) = -1 EBADF (Bad file descriptor) [pid 3620] close(22) = -1 EBADF (Bad file descriptor) [pid 3620] close(23) = -1 EBADF (Bad file descriptor) [pid 3620] close(24) = -1 EBADF (Bad file descriptor) [pid 3620] close(25) = -1 EBADF (Bad file descriptor) [pid 3620] close(26) = -1 EBADF (Bad file descriptor) [pid 3620] close(27) = -1 EBADF (Bad file descriptor) [pid 3620] close(28) = -1 EBADF (Bad file descriptor) [pid 3620] close(29) = -1 EBADF (Bad file descriptor) [pid 3620] exit_group(0) = ? [pid 3620] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=26} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 3 ./strace-static-x86_64: Process 3621 attached [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3621] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3621] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3621] write(4, "5", 1) = 1 [pid 3621] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 42.913363][ T3621] FAULT_INJECTION: forcing a failure. [ 42.913363][ T3621] name failslab, interval 1, probability 0, space 0, times 0 [ 42.925988][ T3621] CPU: 0 PID: 3621 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 42.936243][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.946316][ T3621] Call Trace: [ 42.949680][ T3621] [ 42.952705][ T3621] dump_stack_lvl+0xcd/0x134 [ 42.957298][ T3621] should_fail.cold+0x5/0xa [ 42.961844][ T3621] should_failslab+0x5/0x10 [ 42.966446][ T3621] kmem_cache_alloc_trace+0x60/0x3f0 [ 42.971751][ T3621] ? ref_tracker_alloc+0x14c/0x550 [ 42.976887][ T3621] ref_tracker_alloc+0x14c/0x550 [ 42.981824][ T3621] ? ref_tracker_free+0x6b0/0x6b0 [ 42.986837][ T3621] ? lock_release+0x720/0x720 [ 42.991502][ T3621] ? do_raw_spin_lock+0x120/0x2a0 [ 42.996528][ T3621] ? rwlock_bug.part.0+0x90/0x90 [ 43.001452][ T3621] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.006826][ T3621] linkwatch_fire_event+0x202/0x260 [ 43.012018][ T3621] netif_carrier_off+0x96/0xb0 [ 43.016784][ T3621] __tun_detach+0xfe7/0x13e0 [ 43.021402][ T3621] tun_chr_close+0xc4/0x180 [ 43.025938][ T3621] __fput+0x277/0x9d0 [ 43.029938][ T3621] ? __tun_detach+0x13e0/0x13e0 [ 43.034974][ T3621] task_work_run+0xdd/0x1a0 [ 43.039749][ T3621] ptrace_notify+0x114/0x140 [ 43.044568][ T3621] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.051023][ T3621] syscall_exit_to_user_mode+0x9/0x60 [ 43.056432][ T3621] do_syscall_64+0x42/0xb0 [ 43.061099][ T3621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.067012][ T3621] RIP: 0033:0x7fc6cd2767a3 [ 43.071431][ T3621] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.091405][ T3621] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.099855][ T3621] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 43.107829][ T3621] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.115885][ T3621] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.123870][ T3621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.131856][ T3621] R13: 00000000000f4240 R14: 000000000000a647 R15: 00007ffdc49a5924 [ 43.139848][ T3621] [pid 3621] close(3) = 0 [pid 3621] close(4) = 0 [pid 3621] close(5) = -1 EBADF (Bad file descriptor) [pid 3621] close(6) = -1 EBADF (Bad file descriptor) [pid 3621] close(7) = -1 EBADF (Bad file descriptor) [pid 3621] close(8) = -1 EBADF (Bad file descriptor) [pid 3621] close(9) = -1 EBADF (Bad file descriptor) [pid 3621] close(10) = -1 EBADF (Bad file descriptor) [pid 3621] close(11) = -1 EBADF (Bad file descriptor) [pid 3621] close(12) = -1 EBADF (Bad file descriptor) [pid 3621] close(13) = -1 EBADF (Bad file descriptor) [pid 3621] close(14) = -1 EBADF (Bad file descriptor) [pid 3621] close(15) = -1 EBADF (Bad file descriptor) [pid 3621] close(16) = -1 EBADF (Bad file descriptor) [pid 3621] close(17) = -1 EBADF (Bad file descriptor) [pid 3621] close(18) = -1 EBADF (Bad file descriptor) [pid 3621] close(19) = -1 EBADF (Bad file descriptor) [pid 3621] close(20) = -1 EBADF (Bad file descriptor) [pid 3621] close(21) = -1 EBADF (Bad file descriptor) [pid 3621] close(22) = -1 EBADF (Bad file descriptor) [pid 3621] close(23) = -1 EBADF (Bad file descriptor) [pid 3621] close(24) = -1 EBADF (Bad file descriptor) [pid 3621] close(25) = -1 EBADF (Bad file descriptor) [pid 3621] close(26) = -1 EBADF (Bad file descriptor) [pid 3621] close(27) = -1 EBADF (Bad file descriptor) [pid 3621] close(28) = -1 EBADF (Bad file descriptor) [pid 3621] close(29) = -1 EBADF (Bad file descriptor) [pid 3621] exit_group(0) = ? [pid 3621] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 4 ./strace-static-x86_64: Process 3622 attached [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3622] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3622] write(4, "5", 1) = 1 [pid 3622] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.218856][ T3622] FAULT_INJECTION: forcing a failure. [ 43.218856][ T3622] name failslab, interval 1, probability 0, space 0, times 0 [ 43.231563][ T3622] CPU: 1 PID: 3622 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.241707][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.251783][ T3622] Call Trace: [ 43.255067][ T3622] [ 43.258082][ T3622] dump_stack_lvl+0xcd/0x134 [ 43.262685][ T3622] should_fail.cold+0x5/0xa [ 43.267199][ T3622] should_failslab+0x5/0x10 [ 43.271705][ T3622] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.276993][ T3622] ? ref_tracker_alloc+0x14c/0x550 [ 43.282114][ T3622] ref_tracker_alloc+0x14c/0x550 [ 43.287066][ T3622] ? ref_tracker_free+0x6b0/0x6b0 [ 43.292116][ T3622] ? lock_release+0x720/0x720 [ 43.296815][ T3622] ? do_raw_spin_lock+0x120/0x2a0 [ 43.301846][ T3622] ? rwlock_bug.part.0+0x90/0x90 [ 43.306787][ T3622] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.312215][ T3622] linkwatch_fire_event+0x202/0x260 [ 43.317448][ T3622] netif_carrier_off+0x96/0xb0 [ 43.322236][ T3622] __tun_detach+0xfe7/0x13e0 [ 43.326870][ T3622] tun_chr_close+0xc4/0x180 [ 43.331395][ T3622] __fput+0x277/0x9d0 [ 43.335422][ T3622] ? __tun_detach+0x13e0/0x13e0 [ 43.340385][ T3622] task_work_run+0xdd/0x1a0 [ 43.345015][ T3622] ptrace_notify+0x114/0x140 [ 43.349619][ T3622] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.356170][ T3622] syscall_exit_to_user_mode+0x9/0x60 [ 43.361557][ T3622] do_syscall_64+0x42/0xb0 [ 43.366001][ T3622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.371907][ T3622] RIP: 0033:0x7fc6cd2767a3 [ 43.376329][ T3622] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.395950][ T3622] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.404373][ T3622] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3622] close(3) = 0 [pid 3622] close(4) = 0 [pid 3622] close(5) = -1 EBADF (Bad file descriptor) [pid 3622] close(6) = -1 EBADF (Bad file descriptor) [pid 3622] close(7) = -1 EBADF (Bad file descriptor) [pid 3622] close(8) = -1 EBADF (Bad file descriptor) [pid 3622] close(9) = -1 EBADF (Bad file descriptor) [pid 3622] close(10) = -1 EBADF (Bad file descriptor) [pid 3622] close(11) = -1 EBADF (Bad file descriptor) [pid 3622] close(12) = -1 EBADF (Bad file descriptor) [pid 3622] close(13) = -1 EBADF (Bad file descriptor) [pid 3622] close(14) = -1 EBADF (Bad file descriptor) [pid 3622] close(15) = -1 EBADF (Bad file descriptor) [pid 3622] close(16) = -1 EBADF (Bad file descriptor) [pid 3622] close(17) = -1 EBADF (Bad file descriptor) [pid 3622] close(18) = -1 EBADF (Bad file descriptor) [pid 3622] close(19) = -1 EBADF (Bad file descriptor) [pid 3622] close(20) = -1 EBADF (Bad file descriptor) [pid 3622] close(21) = -1 EBADF (Bad file descriptor) [pid 3622] close(22) = -1 EBADF (Bad file descriptor) [pid 3622] close(23) = -1 EBADF (Bad file descriptor) [pid 3622] close(24) = -1 EBADF (Bad file descriptor) [pid 3622] close(25) = -1 EBADF (Bad file descriptor) [ 43.413668][ T3622] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.421654][ T3622] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.429619][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.437577][ T3622] R13: 00000000000f4240 R14: 000000000000a787 R15: 00007ffdc49a5924 [ 43.445546][ T3622] [pid 3622] close(26) = -1 EBADF (Bad file descriptor) [pid 3622] close(27) = -1 EBADF (Bad file descriptor) [pid 3622] close(28) = -1 EBADF (Bad file descriptor) [pid 3622] close(29) = -1 EBADF (Bad file descriptor) [pid 3622] exit_group(0) = ? [pid 3622] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 5 ./strace-static-x86_64: Process 3623 attached [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3623] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3623] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3623] write(4, "5", 1) = 1 [pid 3623] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.516085][ T3623] FAULT_INJECTION: forcing a failure. [ 43.516085][ T3623] name failslab, interval 1, probability 0, space 0, times 0 [ 43.528790][ T3623] CPU: 1 PID: 3623 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.539609][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.549863][ T3623] Call Trace: [ 43.553132][ T3623] [ 43.556249][ T3623] dump_stack_lvl+0xcd/0x134 [ 43.560845][ T3623] should_fail.cold+0x5/0xa [ 43.565350][ T3623] should_failslab+0x5/0x10 [ 43.569853][ T3623] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.575139][ T3623] ? ref_tracker_alloc+0x14c/0x550 [ 43.580272][ T3623] ref_tracker_alloc+0x14c/0x550 [ 43.585219][ T3623] ? ref_tracker_free+0x6b0/0x6b0 [ 43.590243][ T3623] ? lock_release+0x720/0x720 [ 43.594921][ T3623] ? do_raw_spin_lock+0x120/0x2a0 [ 43.599948][ T3623] ? rwlock_bug.part.0+0x90/0x90 [ 43.604883][ T3623] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.610349][ T3623] linkwatch_fire_event+0x202/0x260 [ 43.615554][ T3623] netif_carrier_off+0x96/0xb0 [ 43.620315][ T3623] __tun_detach+0xfe7/0x13e0 [ 43.624906][ T3623] tun_chr_close+0xc4/0x180 [ 43.629402][ T3623] __fput+0x277/0x9d0 [ 43.633381][ T3623] ? __tun_detach+0x13e0/0x13e0 [ 43.638316][ T3623] task_work_run+0xdd/0x1a0 [ 43.642996][ T3623] ptrace_notify+0x114/0x140 [ 43.647604][ T3623] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.653859][ T3623] syscall_exit_to_user_mode+0x9/0x60 [ 43.659224][ T3623] do_syscall_64+0x42/0xb0 [ 43.663664][ T3623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.669555][ T3623] RIP: 0033:0x7fc6cd2767a3 [ 43.673968][ T3623] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.693566][ T3623] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.701978][ T3623] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3623] close(3) = 0 [pid 3623] close(4) = 0 [pid 3623] close(5) = -1 EBADF (Bad file descriptor) [pid 3623] close(6) = -1 EBADF (Bad file descriptor) [pid 3623] close(7) = -1 EBADF (Bad file descriptor) [pid 3623] close(8) = -1 EBADF (Bad file descriptor) [pid 3623] close(9) = -1 EBADF (Bad file descriptor) [pid 3623] close(10) = -1 EBADF (Bad file descriptor) [pid 3623] close(11) = -1 EBADF (Bad file descriptor) [pid 3623] close(12) = -1 EBADF (Bad file descriptor) [pid 3623] close(13) = -1 EBADF (Bad file descriptor) [pid 3623] close(14) = -1 EBADF (Bad file descriptor) [pid 3623] close(15) = -1 EBADF (Bad file descriptor) [pid 3623] close(16) = -1 EBADF (Bad file descriptor) [pid 3623] close(17) = -1 EBADF (Bad file descriptor) [pid 3623] close(18) = -1 EBADF (Bad file descriptor) [pid 3623] close(19) = -1 EBADF (Bad file descriptor) [pid 3623] close(20) = -1 EBADF (Bad file descriptor) [pid 3623] close(21) = -1 EBADF (Bad file descriptor) [ 43.709945][ T3623] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.717913][ T3623] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.725872][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.733832][ T3623] R13: 00000000000f4240 R14: 000000000000a8b4 R15: 00007ffdc49a5924 [ 43.741813][ T3623] [pid 3623] close(22) = -1 EBADF (Bad file descriptor) [pid 3623] close(23) = -1 EBADF (Bad file descriptor) [pid 3623] close(24) = -1 EBADF (Bad file descriptor) [pid 3623] close(25) = -1 EBADF (Bad file descriptor) [pid 3623] close(26) = -1 EBADF (Bad file descriptor) [pid 3623] close(27) = -1 EBADF (Bad file descriptor) [pid 3623] close(28) = -1 EBADF (Bad file descriptor) [pid 3623] close(29) = -1 EBADF (Bad file descriptor) [pid 3623] exit_group(0) = ? [pid 3623] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3624 attached , child_tidptr=0x5555570bd5d0) = 6 [pid 3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3624] setpgid(0, 0) = 0 [pid 3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3624] write(3, "1000", 4) = 4 [pid 3624] close(3) = 0 [pid 3624] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3624] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3624] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3624] write(4, "5", 1) = 1 [pid 3624] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.813958][ T3624] FAULT_INJECTION: forcing a failure. [ 43.813958][ T3624] name failslab, interval 1, probability 0, space 0, times 0 [ 43.826609][ T3624] CPU: 1 PID: 3624 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.836985][ T3624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.847045][ T3624] Call Trace: [ 43.850762][ T3624] [ 43.853696][ T3624] dump_stack_lvl+0xcd/0x134 [ 43.858280][ T3624] should_fail.cold+0x5/0xa [ 43.862781][ T3624] should_failslab+0x5/0x10 [ 43.867268][ T3624] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.872540][ T3624] ? ref_tracker_alloc+0x14c/0x550 [ 43.877639][ T3624] ref_tracker_alloc+0x14c/0x550 [ 43.882565][ T3624] ? ref_tracker_free+0x6b0/0x6b0 [ 43.887660][ T3624] ? lock_release+0x720/0x720 [ 43.892328][ T3624] ? do_raw_spin_lock+0x120/0x2a0 [ 43.897361][ T3624] ? rwlock_bug.part.0+0x90/0x90 [ 43.902306][ T3624] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.907670][ T3624] linkwatch_fire_event+0x202/0x260 [ 43.912864][ T3624] netif_carrier_off+0x96/0xb0 [ 43.917613][ T3624] __tun_detach+0xfe7/0x13e0 [ 43.922197][ T3624] tun_chr_close+0xc4/0x180 [ 43.926683][ T3624] __fput+0x277/0x9d0 [ 43.930671][ T3624] ? __tun_detach+0x13e0/0x13e0 [ 43.935509][ T3624] task_work_run+0xdd/0x1a0 [ 43.940003][ T3624] ptrace_notify+0x114/0x140 [ 43.944584][ T3624] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.950813][ T3624] syscall_exit_to_user_mode+0x9/0x60 [ 43.956174][ T3624] do_syscall_64+0x42/0xb0 [ 43.960666][ T3624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.966545][ T3624] RIP: 0033:0x7fc6cd2767a3 [ 43.970943][ T3624] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.990535][ T3624] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.998935][ T3624] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 44.006890][ T3624] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 44.014846][ T3624] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.022797][ T3624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.030753][ T3624] R13: 00000000000f4240 R14: 000000000000a9dc R15: 00007ffdc49a5924 [ 44.038725][ T3624] [pid 3624] close(3) = 0 [pid 3624] close(4) = 0 [pid 3624] close(5) = -1 EBADF (Bad file descriptor) [pid 3624] close(6) = -1 EBADF (Bad file descriptor) [pid 3624] close(7) = -1 EBADF (Bad file descriptor) [pid 3624] close(8) = -1 EBADF (Bad file descriptor) [pid 3624] close(9) = -1 EBADF (Bad file descriptor) [pid 3624] close(10) = -1 EBADF (Bad file descriptor) [pid 3624] close(11) = -1 EBADF (Bad file descriptor) [pid 3624] close(12) = -1 EBADF (Bad file descriptor) [pid 3624] close(13) = -1 EBADF (Bad file descriptor) [pid 3624] close(14) = -1 EBADF (Bad file descriptor) [pid 3624] close(15) = -1 EBADF (Bad file descriptor) [pid 3624] close(16) = -1 EBADF (Bad file descriptor) [pid 3624] close(17) = -1 EBADF (Bad file descriptor) [pid 3624] close(18) = -1 EBADF (Bad file descriptor) [pid 3624] close(19) = -1 EBADF (Bad file descriptor) [pid 3624] close(20) = -1 EBADF (Bad file descriptor) [pid 3624] close(21) = -1 EBADF (Bad file descriptor) [pid 3624] close(22) = -1 EBADF (Bad file descriptor) [pid 3624] close(23) = -1 EBADF (Bad file descriptor) [pid 3624] close(24) = -1 EBADF (Bad file descriptor) [pid 3624] close(25) = -1 EBADF (Bad file descriptor) [pid 3624] close(26) = -1 EBADF (Bad file descriptor) [pid 3624] close(27) = -1 EBADF (Bad file descriptor) [pid 3624] close(28) = -1 EBADF (Bad file descriptor) [pid 3624] close(29) = -1 EBADF (Bad file descriptor) [pid 3624] exit_group(0) = ? [pid 3624] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3625 attached , child_tidptr=0x5555570bd5d0) = 7 [pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3625] setpgid(0, 0) = 0 [pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3625] write(3, "1000", 4) = 4 [pid 3625] close(3) = 0 [pid 3625] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3625] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3625] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3625] write(4, "5", 1) = 1 [ 44.121863][ T3625] FAULT_INJECTION: forcing a failure. [ 44.121863][ T3625] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.135316][ T3625] CPU: 0 PID: 3625 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.145456][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.155505][ T3625] Call Trace: [ 44.158779][ T3625] [ 44.161692][ T3625] dump_stack_lvl+0xcd/0x134 [ 44.166278][ T3625] should_fail.cold+0x5/0xa [ 44.170771][ T3625] prepare_alloc_pages+0x17b/0x570 [ 44.175962][ T3625] __alloc_pages+0x12f/0x500 [ 44.180554][ T3625] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 44.187344][ T3625] ? ___slab_alloc+0x47e/0xf20 [ 44.192320][ T3625] alloc_pages+0x1aa/0x310 [ 44.196729][ T3625] ? mark_held_locks+0x9f/0xe0 [ 44.201485][ T3625] allocate_slab+0x26c/0x3c0 [ 44.206074][ T3625] ___slab_alloc+0x8df/0xf20 [ 44.210648][ T3625] ? napi_skb_cache_get+0xeb/0x170 [ 44.215749][ T3625] ? mark_held_locks+0x9f/0xe0 [ 44.220502][ T3625] kmem_cache_alloc_bulk+0x21c/0x720 [ 44.225777][ T3625] napi_skb_cache_get+0xeb/0x170 [ 44.230721][ T3625] __alloc_skb+0x9b/0x340 [ 44.235124][ T3625] ? __lock_acquire+0xbca/0x56c0 [ 44.240055][ T3625] __napi_alloc_skb+0x70/0x310 [ 44.244856][ T3625] napi_get_frags+0x5e/0x140 [ 44.249522][ T3625] tun_get_user+0xa07/0x3b00 [ 44.254109][ T3625] ? tun_build_skb+0x1170/0x1170 [ 44.259036][ T3625] ? lock_downgrade+0x6e0/0x6e0 [ 44.263887][ T3625] ? find_held_lock+0x2d/0x110 [ 44.268643][ T3625] tun_chr_write_iter+0xdb/0x200 [ 44.273568][ T3625] do_iter_readv_writev+0x3d1/0x640 [ 44.278772][ T3625] ? new_sync_write+0x560/0x560 [ 44.283611][ T3625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 44.289837][ T3625] ? security_file_permission+0xab/0xd0 [ 44.295378][ T3625] do_iter_write+0x182/0x700 [ 44.299962][ T3625] ? import_iovec+0x10c/0x150 [ 44.304627][ T3625] vfs_writev+0x1aa/0x630 [ 44.308944][ T3625] ? vfs_iter_write+0xa0/0xa0 [ 44.313600][ T3625] ? do_raw_spin_lock+0x120/0x2a0 [ 44.318611][ T3625] ? rwlock_bug.part.0+0x90/0x90 [ 44.323555][ T3625] ? _raw_spin_lock_irq+0x41/0x50 [ 44.328581][ T3625] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 44.334809][ T3625] ? find_held_lock+0x2d/0x110 [ 44.339564][ T3625] ? ptrace_notify+0xfa/0x140 [ 44.344232][ T3625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 44.350642][ T3625] ? __fget_light+0x20f/0x270 [ 44.355396][ T3625] do_writev+0x133/0x2f0 [ 44.359626][ T3625] ? vfs_writev+0x630/0x630 [ 44.364109][ T3625] ? lockdep_hardirqs_on+0x79/0x100 [ 44.369816][ T3625] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.375091][ T3625] ? ptrace_notify+0xfa/0x140 [ 44.379760][ T3625] do_syscall_64+0x35/0xb0 [ 44.384163][ T3625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.390042][ T3625] RIP: 0033:0x7fc6cd2b4c39 [ 44.394461][ T3625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.414315][ T3625] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3625] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.422804][ T3625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 44.430772][ T3625] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 44.438764][ T3625] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.446729][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.454685][ T3625] R13: 00000000000f4240 R14: 000000000000ab06 R15: 00007ffdc49a5924 [ 44.462665][ T3625] [pid 3625] close(3) = 0 [pid 3625] close(4) = 0 [pid 3625] close(5) = -1 EBADF (Bad file descriptor) [pid 3625] close(6) = -1 EBADF (Bad file descriptor) [pid 3625] close(7) = -1 EBADF (Bad file descriptor) [pid 3625] close(8) = -1 EBADF (Bad file descriptor) [pid 3625] close(9) = -1 EBADF (Bad file descriptor) [pid 3625] close(10) = -1 EBADF (Bad file descriptor) [pid 3625] close(11) = -1 EBADF (Bad file descriptor) [pid 3625] close(12) = -1 EBADF (Bad file descriptor) [pid 3625] close(13) = -1 EBADF (Bad file descriptor) [pid 3625] close(14) = -1 EBADF (Bad file descriptor) [pid 3625] close(15) = -1 EBADF (Bad file descriptor) [pid 3625] close(16) = -1 EBADF (Bad file descriptor) [pid 3625] close(17) = -1 EBADF (Bad file descriptor) [pid 3625] close(18) = -1 EBADF (Bad file descriptor) [pid 3625] close(19) = -1 EBADF (Bad file descriptor) [pid 3625] close(20) = -1 EBADF (Bad file descriptor) [pid 3625] close(21) = -1 EBADF (Bad file descriptor) [pid 3625] close(22) = -1 EBADF (Bad file descriptor) [pid 3625] close(23) = -1 EBADF (Bad file descriptor) [pid 3625] close(24) = -1 EBADF (Bad file descriptor) [pid 3625] close(25) = -1 EBADF (Bad file descriptor) [pid 3625] close(26) = -1 EBADF (Bad file descriptor) [pid 3625] close(27) = -1 EBADF (Bad file descriptor) [pid 3625] close(28) = -1 EBADF (Bad file descriptor) [pid 3625] close(29) = -1 EBADF (Bad file descriptor) [pid 3625] exit_group(0) = ? [pid 3625] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3626 attached , child_tidptr=0x5555570bd5d0) = 8 [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3626] setpgid(0, 0) = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3626] write(3, "1000", 4) = 4 [pid 3626] close(3) = 0 [pid 3626] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3626] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3626] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3626] write(4, "5", 1) = 1 [pid 3626] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.556661][ T3626] FAULT_INJECTION: forcing a failure. [ 44.556661][ T3626] name failslab, interval 1, probability 0, space 0, times 0 [ 44.569463][ T3626] CPU: 0 PID: 3626 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.579694][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.589749][ T3626] Call Trace: [ 44.593023][ T3626] [ 44.595932][ T3626] dump_stack_lvl+0xcd/0x134 [ 44.600507][ T3626] should_fail.cold+0x5/0xa [ 44.604989][ T3626] should_failslab+0x5/0x10 [ 44.609471][ T3626] kmem_cache_alloc_trace+0x60/0x3f0 [ 44.614737][ T3626] ? ref_tracker_alloc+0x14c/0x550 [ 44.619831][ T3626] ref_tracker_alloc+0x14c/0x550 [ 44.624746][ T3626] ? ref_tracker_free+0x6b0/0x6b0 [ 44.629761][ T3626] ? lock_release+0x720/0x720 [ 44.634431][ T3626] ? do_raw_spin_lock+0x120/0x2a0 [ 44.639443][ T3626] ? rwlock_bug.part.0+0x90/0x90 [ 44.644378][ T3626] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 44.649749][ T3626] linkwatch_fire_event+0x202/0x260 [ 44.654936][ T3626] netif_carrier_off+0x96/0xb0 [ 44.659679][ T3626] __tun_detach+0xfe7/0x13e0 [ 44.664255][ T3626] tun_chr_close+0xc4/0x180 [ 44.668735][ T3626] __fput+0x277/0x9d0 [ 44.672695][ T3626] ? __tun_detach+0x13e0/0x13e0 [ 44.677528][ T3626] task_work_run+0xdd/0x1a0 [ 44.682024][ T3626] ptrace_notify+0x114/0x140 [ 44.686594][ T3626] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 44.692824][ T3626] syscall_exit_to_user_mode+0x9/0x60 [ 44.698176][ T3626] do_syscall_64+0x42/0xb0 [ 44.702572][ T3626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.708447][ T3626] RIP: 0033:0x7fc6cd2767a3 [ 44.712840][ T3626] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 44.732518][ T3626] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 44.740917][ T3626] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 44.748873][ T3626] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3626] close(3) = 0 [pid 3626] close(4) = 0 [pid 3626] close(5) = -1 EBADF (Bad file descriptor) [pid 3626] close(6) = -1 EBADF (Bad file descriptor) [pid 3626] close(7) = -1 EBADF (Bad file descriptor) [pid 3626] close(8) = -1 EBADF (Bad file descriptor) [pid 3626] close(9) = -1 EBADF (Bad file descriptor) [pid 3626] close(10) = -1 EBADF (Bad file descriptor) [pid 3626] close(11) = -1 EBADF (Bad file descriptor) [pid 3626] close(12) = -1 EBADF (Bad file descriptor) [pid 3626] close(13) = -1 EBADF (Bad file descriptor) [pid 3626] close(14) = -1 EBADF (Bad file descriptor) [pid 3626] close(15) = -1 EBADF (Bad file descriptor) [pid 3626] close(16) = -1 EBADF (Bad file descriptor) [pid 3626] close(17) = -1 EBADF (Bad file descriptor) [pid 3626] close(18) = -1 EBADF (Bad file descriptor) [pid 3626] close(19) = -1 EBADF (Bad file descriptor) [pid 3626] close(20) = -1 EBADF (Bad file descriptor) [pid 3626] close(21) = -1 EBADF (Bad file descriptor) [pid 3626] close(22) = -1 EBADF (Bad file descriptor) [ 44.756826][ T3626] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.764775][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.772823][ T3626] R13: 00000000000f4240 R14: 000000000000ac3f R15: 00007ffdc49a5924 [ 44.780786][ T3626] [pid 3626] close(23) = -1 EBADF (Bad file descriptor) [pid 3626] close(24) = -1 EBADF (Bad file descriptor) [pid 3626] close(25) = -1 EBADF (Bad file descriptor) [pid 3626] close(26) = -1 EBADF (Bad file descriptor) [pid 3626] close(27) = -1 EBADF (Bad file descriptor) [pid 3626] close(28) = -1 EBADF (Bad file descriptor) [pid 3626] close(29) = -1 EBADF (Bad file descriptor) [pid 3626] exit_group(0) = ? [pid 3626] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 9 ./strace-static-x86_64: Process 3627 attached [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3627] setpgid(0, 0) = 0 [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3627] write(3, "1000", 4) = 4 [pid 3627] close(3) = 0 [pid 3627] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3627] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3627] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3627] write(4, "5", 1) = 1 [pid 3627] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.853173][ T3627] FAULT_INJECTION: forcing a failure. [ 44.853173][ T3627] name failslab, interval 1, probability 0, space 0, times 0 [ 44.866025][ T3627] CPU: 1 PID: 3627 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.876184][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.886244][ T3627] Call Trace: [ 44.889521][ T3627] [ 44.892456][ T3627] dump_stack_lvl+0xcd/0x134 [ 44.897041][ T3627] should_fail.cold+0x5/0xa [ 44.901543][ T3627] should_failslab+0x5/0x10 [ 44.906036][ T3627] kmem_cache_alloc_trace+0x60/0x3f0 [ 44.911396][ T3627] ? ref_tracker_alloc+0x14c/0x550 [ 44.916497][ T3627] ref_tracker_alloc+0x14c/0x550 [ 44.921509][ T3627] ? ref_tracker_free+0x6b0/0x6b0 [ 44.926525][ T3627] ? lock_release+0x720/0x720 [ 44.931198][ T3627] ? do_raw_spin_lock+0x120/0x2a0 [ 44.936215][ T3627] ? rwlock_bug.part.0+0x90/0x90 [ 44.941142][ T3627] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 44.946508][ T3627] linkwatch_fire_event+0x202/0x260 [ 44.951706][ T3627] netif_carrier_off+0x96/0xb0 [ 44.956462][ T3627] __tun_detach+0xfe7/0x13e0 [ 44.961068][ T3627] tun_chr_close+0xc4/0x180 [ 44.965560][ T3627] __fput+0x277/0x9d0 [ 44.969531][ T3627] ? __tun_detach+0x13e0/0x13e0 [ 44.974380][ T3627] task_work_run+0xdd/0x1a0 [ 44.978886][ T3627] ptrace_notify+0x114/0x140 [ 44.983471][ T3627] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 44.989708][ T3627] syscall_exit_to_user_mode+0x9/0x60 [ 44.995075][ T3627] do_syscall_64+0x42/0xb0 [ 44.999492][ T3627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.005504][ T3627] RIP: 0033:0x7fc6cd2767a3 [ 45.010011][ T3627] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.029802][ T3627] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.038215][ T3627] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 45.046182][ T3627] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3627] close(3) = 0 [pid 3627] close(4) = 0 [pid 3627] close(5) = -1 EBADF (Bad file descriptor) [pid 3627] close(6) = -1 EBADF (Bad file descriptor) [pid 3627] close(7) = -1 EBADF (Bad file descriptor) [pid 3627] close(8) = -1 EBADF (Bad file descriptor) [pid 3627] close(9) = -1 EBADF (Bad file descriptor) [pid 3627] close(10) = -1 EBADF (Bad file descriptor) [pid 3627] close(11) = -1 EBADF (Bad file descriptor) [pid 3627] close(12) = -1 EBADF (Bad file descriptor) [pid 3627] close(13) = -1 EBADF (Bad file descriptor) [ 45.054142][ T3627] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.062131][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.070097][ T3627] R13: 00000000000f4240 R14: 000000000000adec R15: 00007ffdc49a5924 [ 45.078080][ T3627] [pid 3627] close(14) = -1 EBADF (Bad file descriptor) [pid 3627] close(15) = -1 EBADF (Bad file descriptor) [pid 3627] close(16) = -1 EBADF (Bad file descriptor) [pid 3627] close(17) = -1 EBADF (Bad file descriptor) [pid 3627] close(18) = -1 EBADF (Bad file descriptor) [pid 3627] close(19) = -1 EBADF (Bad file descriptor) [pid 3627] close(20) = -1 EBADF (Bad file descriptor) [pid 3627] close(21) = -1 EBADF (Bad file descriptor) [pid 3627] close(22) = -1 EBADF (Bad file descriptor) [pid 3627] close(23) = -1 EBADF (Bad file descriptor) [pid 3627] close(24) = -1 EBADF (Bad file descriptor) [pid 3627] close(25) = -1 EBADF (Bad file descriptor) [pid 3627] close(26) = -1 EBADF (Bad file descriptor) [pid 3627] close(27) = -1 EBADF (Bad file descriptor) [pid 3627] close(28) = -1 EBADF (Bad file descriptor) [pid 3627] close(29) = -1 EBADF (Bad file descriptor) [pid 3627] exit_group(0) = ? [pid 3627] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 10 ./strace-static-x86_64: Process 3628 attached [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3628] setpgid(0, 0) = 0 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3628] write(3, "1000", 4) = 4 [pid 3628] close(3) = 0 [pid 3628] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3628] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3628] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3628] write(4, "5", 1) = 1 [pid 3628] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.155488][ T3628] FAULT_INJECTION: forcing a failure. [ 45.155488][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 45.168336][ T3628] CPU: 1 PID: 3628 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.178476][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.188529][ T3628] Call Trace: [ 45.191789][ T3628] [ 45.194697][ T3628] dump_stack_lvl+0xcd/0x134 [ 45.199384][ T3628] should_fail.cold+0x5/0xa [ 45.203882][ T3628] should_failslab+0x5/0x10 [ 45.208368][ T3628] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.213641][ T3628] ? ref_tracker_alloc+0x14c/0x550 [ 45.218752][ T3628] ref_tracker_alloc+0x14c/0x550 [ 45.223698][ T3628] ? ref_tracker_free+0x6b0/0x6b0 [ 45.228715][ T3628] ? lock_release+0x720/0x720 [ 45.233407][ T3628] ? lockdep_hardirqs_on+0x79/0x100 [ 45.238608][ T3628] ? do_raw_spin_lock+0x120/0x2a0 [ 45.243824][ T3628] ? rwlock_bug.part.0+0x90/0x90 [ 45.248751][ T3628] ? preempt_schedule_common+0x59/0xc0 [ 45.254211][ T3628] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.259582][ T3628] linkwatch_fire_event+0x202/0x260 [ 45.264782][ T3628] netif_carrier_off+0x96/0xb0 [ 45.269539][ T3628] __tun_detach+0xfe7/0x13e0 [ 45.274122][ T3628] tun_chr_close+0xc4/0x180 [ 45.278699][ T3628] __fput+0x277/0x9d0 [ 45.282665][ T3628] ? __tun_detach+0x13e0/0x13e0 [ 45.287499][ T3628] task_work_run+0xdd/0x1a0 [ 45.292076][ T3628] ptrace_notify+0x114/0x140 [ 45.296648][ T3628] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.302876][ T3628] syscall_exit_to_user_mode+0x9/0x60 [ 45.308233][ T3628] do_syscall_64+0x42/0xb0 [ 45.312811][ T3628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.318696][ T3628] RIP: 0033:0x7fc6cd2767a3 [ 45.323101][ T3628] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.342873][ T3628] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [pid 3628] close(3) = 0 [pid 3628] close(4) = 0 [ 45.351280][ T3628] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 45.359335][ T3628] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.367293][ T3628] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.375249][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.383307][ T3628] R13: 00000000000f4240 R14: 000000000000af18 R15: 00007ffdc49a5924 [ 45.391473][ T3628] [pid 3628] close(5) = -1 EBADF (Bad file descriptor) [pid 3628] close(6) = -1 EBADF (Bad file descriptor) [pid 3628] close(7) = -1 EBADF (Bad file descriptor) [pid 3628] close(8) = -1 EBADF (Bad file descriptor) [pid 3628] close(9) = -1 EBADF (Bad file descriptor) [pid 3628] close(10) = -1 EBADF (Bad file descriptor) [pid 3628] close(11) = -1 EBADF (Bad file descriptor) [pid 3628] close(12) = -1 EBADF (Bad file descriptor) [pid 3628] close(13) = -1 EBADF (Bad file descriptor) [pid 3628] close(14) = -1 EBADF (Bad file descriptor) [pid 3628] close(15) = -1 EBADF (Bad file descriptor) [pid 3628] close(16) = -1 EBADF (Bad file descriptor) [pid 3628] close(17) = -1 EBADF (Bad file descriptor) [pid 3628] close(18) = -1 EBADF (Bad file descriptor) [pid 3628] close(19) = -1 EBADF (Bad file descriptor) [pid 3628] close(20) = -1 EBADF (Bad file descriptor) [pid 3628] close(21) = -1 EBADF (Bad file descriptor) [pid 3628] close(22) = -1 EBADF (Bad file descriptor) [pid 3628] close(23) = -1 EBADF (Bad file descriptor) [pid 3628] close(24) = -1 EBADF (Bad file descriptor) [pid 3628] close(25) = -1 EBADF (Bad file descriptor) [pid 3628] close(26) = -1 EBADF (Bad file descriptor) [pid 3628] close(27) = -1 EBADF (Bad file descriptor) [pid 3628] close(28) = -1 EBADF (Bad file descriptor) [pid 3628] close(29) = -1 EBADF (Bad file descriptor) [pid 3628] exit_group(0) = ? [pid 3628] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=25} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 11 ./strace-static-x86_64: Process 3629 attached [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3629] setpgid(0, 0) = 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3629] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3629] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3629] write(4, "5", 1) = 1 [pid 3629] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.469823][ T3629] FAULT_INJECTION: forcing a failure. [ 45.469823][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 45.482437][ T3629] CPU: 1 PID: 3629 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.492581][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.502634][ T3629] Call Trace: [ 45.505992][ T3629] [ 45.508912][ T3629] dump_stack_lvl+0xcd/0x134 [ 45.513501][ T3629] should_fail.cold+0x5/0xa [ 45.518638][ T3629] should_failslab+0x5/0x10 [ 45.523138][ T3629] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.528413][ T3629] ? ref_tracker_alloc+0x14c/0x550 [ 45.533538][ T3629] ref_tracker_alloc+0x14c/0x550 [ 45.538466][ T3629] ? ref_tracker_free+0x6b0/0x6b0 [ 45.543474][ T3629] ? lock_release+0x720/0x720 [ 45.548140][ T3629] ? do_raw_spin_lock+0x120/0x2a0 [ 45.553153][ T3629] ? rwlock_bug.part.0+0x90/0x90 [ 45.558083][ T3629] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.563615][ T3629] linkwatch_fire_event+0x202/0x260 [ 45.568809][ T3629] netif_carrier_off+0x96/0xb0 [ 45.573568][ T3629] __tun_detach+0xfe7/0x13e0 [ 45.578293][ T3629] tun_chr_close+0xc4/0x180 [ 45.582791][ T3629] __fput+0x277/0x9d0 [ 45.586762][ T3629] ? __tun_detach+0x13e0/0x13e0 [ 45.591620][ T3629] task_work_run+0xdd/0x1a0 [ 45.596223][ T3629] ptrace_notify+0x114/0x140 [ 45.600983][ T3629] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.607219][ T3629] syscall_exit_to_user_mode+0x9/0x60 [ 45.612583][ T3629] do_syscall_64+0x42/0xb0 [ 45.616999][ T3629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.622893][ T3629] RIP: 0033:0x7fc6cd2767a3 [ 45.627305][ T3629] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.646913][ T3629] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.655320][ T3629] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3629] close(3) = 0 [pid 3629] close(4) = 0 [pid 3629] close(5) = -1 EBADF (Bad file descriptor) [pid 3629] close(6) = -1 EBADF (Bad file descriptor) [pid 3629] close(7) = -1 EBADF (Bad file descriptor) [pid 3629] close(8) = -1 EBADF (Bad file descriptor) [pid 3629] close(9) = -1 EBADF (Bad file descriptor) [pid 3629] close(10) = -1 EBADF (Bad file descriptor) [pid 3629] close(11) = -1 EBADF (Bad file descriptor) [pid 3629] close(12) = -1 EBADF (Bad file descriptor) [pid 3629] close(13) = -1 EBADF (Bad file descriptor) [pid 3629] close(14) = -1 EBADF (Bad file descriptor) [pid 3629] close(15) = -1 EBADF (Bad file descriptor) [pid 3629] close(16) = -1 EBADF (Bad file descriptor) [pid 3629] close(17) = -1 EBADF (Bad file descriptor) [pid 3629] close(18) = -1 EBADF (Bad file descriptor) [pid 3629] close(19) = -1 EBADF (Bad file descriptor) [pid 3629] close(20) = -1 EBADF (Bad file descriptor) [pid 3629] close(21) = -1 EBADF (Bad file descriptor) [pid 3629] close(22) = -1 EBADF (Bad file descriptor) [pid 3629] close(23) = -1 EBADF (Bad file descriptor) [pid 3629] close(24) = -1 EBADF (Bad file descriptor) [pid 3629] close(25) = -1 EBADF (Bad file descriptor) [pid 3629] close(26) = -1 EBADF (Bad file descriptor) [pid 3629] close(27) = -1 EBADF (Bad file descriptor) [pid 3629] close(28) = -1 EBADF (Bad file descriptor) [pid 3629] close(29) = -1 EBADF (Bad file descriptor) [pid 3629] exit_group(0) = ? [pid 3629] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 12 ./strace-static-x86_64: Process 3630 attached [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3630] ioctl(3, TUNSETIFF, 0x20000000) = 0 [ 45.663282][ T3629] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.671254][ T3629] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.679313][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.687274][ T3629] R13: 00000000000f4240 R14: 000000000000b046 R15: 00007ffdc49a5924 [ 45.695352][ T3629] [pid 3630] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3630] write(4, "5", 1) = 1 [pid 3630] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.754023][ T3630] FAULT_INJECTION: forcing a failure. [ 45.754023][ T3630] name failslab, interval 1, probability 0, space 0, times 0 [ 45.767095][ T3630] CPU: 0 PID: 3630 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.777747][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.787810][ T3630] Call Trace: [ 45.791095][ T3630] [ 45.794031][ T3630] dump_stack_lvl+0xcd/0x134 [ 45.798625][ T3630] should_fail.cold+0x5/0xa [ 45.803137][ T3630] should_failslab+0x5/0x10 [ 45.807815][ T3630] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.813107][ T3630] ? ref_tracker_alloc+0x14c/0x550 [ 45.818233][ T3630] ref_tracker_alloc+0x14c/0x550 [ 45.823193][ T3630] ? ref_tracker_free+0x6b0/0x6b0 [ 45.828224][ T3630] ? lock_release+0x720/0x720 [ 45.832913][ T3630] ? do_raw_spin_lock+0x120/0x2a0 [ 45.837992][ T3630] ? rwlock_bug.part.0+0x90/0x90 [ 45.842977][ T3630] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.848361][ T3630] linkwatch_fire_event+0x202/0x260 [ 45.853571][ T3630] netif_carrier_off+0x96/0xb0 [ 45.858348][ T3630] __tun_detach+0xfe7/0x13e0 [ 45.862966][ T3630] tun_chr_close+0xc4/0x180 [ 45.867563][ T3630] __fput+0x277/0x9d0 [ 45.871550][ T3630] ? __tun_detach+0x13e0/0x13e0 [ 45.876408][ T3630] task_work_run+0xdd/0x1a0 [ 45.880948][ T3630] ptrace_notify+0x114/0x140 [ 45.885549][ T3630] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.891802][ T3630] syscall_exit_to_user_mode+0x9/0x60 [ 45.897200][ T3630] do_syscall_64+0x42/0xb0 [ 45.901651][ T3630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.907549][ T3630] RIP: 0033:0x7fc6cd2767a3 [ 45.911975][ T3630] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.931581][ T3630] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.940003][ T3630] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3630] close(3) = 0 [pid 3630] close(4) = 0 [pid 3630] close(5) = -1 EBADF (Bad file descriptor) [pid 3630] close(6) = -1 EBADF (Bad file descriptor) [pid 3630] close(7) = -1 EBADF (Bad file descriptor) [pid 3630] close(8) = -1 EBADF (Bad file descriptor) [pid 3630] close(9) = -1 EBADF (Bad file descriptor) [pid 3630] close(10) = -1 EBADF (Bad file descriptor) [pid 3630] close(11) = -1 EBADF (Bad file descriptor) [pid 3630] close(12) = -1 EBADF (Bad file descriptor) [pid 3630] close(13) = -1 EBADF (Bad file descriptor) [pid 3630] close(14) = -1 EBADF (Bad file descriptor) [pid 3630] close(15) = -1 EBADF (Bad file descriptor) [pid 3630] close(16) = -1 EBADF (Bad file descriptor) [pid 3630] close(17) = -1 EBADF (Bad file descriptor) [pid 3630] close(18) = -1 EBADF (Bad file descriptor) [pid 3630] close(19) = -1 EBADF (Bad file descriptor) [pid 3630] close(20) = -1 EBADF (Bad file descriptor) [pid 3630] close(21) = -1 EBADF (Bad file descriptor) [ 45.947980][ T3630] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.955952][ T3630] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.963940][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.971930][ T3630] R13: 00000000000f4240 R14: 000000000000b17d R15: 00007ffdc49a5924 [ 45.980041][ T3630] [pid 3630] close(22) = -1 EBADF (Bad file descriptor) [pid 3630] close(23) = -1 EBADF (Bad file descriptor) [pid 3630] close(24) = -1 EBADF (Bad file descriptor) [pid 3630] close(25) = -1 EBADF (Bad file descriptor) [pid 3630] close(26) = -1 EBADF (Bad file descriptor) [pid 3630] close(27) = -1 EBADF (Bad file descriptor) [pid 3630] close(28) = -1 EBADF (Bad file descriptor) [pid 3630] close(29) = -1 EBADF (Bad file descriptor) [pid 3630] exit_group(0) = ? [pid 3630] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 13 ./strace-static-x86_64: Process 3631 attached [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3631] setpgid(0, 0) = 0 [pid 3631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1000", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3631] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3631] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3631] write(4, "5", 1) = 1 [pid 3631] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.047462][ T3631] FAULT_INJECTION: forcing a failure. [ 46.047462][ T3631] name failslab, interval 1, probability 0, space 0, times 0 [ 46.060096][ T3631] CPU: 0 PID: 3631 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.070238][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.080288][ T3631] Call Trace: [ 46.083558][ T3631] [ 46.086475][ T3631] dump_stack_lvl+0xcd/0x134 [ 46.091060][ T3631] should_fail.cold+0x5/0xa [ 46.095556][ T3631] should_failslab+0x5/0x10 [ 46.100073][ T3631] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.105375][ T3631] ? ref_tracker_alloc+0x14c/0x550 [ 46.110595][ T3631] ref_tracker_alloc+0x14c/0x550 [ 46.115534][ T3631] ? ref_tracker_free+0x6b0/0x6b0 [ 46.120554][ T3631] ? lock_release+0x720/0x720 [ 46.125230][ T3631] ? do_raw_spin_lock+0x120/0x2a0 [ 46.130253][ T3631] ? rwlock_bug.part.0+0x90/0x90 [ 46.135185][ T3631] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.140557][ T3631] linkwatch_fire_event+0x202/0x260 [ 46.145757][ T3631] netif_carrier_off+0x96/0xb0 [ 46.150603][ T3631] __tun_detach+0xfe7/0x13e0 [ 46.155192][ T3631] tun_chr_close+0xc4/0x180 [ 46.159686][ T3631] __fput+0x277/0x9d0 [ 46.163662][ T3631] ? __tun_detach+0x13e0/0x13e0 [ 46.168513][ T3631] task_work_run+0xdd/0x1a0 [ 46.173011][ T3631] ptrace_notify+0x114/0x140 [ 46.177592][ T3631] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.183829][ T3631] syscall_exit_to_user_mode+0x9/0x60 [ 46.189194][ T3631] do_syscall_64+0x42/0xb0 [ 46.193604][ T3631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.199495][ T3631] RIP: 0033:0x7fc6cd2767a3 [ 46.203906][ T3631] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.223512][ T3631] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.231925][ T3631] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 46.239898][ T3631] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3631] close(3) = 0 [pid 3631] close(4) = 0 [pid 3631] close(5) = -1 EBADF (Bad file descriptor) [pid 3631] close(6) = -1 EBADF (Bad file descriptor) [pid 3631] close(7) = -1 EBADF (Bad file descriptor) [ 46.247967][ T3631] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.255929][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.263893][ T3631] R13: 00000000000f4240 R14: 000000000000b29e R15: 00007ffdc49a5924 [ 46.271872][ T3631] [pid 3631] close(8) = -1 EBADF (Bad file descriptor) [pid 3631] close(9) = -1 EBADF (Bad file descriptor) [pid 3631] close(10) = -1 EBADF (Bad file descriptor) [pid 3631] close(11) = -1 EBADF (Bad file descriptor) [pid 3631] close(12) = -1 EBADF (Bad file descriptor) [pid 3631] close(13) = -1 EBADF (Bad file descriptor) [pid 3631] close(14) = -1 EBADF (Bad file descriptor) [pid 3631] close(15) = -1 EBADF (Bad file descriptor) [pid 3631] close(16) = -1 EBADF (Bad file descriptor) [pid 3631] close(17) = -1 EBADF (Bad file descriptor) [pid 3631] close(18) = -1 EBADF (Bad file descriptor) [pid 3631] close(19) = -1 EBADF (Bad file descriptor) [pid 3631] close(20) = -1 EBADF (Bad file descriptor) [pid 3631] close(21) = -1 EBADF (Bad file descriptor) [pid 3631] close(22) = -1 EBADF (Bad file descriptor) [pid 3631] close(23) = -1 EBADF (Bad file descriptor) [pid 3631] close(24) = -1 EBADF (Bad file descriptor) [pid 3631] close(25) = -1 EBADF (Bad file descriptor) [pid 3631] close(26) = -1 EBADF (Bad file descriptor) [pid 3631] close(27) = -1 EBADF (Bad file descriptor) [pid 3631] close(28) = -1 EBADF (Bad file descriptor) [pid 3631] close(29) = -1 EBADF (Bad file descriptor) [pid 3631] exit_group(0) = ? [pid 3631] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 14 ./strace-static-x86_64: Process 3632 attached [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3632] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3632] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3632] write(4, "5", 1) = 1 [pid 3632] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.357300][ T3632] FAULT_INJECTION: forcing a failure. [ 46.357300][ T3632] name failslab, interval 1, probability 0, space 0, times 0 [ 46.369927][ T3632] CPU: 0 PID: 3632 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.380072][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.390123][ T3632] Call Trace: [ 46.393396][ T3632] [ 46.396322][ T3632] dump_stack_lvl+0xcd/0x134 [ 46.400937][ T3632] should_fail.cold+0x5/0xa [ 46.405443][ T3632] should_failslab+0x5/0x10 [ 46.409961][ T3632] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.415247][ T3632] ? ref_tracker_alloc+0x14c/0x550 [ 46.420369][ T3632] ref_tracker_alloc+0x14c/0x550 [ 46.425317][ T3632] ? ref_tracker_free+0x6b0/0x6b0 [ 46.430346][ T3632] ? lock_release+0x720/0x720 [ 46.435055][ T3632] ? do_raw_spin_lock+0x120/0x2a0 [ 46.440108][ T3632] ? rwlock_bug.part.0+0x90/0x90 [ 46.445055][ T3632] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.450438][ T3632] linkwatch_fire_event+0x202/0x260 [ 46.455648][ T3632] netif_carrier_off+0x96/0xb0 [ 46.460503][ T3632] __tun_detach+0xfe7/0x13e0 [ 46.465114][ T3632] tun_chr_close+0xc4/0x180 [ 46.469647][ T3632] __fput+0x277/0x9d0 [ 46.473747][ T3632] ? __tun_detach+0x13e0/0x13e0 [ 46.478617][ T3632] task_work_run+0xdd/0x1a0 [ 46.483211][ T3632] ptrace_notify+0x114/0x140 [ 46.487800][ T3632] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.494047][ T3632] syscall_exit_to_user_mode+0x9/0x60 [ 46.499439][ T3632] do_syscall_64+0x42/0xb0 [ 46.503859][ T3632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.509770][ T3632] RIP: 0033:0x7fc6cd2767a3 [ 46.514179][ T3632] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.533783][ T3632] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.542280][ T3632] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 46.550257][ T3632] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3632] close(3) = 0 [pid 3632] close(4) = 0 [pid 3632] close(5) = -1 EBADF (Bad file descriptor) [pid 3632] close(6) = -1 EBADF (Bad file descriptor) [pid 3632] close(7) = -1 EBADF (Bad file descriptor) [ 46.558251][ T3632] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.566311][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.574302][ T3632] R13: 00000000000f4240 R14: 000000000000b3c7 R15: 00007ffdc49a5924 [ 46.582283][ T3632] [pid 3632] close(8) = -1 EBADF (Bad file descriptor) [pid 3632] close(9) = -1 EBADF (Bad file descriptor) [pid 3632] close(10) = -1 EBADF (Bad file descriptor) [pid 3632] close(11) = -1 EBADF (Bad file descriptor) [pid 3632] close(12) = -1 EBADF (Bad file descriptor) [pid 3632] close(13) = -1 EBADF (Bad file descriptor) [pid 3632] close(14) = -1 EBADF (Bad file descriptor) [pid 3632] close(15) = -1 EBADF (Bad file descriptor) [pid 3632] close(16) = -1 EBADF (Bad file descriptor) [pid 3632] close(17) = -1 EBADF (Bad file descriptor) [pid 3632] close(18) = -1 EBADF (Bad file descriptor) [pid 3632] close(19) = -1 EBADF (Bad file descriptor) [pid 3632] close(20) = -1 EBADF (Bad file descriptor) [pid 3632] close(21) = -1 EBADF (Bad file descriptor) [pid 3632] close(22) = -1 EBADF (Bad file descriptor) [pid 3632] close(23) = -1 EBADF (Bad file descriptor) [pid 3632] close(24) = -1 EBADF (Bad file descriptor) [pid 3632] close(25) = -1 EBADF (Bad file descriptor) [pid 3632] close(26) = -1 EBADF (Bad file descriptor) [pid 3632] close(27) = -1 EBADF (Bad file descriptor) [pid 3632] close(28) = -1 EBADF (Bad file descriptor) [pid 3632] close(29) = -1 EBADF (Bad file descriptor) [pid 3632] exit_group(0) = ? [pid 3632] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3633 attached , child_tidptr=0x5555570bd5d0) = 15 [pid 3633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3633] setpgid(0, 0) = 0 [pid 3633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3633] write(3, "1000", 4) = 4 [pid 3633] close(3) = 0 [pid 3633] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3633] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3633] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3633] write(4, "5", 1) = 1 [pid 3633] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.668875][ T3633] FAULT_INJECTION: forcing a failure. [ 46.668875][ T3633] name failslab, interval 1, probability 0, space 0, times 0 [ 46.682111][ T3633] CPU: 0 PID: 3633 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.692346][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.702404][ T3633] Call Trace: [ 46.705711][ T3633] [ 46.708636][ T3633] dump_stack_lvl+0xcd/0x134 [ 46.713232][ T3633] should_fail.cold+0x5/0xa [ 46.717745][ T3633] should_failslab+0x5/0x10 [ 46.722254][ T3633] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.727537][ T3633] ? ref_tracker_alloc+0x14c/0x550 [ 46.732645][ T3633] ref_tracker_alloc+0x14c/0x550 [ 46.737575][ T3633] ? ref_tracker_free+0x6b0/0x6b0 [ 46.742678][ T3633] ? lock_release+0x720/0x720 [ 46.747352][ T3633] ? do_raw_spin_lock+0x120/0x2a0 [ 46.752370][ T3633] ? rwlock_bug.part.0+0x90/0x90 [ 46.757306][ T3633] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.762680][ T3633] linkwatch_fire_event+0x202/0x260 [ 46.767881][ T3633] netif_carrier_off+0x96/0xb0 [ 46.772643][ T3633] __tun_detach+0xfe7/0x13e0 [ 46.777236][ T3633] tun_chr_close+0xc4/0x180 [ 46.781729][ T3633] __fput+0x277/0x9d0 [ 46.785702][ T3633] ? __tun_detach+0x13e0/0x13e0 [ 46.790547][ T3633] task_work_run+0xdd/0x1a0 [ 46.795044][ T3633] ptrace_notify+0x114/0x140 [ 46.799632][ T3633] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.805872][ T3633] syscall_exit_to_user_mode+0x9/0x60 [ 46.811236][ T3633] do_syscall_64+0x42/0xb0 [ 46.815647][ T3633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.821534][ T3633] RIP: 0033:0x7fc6cd2767a3 [ 46.825937][ T3633] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.845626][ T3633] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.854051][ T3633] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3633] close(3) = 0 [pid 3633] close(4) = 0 [pid 3633] close(5) = -1 EBADF (Bad file descriptor) [pid 3633] close(6) = -1 EBADF (Bad file descriptor) [pid 3633] close(7) = -1 EBADF (Bad file descriptor) [pid 3633] close(8) = -1 EBADF (Bad file descriptor) [pid 3633] close(9) = -1 EBADF (Bad file descriptor) [pid 3633] close(10) = -1 EBADF (Bad file descriptor) [pid 3633] close(11) = -1 EBADF (Bad file descriptor) [pid 3633] close(12) = -1 EBADF (Bad file descriptor) [pid 3633] close(13) = -1 EBADF (Bad file descriptor) [pid 3633] close(14) = -1 EBADF (Bad file descriptor) [pid 3633] close(15) = -1 EBADF (Bad file descriptor) [pid 3633] close(16) = -1 EBADF (Bad file descriptor) [pid 3633] close(17) = -1 EBADF (Bad file descriptor) [pid 3633] close(18) = -1 EBADF (Bad file descriptor) [pid 3633] close(19) = -1 EBADF (Bad file descriptor) [pid 3633] close(20) = -1 EBADF (Bad file descriptor) [pid 3633] close(21) = -1 EBADF (Bad file descriptor) [pid 3633] close(22) = -1 EBADF (Bad file descriptor) [pid 3633] close(23) = -1 EBADF (Bad file descriptor) [pid 3633] close(24) = -1 EBADF (Bad file descriptor) [pid 3633] close(25) = -1 EBADF (Bad file descriptor) [pid 3633] close(26) = -1 EBADF (Bad file descriptor) [pid 3633] close(27) = -1 EBADF (Bad file descriptor) [pid 3633] close(28) = -1 EBADF (Bad file descriptor) [pid 3633] close(29) = -1 EBADF (Bad file descriptor) [pid 3633] exit_group(0) = ? [pid 3633] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 16 ./strace-static-x86_64: Process 3634 attached [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3634] setpgid(0, 0) = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3) = 0 [pid 3634] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 46.862013][ T3633] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 46.870065][ T3633] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.878382][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.886349][ T3633] R13: 00000000000f4240 R14: 000000000000b4f7 R15: 00007ffdc49a5924 [ 46.894339][ T3633] [pid 3634] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3634] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3634] write(4, "5", 1) = 1 [pid 3634] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.956057][ T3634] FAULT_INJECTION: forcing a failure. [ 46.956057][ T3634] name failslab, interval 1, probability 0, space 0, times 0 [ 46.968752][ T3634] CPU: 1 PID: 3634 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.978896][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.988946][ T3634] Call Trace: [ 46.992230][ T3634] [ 46.995139][ T3634] dump_stack_lvl+0xcd/0x134 [ 46.999720][ T3634] should_fail.cold+0x5/0xa [ 47.004212][ T3634] should_failslab+0x5/0x10 [ 47.008701][ T3634] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.013980][ T3634] ? ref_tracker_alloc+0x14c/0x550 [ 47.019118][ T3634] ref_tracker_alloc+0x14c/0x550 [ 47.024075][ T3634] ? ref_tracker_free+0x6b0/0x6b0 [ 47.029094][ T3634] ? lock_release+0x720/0x720 [ 47.033770][ T3634] ? do_raw_spin_lock+0x120/0x2a0 [ 47.038792][ T3634] ? rwlock_bug.part.0+0x90/0x90 [ 47.043730][ T3634] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.049106][ T3634] linkwatch_fire_event+0x202/0x260 [ 47.054307][ T3634] netif_carrier_off+0x96/0xb0 [ 47.059071][ T3634] __tun_detach+0xfe7/0x13e0 [ 47.063756][ T3634] tun_chr_close+0xc4/0x180 [ 47.068243][ T3634] __fput+0x277/0x9d0 [ 47.072212][ T3634] ? __tun_detach+0x13e0/0x13e0 [ 47.077224][ T3634] task_work_run+0xdd/0x1a0 [ 47.081717][ T3634] ptrace_notify+0x114/0x140 [ 47.086296][ T3634] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.092539][ T3634] syscall_exit_to_user_mode+0x9/0x60 [ 47.097897][ T3634] do_syscall_64+0x42/0xb0 [ 47.102302][ T3634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.108181][ T3634] RIP: 0033:0x7fc6cd2767a3 [ 47.112582][ T3634] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.132301][ T3634] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.140705][ T3634] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 47.148750][ T3634] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3634] close(3) = 0 [pid 3634] close(4) = 0 [pid 3634] close(5) = -1 EBADF (Bad file descriptor) [pid 3634] close(6) = -1 EBADF (Bad file descriptor) [pid 3634] close(7) = -1 EBADF (Bad file descriptor) [pid 3634] close(8) = -1 EBADF (Bad file descriptor) [pid 3634] close(9) = -1 EBADF (Bad file descriptor) [pid 3634] close(10) = -1 EBADF (Bad file descriptor) [pid 3634] close(11) = -1 EBADF (Bad file descriptor) [ 47.156706][ T3634] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.164845][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.172794][ T3634] R13: 00000000000f4240 R14: 000000000000b62d R15: 00007ffdc49a5924 [ 47.180762][ T3634] [pid 3634] close(12) = -1 EBADF (Bad file descriptor) [pid 3634] close(13) = -1 EBADF (Bad file descriptor) [pid 3634] close(14) = -1 EBADF (Bad file descriptor) [pid 3634] close(15) = -1 EBADF (Bad file descriptor) [pid 3634] close(16) = -1 EBADF (Bad file descriptor) [pid 3634] close(17) = -1 EBADF (Bad file descriptor) [pid 3634] close(18) = -1 EBADF (Bad file descriptor) [pid 3634] close(19) = -1 EBADF (Bad file descriptor) [pid 3634] close(20) = -1 EBADF (Bad file descriptor) [pid 3634] close(21) = -1 EBADF (Bad file descriptor) [pid 3634] close(22) = -1 EBADF (Bad file descriptor) [pid 3634] close(23) = -1 EBADF (Bad file descriptor) [pid 3634] close(24) = -1 EBADF (Bad file descriptor) [pid 3634] close(25) = -1 EBADF (Bad file descriptor) [pid 3634] close(26) = -1 EBADF (Bad file descriptor) [pid 3634] close(27) = -1 EBADF (Bad file descriptor) [pid 3634] close(28) = -1 EBADF (Bad file descriptor) [pid 3634] close(29) = -1 EBADF (Bad file descriptor) [pid 3634] exit_group(0) = ? [pid 3634] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 17 ./strace-static-x86_64: Process 3635 attached [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3635] write(3, "1000", 4) = 4 [pid 3635] close(3) = 0 [pid 3635] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3635] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3635] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3635] write(4, "5", 1) = 1 [pid 3635] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.251761][ T3635] FAULT_INJECTION: forcing a failure. [ 47.251761][ T3635] name failslab, interval 1, probability 0, space 0, times 0 [ 47.265098][ T3635] CPU: 0 PID: 3635 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.275315][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.285344][ T3635] Call Trace: [ 47.288600][ T3635] [ 47.291521][ T3635] dump_stack_lvl+0xcd/0x134 [ 47.296098][ T3635] should_fail.cold+0x5/0xa [ 47.300581][ T3635] should_failslab+0x5/0x10 [ 47.305236][ T3635] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.310528][ T3635] ? ref_tracker_alloc+0x14c/0x550 [ 47.315638][ T3635] ref_tracker_alloc+0x14c/0x550 [ 47.320564][ T3635] ? ref_tracker_free+0x6b0/0x6b0 [ 47.325571][ T3635] ? lock_release+0x720/0x720 [ 47.330247][ T3635] ? do_raw_spin_lock+0x120/0x2a0 [ 47.335268][ T3635] ? rwlock_bug.part.0+0x90/0x90 [ 47.340288][ T3635] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.345650][ T3635] linkwatch_fire_event+0x202/0x260 [ 47.350849][ T3635] netif_carrier_off+0x96/0xb0 [ 47.355595][ T3635] __tun_detach+0xfe7/0x13e0 [ 47.360291][ T3635] tun_chr_close+0xc4/0x180 [ 47.364784][ T3635] __fput+0x277/0x9d0 [ 47.368753][ T3635] ? __tun_detach+0x13e0/0x13e0 [ 47.373590][ T3635] task_work_run+0xdd/0x1a0 [ 47.378077][ T3635] ptrace_notify+0x114/0x140 [ 47.382657][ T3635] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.388887][ T3635] syscall_exit_to_user_mode+0x9/0x60 [ 47.394252][ T3635] do_syscall_64+0x42/0xb0 [ 47.398658][ T3635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.404541][ T3635] RIP: 0033:0x7fc6cd2767a3 [ 47.409126][ T3635] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.428816][ T3635] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.437234][ T3635] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 47.445187][ T3635] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 47.453148][ T3635] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.461199][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.469156][ T3635] R13: 00000000000f4240 R14: 000000000000b74c R15: 00007ffdc49a5924 [ 47.477117][ T3635] [pid 3635] close(3) = 0 [pid 3635] close(4) = 0 [pid 3635] close(5) = -1 EBADF (Bad file descriptor) [pid 3635] close(6) = -1 EBADF (Bad file descriptor) [pid 3635] close(7) = -1 EBADF (Bad file descriptor) [pid 3635] close(8) = -1 EBADF (Bad file descriptor) [pid 3635] close(9) = -1 EBADF (Bad file descriptor) [pid 3635] close(10) = -1 EBADF (Bad file descriptor) [pid 3635] close(11) = -1 EBADF (Bad file descriptor) [pid 3635] close(12) = -1 EBADF (Bad file descriptor) [pid 3635] close(13) = -1 EBADF (Bad file descriptor) [pid 3635] close(14) = -1 EBADF (Bad file descriptor) [pid 3635] close(15) = -1 EBADF (Bad file descriptor) [pid 3635] close(16) = -1 EBADF (Bad file descriptor) [pid 3635] close(17) = -1 EBADF (Bad file descriptor) [pid 3635] close(18) = -1 EBADF (Bad file descriptor) [pid 3635] close(19) = -1 EBADF (Bad file descriptor) [pid 3635] close(20) = -1 EBADF (Bad file descriptor) [pid 3635] close(21) = -1 EBADF (Bad file descriptor) [pid 3635] close(22) = -1 EBADF (Bad file descriptor) [pid 3635] close(23) = -1 EBADF (Bad file descriptor) [pid 3635] close(24) = -1 EBADF (Bad file descriptor) [pid 3635] close(25) = -1 EBADF (Bad file descriptor) [pid 3635] close(26) = -1 EBADF (Bad file descriptor) [pid 3635] close(27) = -1 EBADF (Bad file descriptor) [pid 3635] close(28) = -1 EBADF (Bad file descriptor) [pid 3635] close(29) = -1 EBADF (Bad file descriptor) [pid 3635] exit_group(0) = ? [pid 3635] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3636 attached , child_tidptr=0x5555570bd5d0) = 18 [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3636] setpgid(0, 0) = 0 [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3636] write(3, "1000", 4) = 4 [pid 3636] close(3) = 0 [pid 3636] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3636] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3636] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3636] write(4, "5", 1) = 1 [pid 3636] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.564738][ T3636] FAULT_INJECTION: forcing a failure. [ 47.564738][ T3636] name failslab, interval 1, probability 0, space 0, times 0 [ 47.577446][ T3636] CPU: 1 PID: 3636 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.587586][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.597636][ T3636] Call Trace: [ 47.600916][ T3636] [ 47.603829][ T3636] dump_stack_lvl+0xcd/0x134 [ 47.608456][ T3636] should_fail.cold+0x5/0xa [ 47.613138][ T3636] should_failslab+0x5/0x10 [ 47.617624][ T3636] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.622909][ T3636] ? ref_tracker_alloc+0x14c/0x550 [ 47.628023][ T3636] ref_tracker_alloc+0x14c/0x550 [ 47.632943][ T3636] ? ref_tracker_free+0x6b0/0x6b0 [ 47.637948][ T3636] ? lock_release+0x720/0x720 [ 47.642702][ T3636] ? do_raw_spin_lock+0x120/0x2a0 [ 47.647729][ T3636] ? rwlock_bug.part.0+0x90/0x90 [ 47.652654][ T3636] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.658039][ T3636] linkwatch_fire_event+0x202/0x260 [ 47.663261][ T3636] netif_carrier_off+0x96/0xb0 [ 47.668381][ T3636] __tun_detach+0xfe7/0x13e0 [ 47.672973][ T3636] tun_chr_close+0xc4/0x180 [ 47.677479][ T3636] __fput+0x277/0x9d0 [ 47.681465][ T3636] ? __tun_detach+0x13e0/0x13e0 [ 47.686389][ T3636] task_work_run+0xdd/0x1a0 [ 47.690889][ T3636] ptrace_notify+0x114/0x140 [ 47.695481][ T3636] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.701750][ T3636] syscall_exit_to_user_mode+0x9/0x60 [ 47.707208][ T3636] do_syscall_64+0x42/0xb0 [ 47.711626][ T3636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.717517][ T3636] RIP: 0033:0x7fc6cd2767a3 [ 47.721932][ T3636] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.744484][ T3636] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.753416][ T3636] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3636] close(3) = 0 [pid 3636] close(4) = 0 [pid 3636] close(5) = -1 EBADF (Bad file descriptor) [pid 3636] close(6) = -1 EBADF (Bad file descriptor) [pid 3636] close(7) = -1 EBADF (Bad file descriptor) [pid 3636] close(8) = -1 EBADF (Bad file descriptor) [pid 3636] close(9) = -1 EBADF (Bad file descriptor) [pid 3636] close(10) = -1 EBADF (Bad file descriptor) [pid 3636] close(11) = -1 EBADF (Bad file descriptor) [pid 3636] close(12) = -1 EBADF (Bad file descriptor) [pid 3636] close(13) = -1 EBADF (Bad file descriptor) [pid 3636] close(14) = -1 EBADF (Bad file descriptor) [pid 3636] close(15) = -1 EBADF (Bad file descriptor) [pid 3636] close(16) = -1 EBADF (Bad file descriptor) [pid 3636] close(17) = -1 EBADF (Bad file descriptor) [pid 3636] close(18) = -1 EBADF (Bad file descriptor) [pid 3636] close(19) = -1 EBADF (Bad file descriptor) [pid 3636] close(20) = -1 EBADF (Bad file descriptor) [pid 3636] close(21) = -1 EBADF (Bad file descriptor) [pid 3636] close(22) = -1 EBADF (Bad file descriptor) [pid 3636] close(23) = -1 EBADF (Bad file descriptor) [pid 3636] close(24) = -1 EBADF (Bad file descriptor) [pid 3636] close(25) = -1 EBADF (Bad file descriptor) [pid 3636] close(26) = -1 EBADF (Bad file descriptor) [pid 3636] close(27) = -1 EBADF (Bad file descriptor) [pid 3636] close(28) = -1 EBADF (Bad file descriptor) [pid 3636] close(29) = -1 EBADF (Bad file descriptor) [pid 3636] exit_group(0) = ? [pid 3636] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 19 ./strace-static-x86_64: Process 3637 attached [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [ 47.761378][ T3636] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 47.769332][ T3636] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.777287][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.785852][ T3636] R13: 00000000000f4240 R14: 000000000000b879 R15: 00007ffdc49a5924 [ 47.793822][ T3636] [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [pid 3637] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3637] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3637] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3637] write(4, "5", 1) = 1 [pid 3637] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.852640][ T3637] FAULT_INJECTION: forcing a failure. [ 47.852640][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 47.865260][ T3637] CPU: 0 PID: 3637 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.875407][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.885465][ T3637] Call Trace: [ 47.888736][ T3637] [ 47.891681][ T3637] dump_stack_lvl+0xcd/0x134 [ 47.896265][ T3637] should_fail.cold+0x5/0xa [ 47.900758][ T3637] should_failslab+0x5/0x10 [ 47.905266][ T3637] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.910541][ T3637] ? ref_tracker_alloc+0x14c/0x550 [ 47.915643][ T3637] ref_tracker_alloc+0x14c/0x550 [ 47.920576][ T3637] ? ref_tracker_free+0x6b0/0x6b0 [ 47.925595][ T3637] ? lock_release+0x720/0x720 [ 47.930279][ T3637] ? do_raw_spin_lock+0x120/0x2a0 [ 47.935293][ T3637] ? rwlock_bug.part.0+0x90/0x90 [ 47.940227][ T3637] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.945615][ T3637] linkwatch_fire_event+0x202/0x260 [ 47.951020][ T3637] netif_carrier_off+0x96/0xb0 [ 47.955867][ T3637] __tun_detach+0xfe7/0x13e0 [ 47.960467][ T3637] tun_chr_close+0xc4/0x180 [ 47.964955][ T3637] __fput+0x277/0x9d0 [ 47.968945][ T3637] ? __tun_detach+0x13e0/0x13e0 [ 47.973800][ T3637] task_work_run+0xdd/0x1a0 [ 47.978301][ T3637] ptrace_notify+0x114/0x140 [ 47.982893][ T3637] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.989143][ T3637] syscall_exit_to_user_mode+0x9/0x60 [ 47.994501][ T3637] do_syscall_64+0x42/0xb0 [ 47.998900][ T3637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.004783][ T3637] RIP: 0033:0x7fc6cd2767a3 [ 48.009194][ T3637] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 48.028800][ T3637] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 48.037356][ T3637] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 48.045351][ T3637] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3637] close(3) = 0 [pid 3637] close(4) = 0 [pid 3637] close(5) = -1 EBADF (Bad file descriptor) [pid 3637] close(6) = -1 EBADF (Bad file descriptor) [pid 3637] close(7) = -1 EBADF (Bad file descriptor) [pid 3637] close(8) = -1 EBADF (Bad file descriptor) [pid 3637] close(9) = -1 EBADF (Bad file descriptor) [pid 3637] close(10) = -1 EBADF (Bad file descriptor) [pid 3637] close(11) = -1 EBADF (Bad file descriptor) [pid 3637] close(12) = -1 EBADF (Bad file descriptor) [pid 3637] close(13) = -1 EBADF (Bad file descriptor) [pid 3637] close(14) = -1 EBADF (Bad file descriptor) [pid 3637] close(15) = -1 EBADF (Bad file descriptor) [pid 3637] close(16) = -1 EBADF (Bad file descriptor) [pid 3637] close(17) = -1 EBADF (Bad file descriptor) [pid 3637] close(18) = -1 EBADF (Bad file descriptor) [pid 3637] close(19) = -1 EBADF (Bad file descriptor) [pid 3637] close(20) = -1 EBADF (Bad file descriptor) [pid 3637] close(21) = -1 EBADF (Bad file descriptor) [pid 3637] close(22) = -1 EBADF (Bad file descriptor) [ 48.053321][ T3637] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.061293][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.069260][ T3637] R13: 00000000000f4240 R14: 000000000000b9af R15: 00007ffdc49a5924 [ 48.077248][ T3637] [pid 3637] close(23) = -1 EBADF (Bad file descriptor) [pid 3637] close(24) = -1 EBADF (Bad file descriptor) [pid 3637] close(25) = -1 EBADF (Bad file descriptor) [pid 3637] close(26) = -1 EBADF (Bad file descriptor) [pid 3637] close(27) = -1 EBADF (Bad file descriptor) [pid 3637] close(28) = -1 EBADF (Bad file descriptor) [pid 3637] close(29) = -1 EBADF (Bad file descriptor) [pid 3637] exit_group(0) = ? [pid 3637] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 20 ./strace-static-x86_64: Process 3638 attached [pid 3638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3638] setpgid(0, 0) = 0 [pid 3638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3638] write(3, "1000", 4) = 4 [pid 3638] close(3) = 0 [pid 3638] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3638] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3638] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3638] write(4, "5", 1) = 1 [pid 3638] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.148353][ T3638] FAULT_INJECTION: forcing a failure. [ 48.148353][ T3638] name failslab, interval 1, probability 0, space 0, times 0 [ 48.161481][ T3638] CPU: 0 PID: 3638 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.171625][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.181673][ T3638] Call Trace: [ 48.184940][ T3638] [ 48.187854][ T3638] dump_stack_lvl+0xcd/0x134 [ 48.192439][ T3638] should_fail.cold+0x5/0xa [ 48.196931][ T3638] should_failslab+0x5/0x10 [ 48.201422][ T3638] kmem_cache_alloc_trace+0x60/0x3f0 [ 48.206715][ T3638] ? ref_tracker_alloc+0x14c/0x550 [ 48.211824][ T3638] ref_tracker_alloc+0x14c/0x550 [ 48.216753][ T3638] ? ref_tracker_free+0x6b0/0x6b0 [ 48.221765][ T3638] ? lock_release+0x720/0x720 [ 48.226435][ T3638] ? do_raw_spin_lock+0x120/0x2a0 [ 48.231453][ T3638] ? rwlock_bug.part.0+0x90/0x90 [ 48.236380][ T3638] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 48.241752][ T3638] linkwatch_fire_event+0x202/0x260 [ 48.247036][ T3638] netif_carrier_off+0x96/0xb0 [ 48.251792][ T3638] __tun_detach+0xfe7/0x13e0 [ 48.256477][ T3638] tun_chr_close+0xc4/0x180 [ 48.260978][ T3638] __fput+0x277/0x9d0 [ 48.264953][ T3638] ? __tun_detach+0x13e0/0x13e0 [ 48.269805][ T3638] task_work_run+0xdd/0x1a0 [ 48.274310][ T3638] ptrace_notify+0x114/0x140 [ 48.278899][ T3638] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 48.285225][ T3638] syscall_exit_to_user_mode+0x9/0x60 [ 48.290596][ T3638] do_syscall_64+0x42/0xb0 [ 48.295019][ T3638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.300908][ T3638] RIP: 0033:0x7fc6cd2767a3 [ 48.305315][ T3638] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 48.325094][ T3638] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 48.334480][ T3638] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3638] close(3) = 0 [pid 3638] close(4) = 0 [pid 3638] close(5) = -1 EBADF (Bad file descriptor) [pid 3638] close(6) = -1 EBADF (Bad file descriptor) [pid 3638] close(7) = -1 EBADF (Bad file descriptor) [ 48.342535][ T3638] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 48.350500][ T3638] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.358464][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.366431][ T3638] R13: 00000000000f4240 R14: 000000000000bacf R15: 00007ffdc49a5924 [ 48.374430][ T3638] [pid 3638] close(8) = -1 EBADF (Bad file descriptor) [pid 3638] close(9) = -1 EBADF (Bad file descriptor) [pid 3638] close(10) = -1 EBADF (Bad file descriptor) [pid 3638] close(11) = -1 EBADF (Bad file descriptor) [pid 3638] close(12) = -1 EBADF (Bad file descriptor) [pid 3638] close(13) = -1 EBADF (Bad file descriptor) [pid 3638] close(14) = -1 EBADF (Bad file descriptor) [pid 3638] close(15) = -1 EBADF (Bad file descriptor) [pid 3638] close(16) = -1 EBADF (Bad file descriptor) [pid 3638] close(17) = -1 EBADF (Bad file descriptor) [pid 3638] close(18) = -1 EBADF (Bad file descriptor) [pid 3638] close(19) = -1 EBADF (Bad file descriptor) [pid 3638] close(20) = -1 EBADF (Bad file descriptor) [pid 3638] close(21) = -1 EBADF (Bad file descriptor) [pid 3638] close(22) = -1 EBADF (Bad file descriptor) [pid 3638] close(23) = -1 EBADF (Bad file descriptor) [pid 3638] close(24) = -1 EBADF (Bad file descriptor) [pid 3638] close(25) = -1 EBADF (Bad file descriptor) [pid 3638] close(26) = -1 EBADF (Bad file descriptor) [pid 3638] close(27) = -1 EBADF (Bad file descriptor) [pid 3638] close(28) = -1 EBADF (Bad file descriptor) [pid 3638] close(29) = -1 EBADF (Bad file descriptor) [pid 3638] exit_group(0) = ? [pid 3638] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3639 attached , child_tidptr=0x5555570bd5d0) = 21 [pid 3639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3639] setpgid(0, 0) = 0 [pid 3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3639] write(3, "1000", 4) = 4 [pid 3639] close(3) = 0 [pid 3639] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3639] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3639] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3639] write(4, "5", 1) = 1 [ 48.458650][ T3639] FAULT_INJECTION: forcing a failure. [ 48.458650][ T3639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.472648][ T3639] CPU: 1 PID: 3639 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.483049][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.493258][ T3639] Call Trace: [ 48.496606][ T3639] [ 48.499971][ T3639] dump_stack_lvl+0xcd/0x134 [ 48.504562][ T3639] should_fail.cold+0x5/0xa [ 48.509152][ T3639] prepare_alloc_pages+0x17b/0x570 [ 48.514258][ T3639] __alloc_pages+0x12f/0x500 [ 48.518848][ T3639] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 48.525699][ T3639] ? ___slab_alloc+0x47e/0xf20 [ 48.530567][ T3639] alloc_pages+0x1aa/0x310 [ 48.534998][ T3639] ? mark_held_locks+0x9f/0xe0 [ 48.539758][ T3639] allocate_slab+0x26c/0x3c0 [ 48.544348][ T3639] ___slab_alloc+0x8df/0xf20 [ 48.548938][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.553904][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.558855][ T3639] __slab_alloc.constprop.0+0x4d/0xa0 [ 48.564237][ T3639] __kmalloc_node_track_caller+0x2cb/0x360 [ 48.570047][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.574996][ T3639] __alloc_skb+0xde/0x340 [ 48.579334][ T3639] __napi_alloc_skb+0x70/0x310 [ 48.584105][ T3639] napi_get_frags+0x5e/0x140 [ 48.588695][ T3639] tun_get_user+0xa07/0x3b00 [ 48.593287][ T3639] ? tun_build_skb+0x1170/0x1170 [ 48.598237][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 48.603112][ T3639] ? find_held_lock+0x2d/0x110 [ 48.607900][ T3639] tun_chr_write_iter+0xdb/0x200 [ 48.612875][ T3639] do_iter_readv_writev+0x3d1/0x640 [ 48.618092][ T3639] ? new_sync_write+0x560/0x560 [ 48.622953][ T3639] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.629204][ T3639] ? security_file_permission+0xab/0xd0 [ 48.634785][ T3639] do_iter_write+0x182/0x700 [ 48.639385][ T3639] ? import_iovec+0x10c/0x150 [ 48.644071][ T3639] vfs_writev+0x1aa/0x630 [ 48.648407][ T3639] ? vfs_iter_write+0xa0/0xa0 [ 48.653091][ T3639] ? do_raw_spin_lock+0x120/0x2a0 [ 48.658143][ T3639] ? rwlock_bug.part.0+0x90/0x90 [ 48.663105][ T3639] ? _raw_spin_lock_irq+0x41/0x50 [ 48.668137][ T3639] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 48.674396][ T3639] ? find_held_lock+0x2d/0x110 [ 48.679184][ T3639] ? ptrace_notify+0xfa/0x140 [ 48.683867][ T3639] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.690114][ T3639] ? __fget_light+0x20f/0x270 [ 48.694798][ T3639] do_writev+0x133/0x2f0 [ 48.699052][ T3639] ? vfs_writev+0x630/0x630 [ 48.703598][ T3639] ? lockdep_hardirqs_on+0x79/0x100 [ 48.708805][ T3639] ? _raw_spin_unlock_irq+0x2a/0x40 [ 48.714009][ T3639] ? ptrace_notify+0xfa/0x140 [ 48.718698][ T3639] do_syscall_64+0x35/0xb0 [ 48.723123][ T3639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.729026][ T3639] RIP: 0033:0x7fc6cd2b4c39 [ 48.733485][ T3639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3639] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.753097][ T3639] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.761544][ T3639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 48.769685][ T3639] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 48.777655][ T3639] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.785629][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.793612][ T3639] R13: 00000000000f4240 R14: 000000000000bbf6 R15: 00007ffdc49a5924 [ 48.801605][ T3639] [pid 3639] close(3) = 0 [pid 3639] close(4) = 0 [pid 3639] close(5) = -1 EBADF (Bad file descriptor) [pid 3639] close(6) = -1 EBADF (Bad file descriptor) [pid 3639] close(7) = -1 EBADF (Bad file descriptor) [pid 3639] close(8) = -1 EBADF (Bad file descriptor) [pid 3639] close(9) = -1 EBADF (Bad file descriptor) [pid 3639] close(10) = -1 EBADF (Bad file descriptor) [pid 3639] close(11) = -1 EBADF (Bad file descriptor) [pid 3639] close(12) = -1 EBADF (Bad file descriptor) [pid 3639] close(13) = -1 EBADF (Bad file descriptor) [pid 3639] close(14) = -1 EBADF (Bad file descriptor) [pid 3639] close(15) = -1 EBADF (Bad file descriptor) [pid 3639] close(16) = -1 EBADF (Bad file descriptor) [pid 3639] close(17) = -1 EBADF (Bad file descriptor) [pid 3639] close(18) = -1 EBADF (Bad file descriptor) [pid 3639] close(19) = -1 EBADF (Bad file descriptor) [pid 3639] close(20) = -1 EBADF (Bad file descriptor) [pid 3639] close(21) = -1 EBADF (Bad file descriptor) [pid 3639] close(22) = -1 EBADF (Bad file descriptor) [pid 3639] close(23) = -1 EBADF (Bad file descriptor) [pid 3639] close(24) = -1 EBADF (Bad file descriptor) [pid 3639] close(25) = -1 EBADF (Bad file descriptor) [pid 3639] close(26) = -1 EBADF (Bad file descriptor) [pid 3639] close(27) = -1 EBADF (Bad file descriptor) [pid 3639] close(28) = -1 EBADF (Bad file descriptor) [pid 3639] close(29) = -1 EBADF (Bad file descriptor) [pid 3639] exit_group(0) = ? [pid 3639] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3640 attached , child_tidptr=0x5555570bd5d0) = 22 [pid 3640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3640] setpgid(0, 0) = 0 [pid 3640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3640] write(3, "1000", 4) = 4 [pid 3640] close(3) = 0 [pid 3640] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3640] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3640] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3640] write(4, "5", 1) = 1 [pid 3640] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.874970][ T3640] FAULT_INJECTION: forcing a failure. [ 48.874970][ T3640] name failslab, interval 1, probability 0, space 0, times 0 [ 48.887671][ T3640] CPU: 1 PID: 3640 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.897815][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.907871][ T3640] Call Trace: [ 48.911144][ T3640] [ 48.914251][ T3640] dump_stack_lvl+0xcd/0x134 [ 48.918865][ T3640] should_fail.cold+0x5/0xa [ 48.923379][ T3640] should_failslab+0x5/0x10 [ 48.927886][ T3640] kmem_cache_alloc_trace+0x60/0x3f0 [ 48.933170][ T3640] ? ref_tracker_alloc+0x14c/0x550 [ 48.938284][ T3640] ref_tracker_alloc+0x14c/0x550 [ 48.943226][ T3640] ? ref_tracker_free+0x6b0/0x6b0 [ 48.948248][ T3640] ? lock_release+0x720/0x720 [ 48.952928][ T3640] ? do_raw_spin_lock+0x120/0x2a0 [ 48.957956][ T3640] ? rwlock_bug.part.0+0x90/0x90 [ 48.962900][ T3640] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 48.968279][ T3640] linkwatch_fire_event+0x202/0x260 [ 48.973483][ T3640] netif_carrier_off+0x96/0xb0 [ 48.978274][ T3640] __tun_detach+0xfe7/0x13e0 [ 48.982875][ T3640] tun_chr_close+0xc4/0x180 [ 48.987380][ T3640] __fput+0x277/0x9d0 [ 48.991365][ T3640] ? __tun_detach+0x13e0/0x13e0 [ 48.996211][ T3640] task_work_run+0xdd/0x1a0 [ 49.000801][ T3640] ptrace_notify+0x114/0x140 [ 49.005390][ T3640] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.011635][ T3640] syscall_exit_to_user_mode+0x9/0x60 [ 49.017097][ T3640] do_syscall_64+0x42/0xb0 [ 49.021517][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.027401][ T3640] RIP: 0033:0x7fc6cd2767a3 [ 49.031812][ T3640] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.051893][ T3640] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.060325][ T3640] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3640] close(3) = 0 [ 49.068286][ T3640] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 49.076241][ T3640] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.084213][ T3640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.092182][ T3640] R13: 00000000000f4240 R14: 000000000000bd2b R15: 00007ffdc49a5924 [ 49.100156][ T3640] [pid 3640] close(4) = 0 [pid 3640] close(5) = -1 EBADF (Bad file descriptor) [pid 3640] close(6) = -1 EBADF (Bad file descriptor) [pid 3640] close(7) = -1 EBADF (Bad file descriptor) [pid 3640] close(8) = -1 EBADF (Bad file descriptor) [pid 3640] close(9) = -1 EBADF (Bad file descriptor) [pid 3640] close(10) = -1 EBADF (Bad file descriptor) [pid 3640] close(11) = -1 EBADF (Bad file descriptor) [pid 3640] close(12) = -1 EBADF (Bad file descriptor) [pid 3640] close(13) = -1 EBADF (Bad file descriptor) [pid 3640] close(14) = -1 EBADF (Bad file descriptor) [pid 3640] close(15) = -1 EBADF (Bad file descriptor) [pid 3640] close(16) = -1 EBADF (Bad file descriptor) [pid 3640] close(17) = -1 EBADF (Bad file descriptor) [pid 3640] close(18) = -1 EBADF (Bad file descriptor) [pid 3640] close(19) = -1 EBADF (Bad file descriptor) [pid 3640] close(20) = -1 EBADF (Bad file descriptor) [pid 3640] close(21) = -1 EBADF (Bad file descriptor) [pid 3640] close(22) = -1 EBADF (Bad file descriptor) [pid 3640] close(23) = -1 EBADF (Bad file descriptor) [pid 3640] close(24) = -1 EBADF (Bad file descriptor) [pid 3640] close(25) = -1 EBADF (Bad file descriptor) [pid 3640] close(26) = -1 EBADF (Bad file descriptor) [pid 3640] close(27) = -1 EBADF (Bad file descriptor) [pid 3640] close(28) = -1 EBADF (Bad file descriptor) [pid 3640] close(29) = -1 EBADF (Bad file descriptor) [pid 3640] exit_group(0) = ? [pid 3640] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 23 ./strace-static-x86_64: Process 3641 attached [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3641] setpgid(0, 0) = 0 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3641] write(3, "1000", 4) = 4 [pid 3641] close(3) = 0 [pid 3641] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3641] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3641] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3641] write(4, "5", 1) = 1 [pid 3641] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.177906][ T3641] FAULT_INJECTION: forcing a failure. [ 49.177906][ T3641] name failslab, interval 1, probability 0, space 0, times 0 [ 49.191206][ T3641] CPU: 1 PID: 3641 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.201351][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.211417][ T3641] Call Trace: [ 49.214684][ T3641] [ 49.217599][ T3641] dump_stack_lvl+0xcd/0x134 [ 49.222191][ T3641] should_fail.cold+0x5/0xa [ 49.226690][ T3641] should_failslab+0x5/0x10 [ 49.231186][ T3641] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.236458][ T3641] ? ref_tracker_alloc+0x14c/0x550 [ 49.241566][ T3641] ref_tracker_alloc+0x14c/0x550 [ 49.246492][ T3641] ? ref_tracker_free+0x6b0/0x6b0 [ 49.251508][ T3641] ? lock_release+0x720/0x720 [ 49.256183][ T3641] ? do_raw_spin_lock+0x120/0x2a0 [ 49.261205][ T3641] ? rwlock_bug.part.0+0x90/0x90 [ 49.266155][ T3641] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.271525][ T3641] linkwatch_fire_event+0x202/0x260 [ 49.276722][ T3641] netif_carrier_off+0x96/0xb0 [ 49.281477][ T3641] __tun_detach+0xfe7/0x13e0 [ 49.286068][ T3641] tun_chr_close+0xc4/0x180 [ 49.290562][ T3641] __fput+0x277/0x9d0 [ 49.294534][ T3641] ? __tun_detach+0x13e0/0x13e0 [ 49.299385][ T3641] task_work_run+0xdd/0x1a0 [ 49.303891][ T3641] ptrace_notify+0x114/0x140 [ 49.308480][ T3641] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.314719][ T3641] syscall_exit_to_user_mode+0x9/0x60 [ 49.320089][ T3641] do_syscall_64+0x42/0xb0 [ 49.324509][ T3641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.330401][ T3641] RIP: 0033:0x7fc6cd2767a3 [ 49.334806][ T3641] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.354406][ T3641] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.363078][ T3641] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.371048][ T3641] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3641] close(3) = 0 [pid 3641] close(4) = 0 [pid 3641] close(5) = -1 EBADF (Bad file descriptor) [ 49.379018][ T3641] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.386980][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.394942][ T3641] R13: 00000000000f4240 R14: 000000000000becc R15: 00007ffdc49a5924 [ 49.402932][ T3641] [pid 3641] close(6) = -1 EBADF (Bad file descriptor) [pid 3641] close(7) = -1 EBADF (Bad file descriptor) [pid 3641] close(8) = -1 EBADF (Bad file descriptor) [pid 3641] close(9) = -1 EBADF (Bad file descriptor) [pid 3641] close(10) = -1 EBADF (Bad file descriptor) [pid 3641] close(11) = -1 EBADF (Bad file descriptor) [pid 3641] close(12) = -1 EBADF (Bad file descriptor) [pid 3641] close(13) = -1 EBADF (Bad file descriptor) [pid 3641] close(14) = -1 EBADF (Bad file descriptor) [pid 3641] close(15) = -1 EBADF (Bad file descriptor) [pid 3641] close(16) = -1 EBADF (Bad file descriptor) [pid 3641] close(17) = -1 EBADF (Bad file descriptor) [pid 3641] close(18) = -1 EBADF (Bad file descriptor) [pid 3641] close(19) = -1 EBADF (Bad file descriptor) [pid 3641] close(20) = -1 EBADF (Bad file descriptor) [pid 3641] close(21) = -1 EBADF (Bad file descriptor) [pid 3641] close(22) = -1 EBADF (Bad file descriptor) [pid 3641] close(23) = -1 EBADF (Bad file descriptor) [pid 3641] close(24) = -1 EBADF (Bad file descriptor) [pid 3641] close(25) = -1 EBADF (Bad file descriptor) [pid 3641] close(26) = -1 EBADF (Bad file descriptor) [pid 3641] close(27) = -1 EBADF (Bad file descriptor) [pid 3641] close(28) = -1 EBADF (Bad file descriptor) [pid 3641] close(29) = -1 EBADF (Bad file descriptor) [pid 3641] exit_group(0) = ? [pid 3641] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 24 ./strace-static-x86_64: Process 3642 attached [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3642] setpgid(0, 0) = 0 [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3642] write(3, "1000", 4) = 4 [pid 3642] close(3) = 0 [pid 3642] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3642] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3642] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3642] write(4, "5", 1) = 1 [pid 3642] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.483519][ T3642] FAULT_INJECTION: forcing a failure. [ 49.483519][ T3642] name failslab, interval 1, probability 0, space 0, times 0 [ 49.496752][ T3642] CPU: 0 PID: 3642 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.507075][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.517110][ T3642] Call Trace: [ 49.520366][ T3642] [ 49.523274][ T3642] dump_stack_lvl+0xcd/0x134 [ 49.527935][ T3642] should_fail.cold+0x5/0xa [ 49.532418][ T3642] should_failslab+0x5/0x10 [ 49.536908][ T3642] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.542188][ T3642] ? ref_tracker_alloc+0x14c/0x550 [ 49.547281][ T3642] ref_tracker_alloc+0x14c/0x550 [ 49.552196][ T3642] ? ref_tracker_free+0x6b0/0x6b0 [ 49.557196][ T3642] ? lock_release+0x720/0x720 [ 49.561851][ T3642] ? do_raw_spin_lock+0x120/0x2a0 [ 49.566852][ T3642] ? rwlock_bug.part.0+0x90/0x90 [ 49.571770][ T3642] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.577216][ T3642] linkwatch_fire_event+0x202/0x260 [ 49.582405][ T3642] netif_carrier_off+0x96/0xb0 [ 49.587153][ T3642] __tun_detach+0xfe7/0x13e0 [ 49.591741][ T3642] tun_chr_close+0xc4/0x180 [ 49.596223][ T3642] __fput+0x277/0x9d0 [ 49.600185][ T3642] ? __tun_detach+0x13e0/0x13e0 [ 49.605026][ T3642] task_work_run+0xdd/0x1a0 [ 49.609521][ T3642] ptrace_notify+0x114/0x140 [ 49.614094][ T3642] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.620319][ T3642] syscall_exit_to_user_mode+0x9/0x60 [ 49.625673][ T3642] do_syscall_64+0x42/0xb0 [ 49.630071][ T3642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.635952][ T3642] RIP: 0033:0x7fc6cd2767a3 [ 49.640391][ T3642] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.660082][ T3642] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.668476][ T3642] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.676429][ T3642] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3642] close(3) = 0 [pid 3642] close(4) = 0 [pid 3642] close(5) = -1 EBADF (Bad file descriptor) [pid 3642] close(6) = -1 EBADF (Bad file descriptor) [pid 3642] close(7) = -1 EBADF (Bad file descriptor) [pid 3642] close(8) = -1 EBADF (Bad file descriptor) [pid 3642] close(9) = -1 EBADF (Bad file descriptor) [pid 3642] close(10) = -1 EBADF (Bad file descriptor) [pid 3642] close(11) = -1 EBADF (Bad file descriptor) [pid 3642] close(12) = -1 EBADF (Bad file descriptor) [pid 3642] close(13) = -1 EBADF (Bad file descriptor) [pid 3642] close(14) = -1 EBADF (Bad file descriptor) [pid 3642] close(15) = -1 EBADF (Bad file descriptor) [pid 3642] close(16) = -1 EBADF (Bad file descriptor) [pid 3642] close(17) = -1 EBADF (Bad file descriptor) [ 49.684384][ T3642] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.692445][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.700399][ T3642] R13: 00000000000f4240 R14: 000000000000bffd R15: 00007ffdc49a5924 [ 49.708363][ T3642] [pid 3642] close(18) = -1 EBADF (Bad file descriptor) [pid 3642] close(19) = -1 EBADF (Bad file descriptor) [pid 3642] close(20) = -1 EBADF (Bad file descriptor) [pid 3642] close(21) = -1 EBADF (Bad file descriptor) [pid 3642] close(22) = -1 EBADF (Bad file descriptor) [pid 3642] close(23) = -1 EBADF (Bad file descriptor) [pid 3642] close(24) = -1 EBADF (Bad file descriptor) [pid 3642] close(25) = -1 EBADF (Bad file descriptor) [pid 3642] close(26) = -1 EBADF (Bad file descriptor) [pid 3642] close(27) = -1 EBADF (Bad file descriptor) [pid 3642] close(28) = -1 EBADF (Bad file descriptor) [pid 3642] close(29) = -1 EBADF (Bad file descriptor) [pid 3642] exit_group(0) = ? [pid 3642] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 25 ./strace-static-x86_64: Process 3643 attached [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3643] setpgid(0, 0) = 0 [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3643] write(3, "1000", 4) = 4 [pid 3643] close(3) = 0 [pid 3643] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3643] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3643] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3643] write(4, "5", 1) = 1 [pid 3643] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.780013][ T3643] FAULT_INJECTION: forcing a failure. [ 49.780013][ T3643] name failslab, interval 1, probability 0, space 0, times 0 [ 49.792804][ T3643] CPU: 0 PID: 3643 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.803046][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.813198][ T3643] Call Trace: [ 49.816470][ T3643] [ 49.819471][ T3643] dump_stack_lvl+0xcd/0x134 [ 49.824057][ T3643] should_fail.cold+0x5/0xa [ 49.828576][ T3643] should_failslab+0x5/0x10 [ 49.833066][ T3643] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.838341][ T3643] ? ref_tracker_alloc+0x14c/0x550 [ 49.843463][ T3643] ref_tracker_alloc+0x14c/0x550 [ 49.848408][ T3643] ? ref_tracker_free+0x6b0/0x6b0 [ 49.853513][ T3643] ? lock_release+0x720/0x720 [ 49.858187][ T3643] ? do_raw_spin_lock+0x120/0x2a0 [ 49.863222][ T3643] ? rwlock_bug.part.0+0x90/0x90 [ 49.868152][ T3643] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.873520][ T3643] linkwatch_fire_event+0x202/0x260 [ 49.878713][ T3643] netif_carrier_off+0x96/0xb0 [ 49.883471][ T3643] __tun_detach+0xfe7/0x13e0 [ 49.888068][ T3643] tun_chr_close+0xc4/0x180 [ 49.892648][ T3643] __fput+0x277/0x9d0 [ 49.896618][ T3643] ? __tun_detach+0x13e0/0x13e0 [ 49.901458][ T3643] task_work_run+0xdd/0x1a0 [ 49.905957][ T3643] ptrace_notify+0x114/0x140 [ 49.910540][ T3643] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.916863][ T3643] syscall_exit_to_user_mode+0x9/0x60 [ 49.922248][ T3643] do_syscall_64+0x42/0xb0 [ 49.926680][ T3643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.932565][ T3643] RIP: 0033:0x7fc6cd2767a3 [ 49.936969][ T3643] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.956565][ T3643] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.964969][ T3643] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.972932][ T3643] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3643] close(3) = 0 [pid 3643] close(4) = 0 [pid 3643] close(5) = -1 EBADF (Bad file descriptor) [pid 3643] close(6) = -1 EBADF (Bad file descriptor) [pid 3643] close(7) = -1 EBADF (Bad file descriptor) [pid 3643] close(8) = -1 EBADF (Bad file descriptor) [pid 3643] close(9) = -1 EBADF (Bad file descriptor) [pid 3643] close(10) = -1 EBADF (Bad file descriptor) [pid 3643] close(11) = -1 EBADF (Bad file descriptor) [ 49.980901][ T3643] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.988957][ T3643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.996927][ T3643] R13: 00000000000f4240 R14: 000000000000c12f R15: 00007ffdc49a5924 [ 50.005023][ T3643] [pid 3643] close(12) = -1 EBADF (Bad file descriptor) [pid 3643] close(13) = -1 EBADF (Bad file descriptor) [pid 3643] close(14) = -1 EBADF (Bad file descriptor) [pid 3643] close(15) = -1 EBADF (Bad file descriptor) [pid 3643] close(16) = -1 EBADF (Bad file descriptor) [pid 3643] close(17) = -1 EBADF (Bad file descriptor) [pid 3643] close(18) = -1 EBADF (Bad file descriptor) [pid 3643] close(19) = -1 EBADF (Bad file descriptor) [pid 3643] close(20) = -1 EBADF (Bad file descriptor) [pid 3643] close(21) = -1 EBADF (Bad file descriptor) [pid 3643] close(22) = -1 EBADF (Bad file descriptor) [pid 3643] close(23) = -1 EBADF (Bad file descriptor) [pid 3643] close(24) = -1 EBADF (Bad file descriptor) [pid 3643] close(25) = -1 EBADF (Bad file descriptor) [pid 3643] close(26) = -1 EBADF (Bad file descriptor) [pid 3643] close(27) = -1 EBADF (Bad file descriptor) [pid 3643] close(28) = -1 EBADF (Bad file descriptor) [pid 3643] close(29) = -1 EBADF (Bad file descriptor) [pid 3643] exit_group(0) = ? [pid 3643] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3644 attached , child_tidptr=0x5555570bd5d0) = 26 [pid 3644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3644] setpgid(0, 0) = 0 [pid 3644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3644] write(3, "1000", 4) = 4 [pid 3644] close(3) = 0 [pid 3644] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3644] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3644] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3644] write(4, "5", 1) = 1 [pid 3644] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.081800][ T3644] FAULT_INJECTION: forcing a failure. [ 50.081800][ T3644] name failslab, interval 1, probability 0, space 0, times 0 [ 50.094589][ T3644] CPU: 1 PID: 3644 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.104733][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.114886][ T3644] Call Trace: [ 50.118163][ T3644] [ 50.121086][ T3644] dump_stack_lvl+0xcd/0x134 [ 50.125682][ T3644] should_fail.cold+0x5/0xa [ 50.130612][ T3644] should_failslab+0x5/0x10 [ 50.135116][ T3644] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.140715][ T3644] ? ref_tracker_alloc+0x14c/0x550 [ 50.145824][ T3644] ref_tracker_alloc+0x14c/0x550 [ 50.150759][ T3644] ? ref_tracker_free+0x6b0/0x6b0 [ 50.155781][ T3644] ? lock_release+0x720/0x720 [ 50.160544][ T3644] ? do_raw_spin_lock+0x120/0x2a0 [ 50.165567][ T3644] ? rwlock_bug.part.0+0x90/0x90 [ 50.170497][ T3644] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.175870][ T3644] linkwatch_fire_event+0x202/0x260 [ 50.181092][ T3644] netif_carrier_off+0x96/0xb0 [ 50.185870][ T3644] __tun_detach+0xfe7/0x13e0 [ 50.190465][ T3644] tun_chr_close+0xc4/0x180 [ 50.194964][ T3644] __fput+0x277/0x9d0 [ 50.199024][ T3644] ? __tun_detach+0x13e0/0x13e0 [ 50.203862][ T3644] task_work_run+0xdd/0x1a0 [ 50.208451][ T3644] ptrace_notify+0x114/0x140 [ 50.213076][ T3644] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.219318][ T3644] syscall_exit_to_user_mode+0x9/0x60 [ 50.224684][ T3644] do_syscall_64+0x42/0xb0 [ 50.229098][ T3644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.235001][ T3644] RIP: 0033:0x7fc6cd2767a3 [ 50.239587][ T3644] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.259208][ T3644] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.267614][ T3644] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3644] close(3) = 0 [pid 3644] close(4) = 0 [pid 3644] close(5) = -1 EBADF (Bad file descriptor) [pid 3644] close(6) = -1 EBADF (Bad file descriptor) [pid 3644] close(7) = -1 EBADF (Bad file descriptor) [pid 3644] close(8) = -1 EBADF (Bad file descriptor) [pid 3644] close(9) = -1 EBADF (Bad file descriptor) [pid 3644] close(10) = -1 EBADF (Bad file descriptor) [pid 3644] close(11) = -1 EBADF (Bad file descriptor) [pid 3644] close(12) = -1 EBADF (Bad file descriptor) [pid 3644] close(13) = -1 EBADF (Bad file descriptor) [pid 3644] close(14) = -1 EBADF (Bad file descriptor) [pid 3644] close(15) = -1 EBADF (Bad file descriptor) [pid 3644] close(16) = -1 EBADF (Bad file descriptor) [ 50.275577][ T3644] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.283544][ T3644] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.291509][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.299479][ T3644] R13: 00000000000f4240 R14: 000000000000c25b R15: 00007ffdc49a5924 [ 50.307465][ T3644] [pid 3644] close(17) = -1 EBADF (Bad file descriptor) [pid 3644] close(18) = -1 EBADF (Bad file descriptor) [pid 3644] close(19) = -1 EBADF (Bad file descriptor) [pid 3644] close(20) = -1 EBADF (Bad file descriptor) [pid 3644] close(21) = -1 EBADF (Bad file descriptor) [pid 3644] close(22) = -1 EBADF (Bad file descriptor) [pid 3644] close(23) = -1 EBADF (Bad file descriptor) [pid 3644] close(24) = -1 EBADF (Bad file descriptor) [pid 3644] close(25) = -1 EBADF (Bad file descriptor) [pid 3644] close(26) = -1 EBADF (Bad file descriptor) [pid 3644] close(27) = -1 EBADF (Bad file descriptor) [pid 3644] close(28) = -1 EBADF (Bad file descriptor) [pid 3644] close(29) = -1 EBADF (Bad file descriptor) [pid 3644] exit_group(0) = ? [pid 3644] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 27 ./strace-static-x86_64: Process 3645 attached [pid 3645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3645] setpgid(0, 0) = 0 [pid 3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3645] write(3, "1000", 4) = 4 [pid 3645] close(3) = 0 [pid 3645] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3645] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3645] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3645] write(4, "5", 1) = 1 [pid 3645] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.380359][ T3645] FAULT_INJECTION: forcing a failure. [ 50.380359][ T3645] name failslab, interval 1, probability 0, space 0, times 0 [ 50.393358][ T3645] CPU: 1 PID: 3645 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.403875][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.413926][ T3645] Call Trace: [ 50.417202][ T3645] [ 50.420123][ T3645] dump_stack_lvl+0xcd/0x134 [ 50.424712][ T3645] should_fail.cold+0x5/0xa [ 50.429210][ T3645] should_failslab+0x5/0x10 [ 50.433701][ T3645] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.438971][ T3645] ? ref_tracker_alloc+0x14c/0x550 [ 50.444073][ T3645] ref_tracker_alloc+0x14c/0x550 [ 50.449291][ T3645] ? ref_tracker_free+0x6b0/0x6b0 [ 50.454303][ T3645] ? lock_release+0x720/0x720 [ 50.458970][ T3645] ? do_raw_spin_lock+0x120/0x2a0 [ 50.463981][ T3645] ? rwlock_bug.part.0+0x90/0x90 [ 50.468910][ T3645] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.474279][ T3645] linkwatch_fire_event+0x202/0x260 [ 50.479471][ T3645] netif_carrier_off+0x96/0xb0 [ 50.484221][ T3645] __tun_detach+0xfe7/0x13e0 [ 50.488803][ T3645] tun_chr_close+0xc4/0x180 [ 50.493296][ T3645] __fput+0x277/0x9d0 [ 50.497266][ T3645] ? __tun_detach+0x13e0/0x13e0 [ 50.502104][ T3645] task_work_run+0xdd/0x1a0 [ 50.506599][ T3645] ptrace_notify+0x114/0x140 [ 50.511266][ T3645] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.517503][ T3645] syscall_exit_to_user_mode+0x9/0x60 [ 50.522974][ T3645] do_syscall_64+0x42/0xb0 [ 50.527436][ T3645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.533325][ T3645] RIP: 0033:0x7fc6cd2767a3 [ 50.537727][ T3645] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.557418][ T3645] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.565846][ T3645] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3645] close(3) = 0 [pid 3645] close(4) = 0 [pid 3645] close(5) = -1 EBADF (Bad file descriptor) [pid 3645] close(6) = -1 EBADF (Bad file descriptor) [pid 3645] close(7) = -1 EBADF (Bad file descriptor) [pid 3645] close(8) = -1 EBADF (Bad file descriptor) [pid 3645] close(9) = -1 EBADF (Bad file descriptor) [pid 3645] close(10) = -1 EBADF (Bad file descriptor) [pid 3645] close(11) = -1 EBADF (Bad file descriptor) [ 50.573903][ T3645] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.581869][ T3645] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.589831][ T3645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.597790][ T3645] R13: 00000000000f4240 R14: 000000000000c383 R15: 00007ffdc49a5924 [ 50.605762][ T3645] [pid 3645] close(12) = -1 EBADF (Bad file descriptor) [pid 3645] close(13) = -1 EBADF (Bad file descriptor) [pid 3645] close(14) = -1 EBADF (Bad file descriptor) [pid 3645] close(15) = -1 EBADF (Bad file descriptor) [pid 3645] close(16) = -1 EBADF (Bad file descriptor) [pid 3645] close(17) = -1 EBADF (Bad file descriptor) [pid 3645] close(18) = -1 EBADF (Bad file descriptor) [pid 3645] close(19) = -1 EBADF (Bad file descriptor) [pid 3645] close(20) = -1 EBADF (Bad file descriptor) [pid 3645] close(21) = -1 EBADF (Bad file descriptor) [pid 3645] close(22) = -1 EBADF (Bad file descriptor) [pid 3645] close(23) = -1 EBADF (Bad file descriptor) [pid 3645] close(24) = -1 EBADF (Bad file descriptor) [pid 3645] close(25) = -1 EBADF (Bad file descriptor) [pid 3645] close(26) = -1 EBADF (Bad file descriptor) [pid 3645] close(27) = -1 EBADF (Bad file descriptor) [pid 3645] close(28) = -1 EBADF (Bad file descriptor) [pid 3645] close(29) = -1 EBADF (Bad file descriptor) [pid 3645] exit_group(0) = ? [pid 3645] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 28 ./strace-static-x86_64: Process 3646 attached [pid 3646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3646] setpgid(0, 0) = 0 [pid 3646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3646] write(3, "1000", 4) = 4 [pid 3646] close(3) = 0 [pid 3646] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3646] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3646] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3646] write(4, "5", 1) = 1 [pid 3646] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.677632][ T3646] FAULT_INJECTION: forcing a failure. [ 50.677632][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 50.690886][ T3646] CPU: 0 PID: 3646 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.701364][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.711395][ T3646] Call Trace: [ 50.714652][ T3646] [ 50.717582][ T3646] dump_stack_lvl+0xcd/0x134 [ 50.722161][ T3646] should_fail.cold+0x5/0xa [ 50.726657][ T3646] should_failslab+0x5/0x10 [ 50.731345][ T3646] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.736616][ T3646] ? ref_tracker_alloc+0x14c/0x550 [ 50.741718][ T3646] ref_tracker_alloc+0x14c/0x550 [ 50.746640][ T3646] ? ref_tracker_free+0x6b0/0x6b0 [ 50.751649][ T3646] ? lock_release+0x720/0x720 [ 50.756405][ T3646] ? do_raw_spin_lock+0x120/0x2a0 [ 50.761433][ T3646] ? rwlock_bug.part.0+0x90/0x90 [ 50.766365][ T3646] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.771732][ T3646] linkwatch_fire_event+0x202/0x260 [ 50.776929][ T3646] netif_carrier_off+0x96/0xb0 [ 50.781680][ T3646] __tun_detach+0xfe7/0x13e0 [ 50.786264][ T3646] tun_chr_close+0xc4/0x180 [ 50.790751][ T3646] __fput+0x277/0x9d0 [ 50.794717][ T3646] ? __tun_detach+0x13e0/0x13e0 [ 50.799571][ T3646] task_work_run+0xdd/0x1a0 [ 50.804064][ T3646] ptrace_notify+0x114/0x140 [ 50.808640][ T3646] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.814869][ T3646] syscall_exit_to_user_mode+0x9/0x60 [ 50.820231][ T3646] do_syscall_64+0x42/0xb0 [ 50.824903][ T3646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.830970][ T3646] RIP: 0033:0x7fc6cd2767a3 [ 50.835376][ T3646] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.855061][ T3646] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.863474][ T3646] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3646] close(3) = 0 [pid 3646] close(4) = 0 [pid 3646] close(5) = -1 EBADF (Bad file descriptor) [pid 3646] close(6) = -1 EBADF (Bad file descriptor) [pid 3646] close(7) = -1 EBADF (Bad file descriptor) [pid 3646] close(8) = -1 EBADF (Bad file descriptor) [ 50.871438][ T3646] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.879407][ T3646] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.887366][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.895407][ T3646] R13: 00000000000f4240 R14: 000000000000c4af R15: 00007ffdc49a5924 [ 50.903377][ T3646] [pid 3646] close(9) = -1 EBADF (Bad file descriptor) [pid 3646] close(10) = -1 EBADF (Bad file descriptor) [pid 3646] close(11) = -1 EBADF (Bad file descriptor) [pid 3646] close(12) = -1 EBADF (Bad file descriptor) [pid 3646] close(13) = -1 EBADF (Bad file descriptor) [pid 3646] close(14) = -1 EBADF (Bad file descriptor) [pid 3646] close(15) = -1 EBADF (Bad file descriptor) [pid 3646] close(16) = -1 EBADF (Bad file descriptor) [pid 3646] close(17) = -1 EBADF (Bad file descriptor) [pid 3646] close(18) = -1 EBADF (Bad file descriptor) [pid 3646] close(19) = -1 EBADF (Bad file descriptor) [pid 3646] close(20) = -1 EBADF (Bad file descriptor) [pid 3646] close(21) = -1 EBADF (Bad file descriptor) [pid 3646] close(22) = -1 EBADF (Bad file descriptor) [pid 3646] close(23) = -1 EBADF (Bad file descriptor) [pid 3646] close(24) = -1 EBADF (Bad file descriptor) [pid 3646] close(25) = -1 EBADF (Bad file descriptor) [pid 3646] close(26) = -1 EBADF (Bad file descriptor) [pid 3646] close(27) = -1 EBADF (Bad file descriptor) [pid 3646] close(28) = -1 EBADF (Bad file descriptor) [pid 3646] close(29) = -1 EBADF (Bad file descriptor) [pid 3646] exit_group(0) = ? [pid 3646] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 29 ./strace-static-x86_64: Process 3647 attached [pid 3647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3647] setpgid(0, 0) = 0 [pid 3647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3647] write(3, "1000", 4) = 4 [pid 3647] close(3) = 0 [pid 3647] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3647] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3647] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3647] write(4, "5", 1) = 1 [pid 3647] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.974563][ T3647] FAULT_INJECTION: forcing a failure. [ 50.974563][ T3647] name failslab, interval 1, probability 0, space 0, times 0 [ 50.988634][ T3647] CPU: 0 PID: 3647 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.999516][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.009562][ T3647] Call Trace: [ 51.012843][ T3647] [ 51.015771][ T3647] dump_stack_lvl+0xcd/0x134 [ 51.020358][ T3647] should_fail.cold+0x5/0xa [ 51.024856][ T3647] should_failslab+0x5/0x10 [ 51.029346][ T3647] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.034622][ T3647] ? ref_tracker_alloc+0x14c/0x550 [ 51.039817][ T3647] ref_tracker_alloc+0x14c/0x550 [ 51.044942][ T3647] ? ref_tracker_free+0x6b0/0x6b0 [ 51.049969][ T3647] ? lock_release+0x720/0x720 [ 51.054900][ T3647] ? do_raw_spin_lock+0x120/0x2a0 [ 51.059923][ T3647] ? rwlock_bug.part.0+0x90/0x90 [ 51.064937][ T3647] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.070301][ T3647] linkwatch_fire_event+0x202/0x260 [ 51.075495][ T3647] netif_carrier_off+0x96/0xb0 [ 51.080246][ T3647] __tun_detach+0xfe7/0x13e0 [ 51.084832][ T3647] tun_chr_close+0xc4/0x180 [ 51.089320][ T3647] __fput+0x277/0x9d0 [ 51.093286][ T3647] ? __tun_detach+0x13e0/0x13e0 [ 51.098296][ T3647] task_work_run+0xdd/0x1a0 [ 51.102789][ T3647] ptrace_notify+0x114/0x140 [ 51.107454][ T3647] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.114206][ T3647] syscall_exit_to_user_mode+0x9/0x60 [ 51.119568][ T3647] do_syscall_64+0x42/0xb0 [ 51.123976][ T3647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.129860][ T3647] RIP: 0033:0x7fc6cd2767a3 [ 51.134266][ T3647] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.153865][ T3647] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.162263][ T3647] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3647] close(3) = 0 [pid 3647] close(4) = 0 [pid 3647] close(5) = -1 EBADF (Bad file descriptor) [pid 3647] close(6) = -1 EBADF (Bad file descriptor) [pid 3647] close(7) = -1 EBADF (Bad file descriptor) [pid 3647] close(8) = -1 EBADF (Bad file descriptor) [pid 3647] close(9) = -1 EBADF (Bad file descriptor) [pid 3647] close(10) = -1 EBADF (Bad file descriptor) [pid 3647] close(11) = -1 EBADF (Bad file descriptor) [pid 3647] close(12) = -1 EBADF (Bad file descriptor) [pid 3647] close(13) = -1 EBADF (Bad file descriptor) [pid 3647] close(14) = -1 EBADF (Bad file descriptor) [pid 3647] close(15) = -1 EBADF (Bad file descriptor) [pid 3647] close(16) = -1 EBADF (Bad file descriptor) [pid 3647] close(17) = -1 EBADF (Bad file descriptor) [pid 3647] close(18) = -1 EBADF (Bad file descriptor) [pid 3647] close(19) = -1 EBADF (Bad file descriptor) [pid 3647] close(20) = -1 EBADF (Bad file descriptor) [pid 3647] close(21) = -1 EBADF (Bad file descriptor) [pid 3647] close(22) = -1 EBADF (Bad file descriptor) [pid 3647] close(23) = -1 EBADF (Bad file descriptor) [pid 3647] close(24) = -1 EBADF (Bad file descriptor) [ 51.170218][ T3647] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 51.178175][ T3647] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.186127][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.194163][ T3647] R13: 00000000000f4240 R14: 000000000000c5dd R15: 00007ffdc49a5924 [ 51.202132][ T3647] [pid 3647] close(25) = -1 EBADF (Bad file descriptor) [pid 3647] close(26) = -1 EBADF (Bad file descriptor) [pid 3647] close(27) = -1 EBADF (Bad file descriptor) [pid 3647] close(28) = -1 EBADF (Bad file descriptor) [pid 3647] close(29) = -1 EBADF (Bad file descriptor) [pid 3647] exit_group(0) = ? [pid 3647] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 30 ./strace-static-x86_64: Process 3648 attached [pid 3648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3648] setpgid(0, 0) = 0 [pid 3648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3648] write(3, "1000", 4) = 4 [pid 3648] close(3) = 0 [pid 3648] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3648] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3648] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3648] write(4, "5", 1) = 1 [pid 3648] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.268931][ T3648] FAULT_INJECTION: forcing a failure. [ 51.268931][ T3648] name failslab, interval 1, probability 0, space 0, times 0 [ 51.281719][ T3648] CPU: 1 PID: 3648 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.291867][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.301914][ T3648] Call Trace: [ 51.305172][ T3648] [ 51.308086][ T3648] dump_stack_lvl+0xcd/0x134 [ 51.312677][ T3648] should_fail.cold+0x5/0xa [ 51.317195][ T3648] should_failslab+0x5/0x10 [ 51.321689][ T3648] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.326968][ T3648] ? ref_tracker_alloc+0x14c/0x550 [ 51.332162][ T3648] ref_tracker_alloc+0x14c/0x550 [ 51.337108][ T3648] ? ref_tracker_free+0x6b0/0x6b0 [ 51.342128][ T3648] ? lock_release+0x720/0x720 [ 51.346807][ T3648] ? do_raw_spin_lock+0x120/0x2a0 [ 51.351816][ T3648] ? rwlock_bug.part.0+0x90/0x90 [ 51.356736][ T3648] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.362100][ T3648] linkwatch_fire_event+0x202/0x260 [ 51.367287][ T3648] netif_carrier_off+0x96/0xb0 [ 51.372033][ T3648] __tun_detach+0xfe7/0x13e0 [ 51.376612][ T3648] tun_chr_close+0xc4/0x180 [ 51.381111][ T3648] __fput+0x277/0x9d0 [ 51.385073][ T3648] ? __tun_detach+0x13e0/0x13e0 [ 51.389906][ T3648] task_work_run+0xdd/0x1a0 [ 51.394567][ T3648] ptrace_notify+0x114/0x140 [ 51.399142][ T3648] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.405378][ T3648] syscall_exit_to_user_mode+0x9/0x60 [ 51.410865][ T3648] do_syscall_64+0x42/0xb0 [ 51.415299][ T3648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.421180][ T3648] RIP: 0033:0x7fc6cd2767a3 [ 51.425581][ T3648] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.445180][ T3648] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.453573][ T3648] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 51.461538][ T3648] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3648] close(3) = 0 [pid 3648] close(4) = 0 [pid 3648] close(5) = -1 EBADF (Bad file descriptor) [pid 3648] close(6) = -1 EBADF (Bad file descriptor) [pid 3648] close(7) = -1 EBADF (Bad file descriptor) [pid 3648] close(8) = -1 EBADF (Bad file descriptor) [pid 3648] close(9) = -1 EBADF (Bad file descriptor) [pid 3648] close(10) = -1 EBADF (Bad file descriptor) [ 51.469490][ T3648] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.477778][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.485824][ T3648] R13: 00000000000f4240 R14: 000000000000c701 R15: 00007ffdc49a5924 [ 51.493786][ T3648] [pid 3648] close(11) = -1 EBADF (Bad file descriptor) [pid 3648] close(12) = -1 EBADF (Bad file descriptor) [pid 3648] close(13) = -1 EBADF (Bad file descriptor) [pid 3648] close(14) = -1 EBADF (Bad file descriptor) [pid 3648] close(15) = -1 EBADF (Bad file descriptor) [pid 3648] close(16) = -1 EBADF (Bad file descriptor) [pid 3648] close(17) = -1 EBADF (Bad file descriptor) [pid 3648] close(18) = -1 EBADF (Bad file descriptor) [pid 3648] close(19) = -1 EBADF (Bad file descriptor) [pid 3648] close(20) = -1 EBADF (Bad file descriptor) [pid 3648] close(21) = -1 EBADF (Bad file descriptor) [pid 3648] close(22) = -1 EBADF (Bad file descriptor) [pid 3648] close(23) = -1 EBADF (Bad file descriptor) [pid 3648] close(24) = -1 EBADF (Bad file descriptor) [pid 3648] close(25) = -1 EBADF (Bad file descriptor) [pid 3648] close(26) = -1 EBADF (Bad file descriptor) [pid 3648] close(27) = -1 EBADF (Bad file descriptor) [pid 3648] close(28) = -1 EBADF (Bad file descriptor) [pid 3648] close(29) = -1 EBADF (Bad file descriptor) [pid 3648] exit_group(0) = ? [pid 3648] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 31 ./strace-static-x86_64: Process 3649 attached [pid 3649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3649] setpgid(0, 0) = 0 [pid 3649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3649] write(3, "1000", 4) = 4 [pid 3649] close(3) = 0 [pid 3649] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3649] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3649] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3649] write(4, "5", 1) = 1 [pid 3649] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.572600][ T3649] FAULT_INJECTION: forcing a failure. [ 51.572600][ T3649] name failslab, interval 1, probability 0, space 0, times 0 [ 51.585208][ T3649] CPU: 0 PID: 3649 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.595354][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.605409][ T3649] Call Trace: [ 51.608704][ T3649] [ 51.611632][ T3649] dump_stack_lvl+0xcd/0x134 [ 51.616225][ T3649] should_fail.cold+0x5/0xa [ 51.620734][ T3649] should_failslab+0x5/0x10 [ 51.625243][ T3649] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.630546][ T3649] ? ref_tracker_alloc+0x14c/0x550 [ 51.635663][ T3649] ref_tracker_alloc+0x14c/0x550 [ 51.640607][ T3649] ? ref_tracker_free+0x6b0/0x6b0 [ 51.645642][ T3649] ? lock_release+0x720/0x720 [ 51.650469][ T3649] ? do_raw_spin_lock+0x120/0x2a0 [ 51.655503][ T3649] ? rwlock_bug.part.0+0x90/0x90 [ 51.660462][ T3649] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.665866][ T3649] linkwatch_fire_event+0x202/0x260 [ 51.671091][ T3649] netif_carrier_off+0x96/0xb0 [ 51.675872][ T3649] __tun_detach+0xfe7/0x13e0 [ 51.680500][ T3649] tun_chr_close+0xc4/0x180 [ 51.685032][ T3649] __fput+0x277/0x9d0 [ 51.689016][ T3649] ? __tun_detach+0x13e0/0x13e0 [ 51.693885][ T3649] task_work_run+0xdd/0x1a0 [ 51.698397][ T3649] ptrace_notify+0x114/0x140 [ 51.703013][ T3649] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.709431][ T3649] syscall_exit_to_user_mode+0x9/0x60 [ 51.714811][ T3649] do_syscall_64+0x42/0xb0 [ 51.719227][ T3649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.725225][ T3649] RIP: 0033:0x7fc6cd2767a3 [ 51.729640][ T3649] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.749249][ T3649] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.757697][ T3649] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 51.765667][ T3649] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3649] close(3) = 0 [pid 3649] close(4) = 0 [pid 3649] close(5) = -1 EBADF (Bad file descriptor) [pid 3649] close(6) = -1 EBADF (Bad file descriptor) [pid 3649] close(7) = -1 EBADF (Bad file descriptor) [pid 3649] close(8) = -1 EBADF (Bad file descriptor) [pid 3649] close(9) = -1 EBADF (Bad file descriptor) [pid 3649] close(10) = -1 EBADF (Bad file descriptor) [pid 3649] close(11) = -1 EBADF (Bad file descriptor) [pid 3649] close(12) = -1 EBADF (Bad file descriptor) [pid 3649] close(13) = -1 EBADF (Bad file descriptor) [pid 3649] close(14) = -1 EBADF (Bad file descriptor) [pid 3649] close(15) = -1 EBADF (Bad file descriptor) [pid 3649] close(16) = -1 EBADF (Bad file descriptor) [pid 3649] close(17) = -1 EBADF (Bad file descriptor) [pid 3649] close(18) = -1 EBADF (Bad file descriptor) [pid 3649] close(19) = -1 EBADF (Bad file descriptor) [pid 3649] close(20) = -1 EBADF (Bad file descriptor) [pid 3649] close(21) = -1 EBADF (Bad file descriptor) [pid 3649] close(22) = -1 EBADF (Bad file descriptor) [pid 3649] close(23) = -1 EBADF (Bad file descriptor) [pid 3649] close(24) = -1 EBADF (Bad file descriptor) [pid 3649] close(25) = -1 EBADF (Bad file descriptor) [pid 3649] close(26) = -1 EBADF (Bad file descriptor) [pid 3649] close(27) = -1 EBADF (Bad file descriptor) [pid 3649] close(28) = -1 EBADF (Bad file descriptor) [pid 3649] close(29) = -1 EBADF (Bad file descriptor) [pid 3649] exit_group(0) = ? [pid 3649] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 51.773629][ T3649] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.781682][ T3649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.789655][ T3649] R13: 00000000000f4240 R14: 000000000000c82b R15: 00007ffdc49a5924 [ 51.797640][ T3649] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3650 attached , child_tidptr=0x5555570bd5d0) = 32 [pid 3650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3650] setpgid(0, 0) = 0 [pid 3650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3650] write(3, "1000", 4) = 4 [pid 3650] close(3) = 0 [pid 3650] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3650] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3650] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3650] write(4, "5", 1) = 1 [pid 3650] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.863174][ T3650] FAULT_INJECTION: forcing a failure. [ 51.863174][ T3650] name failslab, interval 1, probability 0, space 0, times 0 [ 51.876135][ T3650] CPU: 0 PID: 3650 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.886483][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.896538][ T3650] Call Trace: [ 51.899832][ T3650] [ 51.902759][ T3650] dump_stack_lvl+0xcd/0x134 [ 51.907646][ T3650] should_fail.cold+0x5/0xa [ 51.912185][ T3650] should_failslab+0x5/0x10 [ 51.916710][ T3650] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.922013][ T3650] ? ref_tracker_alloc+0x14c/0x550 [ 51.927142][ T3650] ref_tracker_alloc+0x14c/0x550 [ 51.932099][ T3650] ? ref_tracker_free+0x6b0/0x6b0 [ 51.937120][ T3650] ? lock_release+0x720/0x720 [ 51.941811][ T3650] ? do_raw_spin_lock+0x120/0x2a0 [ 51.946847][ T3650] ? rwlock_bug.part.0+0x90/0x90 [ 51.951788][ T3650] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.957179][ T3650] linkwatch_fire_event+0x202/0x260 [ 51.962384][ T3650] netif_carrier_off+0x96/0xb0 [ 51.967165][ T3650] __tun_detach+0xfe7/0x13e0 [ 51.971765][ T3650] tun_chr_close+0xc4/0x180 [ 51.976267][ T3650] __fput+0x277/0x9d0 [ 51.980245][ T3650] ? __tun_detach+0x13e0/0x13e0 [ 51.985093][ T3650] task_work_run+0xdd/0x1a0 [ 51.989601][ T3650] ptrace_notify+0x114/0x140 [ 51.994212][ T3650] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.000462][ T3650] syscall_exit_to_user_mode+0x9/0x60 [ 52.005837][ T3650] do_syscall_64+0x42/0xb0 [ 52.010262][ T3650] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.016162][ T3650] RIP: 0033:0x7fc6cd2767a3 [ 52.020589][ T3650] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.040213][ T3650] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.048662][ T3650] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 52.056650][ T3650] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.064617][ T3650] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.072605][ T3650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.080589][ T3650] R13: 00000000000f4240 R14: 000000000000c955 R15: 00007ffdc49a5924 [ 52.088570][ T3650] [pid 3650] close(3) = 0 [pid 3650] close(4) = 0 [pid 3650] close(5) = -1 EBADF (Bad file descriptor) [pid 3650] close(6) = -1 EBADF (Bad file descriptor) [pid 3650] close(7) = -1 EBADF (Bad file descriptor) [pid 3650] close(8) = -1 EBADF (Bad file descriptor) [pid 3650] close(9) = -1 EBADF (Bad file descriptor) [pid 3650] close(10) = -1 EBADF (Bad file descriptor) [pid 3650] close(11) = -1 EBADF (Bad file descriptor) [pid 3650] close(12) = -1 EBADF (Bad file descriptor) [pid 3650] close(13) = -1 EBADF (Bad file descriptor) [pid 3650] close(14) = -1 EBADF (Bad file descriptor) [pid 3650] close(15) = -1 EBADF (Bad file descriptor) [pid 3650] close(16) = -1 EBADF (Bad file descriptor) [pid 3650] close(17) = -1 EBADF (Bad file descriptor) [pid 3650] close(18) = -1 EBADF (Bad file descriptor) [pid 3650] close(19) = -1 EBADF (Bad file descriptor) [pid 3650] close(20) = -1 EBADF (Bad file descriptor) [pid 3650] close(21) = -1 EBADF (Bad file descriptor) [pid 3650] close(22) = -1 EBADF (Bad file descriptor) [pid 3650] close(23) = -1 EBADF (Bad file descriptor) [pid 3650] close(24) = -1 EBADF (Bad file descriptor) [pid 3650] close(25) = -1 EBADF (Bad file descriptor) [pid 3650] close(26) = -1 EBADF (Bad file descriptor) [pid 3650] close(27) = -1 EBADF (Bad file descriptor) [pid 3650] close(28) = -1 EBADF (Bad file descriptor) [pid 3650] close(29) = -1 EBADF (Bad file descriptor) [pid 3650] exit_group(0) = ? [pid 3650] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 33 ./strace-static-x86_64: Process 3651 attached [pid 3651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3651] setpgid(0, 0) = 0 [pid 3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3651] write(3, "1000", 4) = 4 [pid 3651] close(3) = 0 [pid 3651] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3651] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3651] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3651] write(4, "5", 1) = 1 [pid 3651] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 52.164574][ T3651] FAULT_INJECTION: forcing a failure. [ 52.164574][ T3651] name failslab, interval 1, probability 0, space 0, times 0 [ 52.177292][ T3651] CPU: 1 PID: 3651 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.187449][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.197497][ T3651] Call Trace: [ 52.200783][ T3651] [ 52.203692][ T3651] dump_stack_lvl+0xcd/0x134 [ 52.208275][ T3651] should_fail.cold+0x5/0xa [ 52.212772][ T3651] should_failslab+0x5/0x10 [ 52.217264][ T3651] kmem_cache_alloc_trace+0x60/0x3f0 [ 52.222537][ T3651] ? ref_tracker_alloc+0x14c/0x550 [ 52.227639][ T3651] ref_tracker_alloc+0x14c/0x550 [ 52.232575][ T3651] ? ref_tracker_free+0x6b0/0x6b0 [ 52.237609][ T3651] ? lock_release+0x720/0x720 [ 52.242273][ T3651] ? do_raw_spin_lock+0x120/0x2a0 [ 52.247563][ T3651] ? rwlock_bug.part.0+0x90/0x90 [ 52.252495][ T3651] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 52.257879][ T3651] linkwatch_fire_event+0x202/0x260 [ 52.263088][ T3651] netif_carrier_off+0x96/0xb0 [ 52.267845][ T3651] __tun_detach+0xfe7/0x13e0 [ 52.272431][ T3651] tun_chr_close+0xc4/0x180 [ 52.276920][ T3651] __fput+0x277/0x9d0 [ 52.280979][ T3651] ? __tun_detach+0x13e0/0x13e0 [ 52.285809][ T3651] task_work_run+0xdd/0x1a0 [ 52.290300][ T3651] ptrace_notify+0x114/0x140 [ 52.294880][ T3651] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.301136][ T3651] syscall_exit_to_user_mode+0x9/0x60 [ 52.306503][ T3651] do_syscall_64+0x42/0xb0 [ 52.310997][ T3651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.316899][ T3651] RIP: 0033:0x7fc6cd2767a3 [ 52.321324][ T3651] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.340925][ T3651] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.349467][ T3651] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 52.357520][ T3651] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.365497][ T3651] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.373476][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.381433][ T3651] R13: 00000000000f4240 R14: 000000000000ca7b R15: 00007ffdc49a5924 [ 52.389399][ T3651] [pid 3651] close(3) = 0 [pid 3651] close(4) = 0 [pid 3651] close(5) = -1 EBADF (Bad file descriptor) [pid 3651] close(6) = -1 EBADF (Bad file descriptor) [pid 3651] close(7) = -1 EBADF (Bad file descriptor) [pid 3651] close(8) = -1 EBADF (Bad file descriptor) [pid 3651] close(9) = -1 EBADF (Bad file descriptor) [pid 3651] close(10) = -1 EBADF (Bad file descriptor) [pid 3651] close(11) = -1 EBADF (Bad file descriptor) [pid 3651] close(12) = -1 EBADF (Bad file descriptor) [pid 3651] close(13) = -1 EBADF (Bad file descriptor) [pid 3651] close(14) = -1 EBADF (Bad file descriptor) [pid 3651] close(15) = -1 EBADF (Bad file descriptor) [pid 3651] close(16) = -1 EBADF (Bad file descriptor) [pid 3651] close(17) = -1 EBADF (Bad file descriptor) [pid 3651] close(18) = -1 EBADF (Bad file descriptor) [pid 3651] close(19) = -1 EBADF (Bad file descriptor) [pid 3651] close(20) = -1 EBADF (Bad file descriptor) [pid 3651] close(21) = -1 EBADF (Bad file descriptor) [pid 3651] close(22) = -1 EBADF (Bad file descriptor) [pid 3651] close(23) = -1 EBADF (Bad file descriptor) [pid 3651] close(24) = -1 EBADF (Bad file descriptor) [pid 3651] close(25) = -1 EBADF (Bad file descriptor) [pid 3651] close(26) = -1 EBADF (Bad file descriptor) [pid 3651] close(27) = -1 EBADF (Bad file descriptor) [pid 3651] close(28) = -1 EBADF (Bad file descriptor) [pid 3651] close(29) = -1 EBADF (Bad file descriptor) [pid 3651] exit_group(0) = ? [pid 3651] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3652 attached , child_tidptr=0x5555570bd5d0) = 34 [pid 3652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3652] setpgid(0, 0) = 0 [pid 3652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3652] write(3, "1000", 4) = 4 [pid 3652] close(3) = 0 [pid 3652] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3652] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3652] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3652] write(4, "5", 1) = 1 [pid 3652] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 52.476206][ T3652] FAULT_INJECTION: forcing a failure. [ 52.476206][ T3652] name failslab, interval 1, probability 0, space 0, times 0 [ 52.489077][ T3652] CPU: 1 PID: 3652 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.499731][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.509784][ T3652] Call Trace: [ 52.513045][ T3652] [ 52.515959][ T3652] dump_stack_lvl+0xcd/0x134 [ 52.520549][ T3652] should_fail.cold+0x5/0xa [ 52.525049][ T3652] should_failslab+0x5/0x10 [ 52.529646][ T3652] kmem_cache_alloc_trace+0x60/0x3f0 [ 52.534924][ T3652] ? ref_tracker_alloc+0x14c/0x550 [ 52.540050][ T3652] ref_tracker_alloc+0x14c/0x550 [ 52.544987][ T3652] ? ref_tracker_free+0x6b0/0x6b0 [ 52.550092][ T3652] ? lock_release+0x720/0x720 [ 52.554761][ T3652] ? do_raw_spin_lock+0x120/0x2a0 [ 52.559798][ T3652] ? rwlock_bug.part.0+0x90/0x90 [ 52.564737][ T3652] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 52.570109][ T3652] linkwatch_fire_event+0x202/0x260 [ 52.575327][ T3652] netif_carrier_off+0x96/0xb0 [ 52.580095][ T3652] __tun_detach+0xfe7/0x13e0 [ 52.584682][ T3652] tun_chr_close+0xc4/0x180 [ 52.589190][ T3652] __fput+0x277/0x9d0 [ 52.593161][ T3652] ? __tun_detach+0x13e0/0x13e0 [ 52.598004][ T3652] task_work_run+0xdd/0x1a0 [ 52.602503][ T3652] ptrace_notify+0x114/0x140 [ 52.607257][ T3652] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.613496][ T3652] syscall_exit_to_user_mode+0x9/0x60 [ 52.618861][ T3652] do_syscall_64+0x42/0xb0 [ 52.623274][ T3652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.629179][ T3652] RIP: 0033:0x7fc6cd2767a3 [ 52.633588][ T3652] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.653193][ T3652] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.661609][ T3652] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3652] close(3) = 0 [pid 3652] close(4) = 0 [ 52.669571][ T3652] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.677812][ T3652] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.685771][ T3652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.693731][ T3652] R13: 00000000000f4240 R14: 000000000000cba6 R15: 00007ffdc49a5924 [ 52.701799][ T3652] [pid 3652] close(5) = -1 EBADF (Bad file descriptor) [pid 3652] close(6) = -1 EBADF (Bad file descriptor) [pid 3652] close(7) = -1 EBADF (Bad file descriptor) [pid 3652] close(8) = -1 EBADF (Bad file descriptor) [pid 3652] close(9) = -1 EBADF (Bad file descriptor) [pid 3652] close(10) = -1 EBADF (Bad file descriptor) [pid 3652] close(11) = -1 EBADF (Bad file descriptor) [pid 3652] close(12) = -1 EBADF (Bad file descriptor) [pid 3652] close(13) = -1 EBADF (Bad file descriptor) [pid 3652] close(14) = -1 EBADF (Bad file descriptor) [pid 3652] close(15) = -1 EBADF (Bad file descriptor) [pid 3652] close(16) = -1 EBADF (Bad file descriptor) [pid 3652] close(17) = -1 EBADF (Bad file descriptor) [pid 3652] close(18) = -1 EBADF (Bad file descriptor) [pid 3652] close(19) = -1 EBADF (Bad file descriptor) [pid 3652] close(20) = -1 EBADF (Bad file descriptor) [pid 3652] close(21) = -1 EBADF (Bad file descriptor) [pid 3652] close(22) = -1 EBADF (Bad file descriptor) [pid 3652] close(23) = -1 EBADF (Bad file descriptor) [pid 3652] close(24) = -1 EBADF (Bad file descriptor) [pid 3652] close(25) = -1 EBADF (Bad file descriptor) [pid 3652] close(26) = -1 EBADF (Bad file descriptor) [pid 3652] close(27) = -1 EBADF (Bad file descriptor) [pid 3652] close(28) = -1 EBADF (Bad file descriptor) [pid 3652] close(29) = -1 EBADF (Bad file descriptor) [pid 3652] exit_group(0) = ? [pid 3652] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 35 ./strace-static-x86_64: Process 3653 attached [pid 3653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3653] setpgid(0, 0) = 0 [pid 3653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3653] write(3, "1000", 4) = 4 [pid 3653] close(3) = 0 [pid 3653] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3653] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3653] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3653] write(4, "5", 1) = 1 [ 52.783307][ T3653] FAULT_INJECTION: forcing a failure. [ 52.783307][ T3653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.796577][ T3653] CPU: 0 PID: 3653 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.806994][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.818260][ T3653] Call Trace: [ 52.821543][ T3653] [ 52.824498][ T3653] dump_stack_lvl+0xcd/0x134 [ 52.829094][ T3653] should_fail.cold+0x5/0xa [ 52.833607][ T3653] prepare_alloc_pages+0x17b/0x570 [ 52.838739][ T3653] __alloc_pages+0x12f/0x500 [ 52.843374][ T3653] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 52.850241][ T3653] ? ___slab_alloc+0x47e/0xf20 [ 52.855005][ T3653] alloc_pages+0x1aa/0x310 [ 52.859508][ T3653] ? mark_held_locks+0x9f/0xe0 [ 52.864276][ T3653] allocate_slab+0x26c/0x3c0 [ 52.868858][ T3653] ___slab_alloc+0x8df/0xf20 [ 52.873437][ T3653] ? napi_skb_cache_get+0xeb/0x170 [ 52.878549][ T3653] ? mark_held_locks+0x9f/0xe0 [ 52.883317][ T3653] kmem_cache_alloc_bulk+0x21c/0x720 [ 52.888606][ T3653] napi_skb_cache_get+0xeb/0x170 [ 52.893547][ T3653] __alloc_skb+0x9b/0x340 [ 52.897871][ T3653] ? __lock_acquire+0xbca/0x56c0 [ 52.902809][ T3653] __napi_alloc_skb+0x70/0x310 [ 52.907575][ T3653] napi_get_frags+0x5e/0x140 [ 52.912165][ T3653] tun_get_user+0xa07/0x3b00 [ 52.916763][ T3653] ? tun_build_skb+0x1170/0x1170 [ 52.921698][ T3653] ? lock_downgrade+0x6e0/0x6e0 [ 52.926540][ T3653] ? find_held_lock+0x2d/0x110 [ 52.931305][ T3653] tun_chr_write_iter+0xdb/0x200 [ 52.936352][ T3653] do_iter_readv_writev+0x3d1/0x640 [ 52.941547][ T3653] ? new_sync_write+0x560/0x560 [ 52.946391][ T3653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.952625][ T3653] ? security_file_permission+0xab/0xd0 [ 52.958178][ T3653] do_iter_write+0x182/0x700 [ 52.962768][ T3653] ? import_iovec+0x10c/0x150 [ 52.967438][ T3653] vfs_writev+0x1aa/0x630 [ 52.971754][ T3653] ? vfs_iter_write+0xa0/0xa0 [ 52.976416][ T3653] ? do_raw_spin_lock+0x120/0x2a0 [ 52.981433][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 52.986466][ T3653] ? _raw_spin_lock_irq+0x41/0x50 [ 52.991480][ T3653] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 52.997888][ T3653] ? find_held_lock+0x2d/0x110 [ 53.002648][ T3653] ? ptrace_notify+0xfa/0x140 [ 53.007326][ T3653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.013735][ T3653] ? __fget_light+0x20f/0x270 [ 53.018409][ T3653] do_writev+0x133/0x2f0 [ 53.022654][ T3653] ? vfs_writev+0x630/0x630 [ 53.027146][ T3653] ? lockdep_hardirqs_on+0x79/0x100 [ 53.032338][ T3653] ? _raw_spin_unlock_irq+0x2a/0x40 [ 53.037530][ T3653] ? ptrace_notify+0xfa/0x140 [ 53.042226][ T3653] do_syscall_64+0x35/0xb0 [ 53.046644][ T3653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.052538][ T3653] RIP: 0033:0x7fc6cd2b4c39 [ 53.056940][ T3653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3653] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.076667][ T3653] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 53.085161][ T3653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 53.093210][ T3653] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.101874][ T3653] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.109943][ T3653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.117904][ T3653] R13: 00000000000f4240 R14: 000000000000ccdc R15: 00007ffdc49a5924 [ 53.125874][ T3653] [pid 3653] close(3) = 0 [pid 3653] close(4) = 0 [pid 3653] close(5) = -1 EBADF (Bad file descriptor) [pid 3653] close(6) = -1 EBADF (Bad file descriptor) [pid 3653] close(7) = -1 EBADF (Bad file descriptor) [pid 3653] close(8) = -1 EBADF (Bad file descriptor) [pid 3653] close(9) = -1 EBADF (Bad file descriptor) [pid 3653] close(10) = -1 EBADF (Bad file descriptor) [pid 3653] close(11) = -1 EBADF (Bad file descriptor) [pid 3653] close(12) = -1 EBADF (Bad file descriptor) [pid 3653] close(13) = -1 EBADF (Bad file descriptor) [pid 3653] close(14) = -1 EBADF (Bad file descriptor) [pid 3653] close(15) = -1 EBADF (Bad file descriptor) [pid 3653] close(16) = -1 EBADF (Bad file descriptor) [pid 3653] close(17) = -1 EBADF (Bad file descriptor) [pid 3653] close(18) = -1 EBADF (Bad file descriptor) [pid 3653] close(19) = -1 EBADF (Bad file descriptor) [pid 3653] close(20) = -1 EBADF (Bad file descriptor) [pid 3653] close(21) = -1 EBADF (Bad file descriptor) [pid 3653] close(22) = -1 EBADF (Bad file descriptor) [pid 3653] close(23) = -1 EBADF (Bad file descriptor) [pid 3653] close(24) = -1 EBADF (Bad file descriptor) [pid 3653] close(25) = -1 EBADF (Bad file descriptor) [pid 3653] close(26) = -1 EBADF (Bad file descriptor) [pid 3653] close(27) = -1 EBADF (Bad file descriptor) [pid 3653] close(28) = -1 EBADF (Bad file descriptor) [pid 3653] close(29) = -1 EBADF (Bad file descriptor) [pid 3653] exit_group(0) = ? [pid 3653] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 36 ./strace-static-x86_64: Process 3654 attached [pid 3654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3654] setpgid(0, 0) = 0 [pid 3654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3654] write(3, "1000", 4) = 4 [pid 3654] close(3) = 0 [pid 3654] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3654] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3654] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3654] write(4, "5", 1) = 1 [pid 3654] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.204218][ T3654] FAULT_INJECTION: forcing a failure. [ 53.204218][ T3654] name failslab, interval 1, probability 0, space 0, times 0 [ 53.216827][ T3654] CPU: 1 PID: 3654 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.227168][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.237211][ T3654] Call Trace: [ 53.240485][ T3654] [ 53.243406][ T3654] dump_stack_lvl+0xcd/0x134 [ 53.248017][ T3654] should_fail.cold+0x5/0xa [ 53.252520][ T3654] should_failslab+0x5/0x10 [ 53.257024][ T3654] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.262407][ T3654] ? ref_tracker_alloc+0x14c/0x550 [ 53.267512][ T3654] ref_tracker_alloc+0x14c/0x550 [ 53.272444][ T3654] ? ref_tracker_free+0x6b0/0x6b0 [ 53.277635][ T3654] ? lock_release+0x720/0x720 [ 53.282304][ T3654] ? do_raw_spin_lock+0x120/0x2a0 [ 53.287325][ T3654] ? rwlock_bug.part.0+0x90/0x90 [ 53.292435][ T3654] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.297835][ T3654] linkwatch_fire_event+0x202/0x260 [ 53.303051][ T3654] netif_carrier_off+0x96/0xb0 [ 53.307810][ T3654] __tun_detach+0xfe7/0x13e0 [ 53.312405][ T3654] tun_chr_close+0xc4/0x180 [ 53.316898][ T3654] __fput+0x277/0x9d0 [ 53.320871][ T3654] ? __tun_detach+0x13e0/0x13e0 [ 53.325716][ T3654] task_work_run+0xdd/0x1a0 [ 53.330218][ T3654] ptrace_notify+0x114/0x140 [ 53.334992][ T3654] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.341241][ T3654] syscall_exit_to_user_mode+0x9/0x60 [ 53.346632][ T3654] do_syscall_64+0x42/0xb0 [ 53.351044][ T3654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.356936][ T3654] RIP: 0033:0x7fc6cd2767a3 [ 53.361344][ T3654] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 53.381227][ T3654] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 53.389732][ T3654] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 53.398080][ T3654] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.406066][ T3654] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.414029][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.422337][ T3654] R13: 00000000000f4240 R14: 000000000000ce13 R15: 00007ffdc49a5924 [ 53.430326][ T3654] [pid 3654] close(3) = 0 [pid 3654] close(4) = 0 [pid 3654] close(5) = -1 EBADF (Bad file descriptor) [pid 3654] close(6) = -1 EBADF (Bad file descriptor) [pid 3654] close(7) = -1 EBADF (Bad file descriptor) [pid 3654] close(8) = -1 EBADF (Bad file descriptor) [pid 3654] close(9) = -1 EBADF (Bad file descriptor) [pid 3654] close(10) = -1 EBADF (Bad file descriptor) [pid 3654] close(11) = -1 EBADF (Bad file descriptor) [pid 3654] close(12) = -1 EBADF (Bad file descriptor) [pid 3654] close(13) = -1 EBADF (Bad file descriptor) [pid 3654] close(14) = -1 EBADF (Bad file descriptor) [pid 3654] close(15) = -1 EBADF (Bad file descriptor) [pid 3654] close(16) = -1 EBADF (Bad file descriptor) [pid 3654] close(17) = -1 EBADF (Bad file descriptor) [pid 3654] close(18) = -1 EBADF (Bad file descriptor) [pid 3654] close(19) = -1 EBADF (Bad file descriptor) [pid 3654] close(20) = -1 EBADF (Bad file descriptor) [pid 3654] close(21) = -1 EBADF (Bad file descriptor) [pid 3654] close(22) = -1 EBADF (Bad file descriptor) [pid 3654] close(23) = -1 EBADF (Bad file descriptor) [pid 3654] close(24) = -1 EBADF (Bad file descriptor) [pid 3654] close(25) = -1 EBADF (Bad file descriptor) [pid 3654] close(26) = -1 EBADF (Bad file descriptor) [pid 3654] close(27) = -1 EBADF (Bad file descriptor) [pid 3654] close(28) = -1 EBADF (Bad file descriptor) [pid 3654] close(29) = -1 EBADF (Bad file descriptor) [pid 3654] exit_group(0) = ? [pid 3654] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3655 attached , child_tidptr=0x5555570bd5d0) = 37 [pid 3655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3655] setpgid(0, 0) = 0 [pid 3655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3655] write(3, "1000", 4) = 4 [pid 3655] close(3) = 0 [pid 3655] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3655] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3655] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3655] write(4, "5", 1) = 1 [pid 3655] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.518067][ T3655] FAULT_INJECTION: forcing a failure. [ 53.518067][ T3655] name failslab, interval 1, probability 0, space 0, times 0 [ 53.531294][ T3655] CPU: 1 PID: 3655 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.541449][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.551522][ T3655] Call Trace: [ 53.554802][ T3655] [ 53.557723][ T3655] dump_stack_lvl+0xcd/0x134 [ 53.562320][ T3655] should_fail.cold+0x5/0xa [ 53.566822][ T3655] should_failslab+0x5/0x10 [ 53.571324][ T3655] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.576773][ T3655] ? ref_tracker_alloc+0x14c/0x550 [ 53.581880][ T3655] ref_tracker_alloc+0x14c/0x550 [ 53.586828][ T3655] ? ref_tracker_free+0x6b0/0x6b0 [ 53.591844][ T3655] ? lock_release+0x720/0x720 [ 53.596527][ T3655] ? do_raw_spin_lock+0x120/0x2a0 [ 53.601566][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 53.606682][ T3655] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.612079][ T3655] linkwatch_fire_event+0x202/0x260 [ 53.617288][ T3655] netif_carrier_off+0x96/0xb0 [ 53.622056][ T3655] __tun_detach+0xfe7/0x13e0 [ 53.626651][ T3655] tun_chr_close+0xc4/0x180 [ 53.631230][ T3655] __fput+0x277/0x9d0 [ 53.635198][ T3655] ? __tun_detach+0x13e0/0x13e0 [ 53.640038][ T3655] task_work_run+0xdd/0x1a0 [ 53.644536][ T3655] ptrace_notify+0x114/0x140 [ 53.649130][ T3655] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.655370][ T3655] syscall_exit_to_user_mode+0x9/0x60 [ 53.660784][ T3655] do_syscall_64+0x42/0xb0 [ 53.665201][ T3655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.671098][ T3655] RIP: 0033:0x7fc6cd2767a3 [ 53.675508][ T3655] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 53.695117][ T3655] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 53.703531][ T3655] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3655] close(3) = 0 [pid 3655] close(4) = 0 [pid 3655] close(5) = -1 EBADF (Bad file descriptor) [pid 3655] close(6) = -1 EBADF (Bad file descriptor) [pid 3655] close(7) = -1 EBADF (Bad file descriptor) [pid 3655] close(8) = -1 EBADF (Bad file descriptor) [ 53.711777][ T3655] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.719741][ T3655] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.727703][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.735660][ T3655] R13: 00000000000f4240 R14: 000000000000cfb5 R15: 00007ffdc49a5924 [ 53.743637][ T3655] [pid 3655] close(9) = -1 EBADF (Bad file descriptor) [pid 3655] close(10) = -1 EBADF (Bad file descriptor) [pid 3655] close(11) = -1 EBADF (Bad file descriptor) [pid 3655] close(12) = -1 EBADF (Bad file descriptor) [pid 3655] close(13) = -1 EBADF (Bad file descriptor) [pid 3655] close(14) = -1 EBADF (Bad file descriptor) [pid 3655] close(15) = -1 EBADF (Bad file descriptor) [pid 3655] close(16) = -1 EBADF (Bad file descriptor) [pid 3655] close(17) = -1 EBADF (Bad file descriptor) [pid 3655] close(18) = -1 EBADF (Bad file descriptor) [pid 3655] close(19) = -1 EBADF (Bad file descriptor) [pid 3655] close(20) = -1 EBADF (Bad file descriptor) [pid 3655] close(21) = -1 EBADF (Bad file descriptor) [pid 3655] close(22) = -1 EBADF (Bad file descriptor) [pid 3655] close(23) = -1 EBADF (Bad file descriptor) [pid 3655] close(24) = -1 EBADF (Bad file descriptor) [pid 3655] close(25) = -1 EBADF (Bad file descriptor) [pid 3655] close(26) = -1 EBADF (Bad file descriptor) [pid 3655] close(27) = -1 EBADF (Bad file descriptor) [pid 3655] close(28) = -1 EBADF (Bad file descriptor) [pid 3655] close(29) = -1 EBADF (Bad file descriptor) [pid 3655] exit_group(0) = ? [pid 3655] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3656 attached , child_tidptr=0x5555570bd5d0) = 38 [pid 3656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3656] setpgid(0, 0) = 0 [pid 3656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3656] write(3, "1000", 4) = 4 [pid 3656] close(3) = 0 [pid 3656] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3656] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3656] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3656] write(4, "5", 1) = 1 [pid 3656] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.828256][ T3656] FAULT_INJECTION: forcing a failure. [ 53.828256][ T3656] name failslab, interval 1, probability 0, space 0, times 0 [ 53.841742][ T3656] CPU: 0 PID: 3656 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.852146][ T3656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.862291][ T3656] Call Trace: [ 53.865563][ T3656] [ 53.868593][ T3656] dump_stack_lvl+0xcd/0x134 [ 53.873184][ T3656] should_fail.cold+0x5/0xa [ 53.877683][ T3656] should_failslab+0x5/0x10 [ 53.882181][ T3656] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.887453][ T3656] ? ref_tracker_alloc+0x14c/0x550 [ 53.892563][ T3656] ref_tracker_alloc+0x14c/0x550 [ 53.897494][ T3656] ? ref_tracker_free+0x6b0/0x6b0 [ 53.902539][ T3656] ? lock_release+0x720/0x720 [ 53.907306][ T3656] ? do_raw_spin_lock+0x120/0x2a0 [ 53.912331][ T3656] ? rwlock_bug.part.0+0x90/0x90 [ 53.917267][ T3656] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.922647][ T3656] linkwatch_fire_event+0x202/0x260 [ 53.927872][ T3656] netif_carrier_off+0x96/0xb0 [ 53.932632][ T3656] __tun_detach+0xfe7/0x13e0 [ 53.937222][ T3656] tun_chr_close+0xc4/0x180 [ 53.941721][ T3656] __fput+0x277/0x9d0 [ 53.945693][ T3656] ? __tun_detach+0x13e0/0x13e0 [ 53.950849][ T3656] task_work_run+0xdd/0x1a0 [ 53.955452][ T3656] ptrace_notify+0x114/0x140 [ 53.960071][ T3656] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.966488][ T3656] syscall_exit_to_user_mode+0x9/0x60 [ 53.971939][ T3656] do_syscall_64+0x42/0xb0 [ 53.976352][ T3656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.982256][ T3656] RIP: 0033:0x7fc6cd2767a3 [ 53.986661][ T3656] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.006257][ T3656] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.014744][ T3656] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3656] close(3) = 0 [pid 3656] close(4) = 0 [pid 3656] close(5) = -1 EBADF (Bad file descriptor) [pid 3656] close(6) = -1 EBADF (Bad file descriptor) [pid 3656] close(7) = -1 EBADF (Bad file descriptor) [pid 3656] close(8) = -1 EBADF (Bad file descriptor) [pid 3656] close(9) = -1 EBADF (Bad file descriptor) [pid 3656] close(10) = -1 EBADF (Bad file descriptor) [pid 3656] close(11) = -1 EBADF (Bad file descriptor) [pid 3656] close(12) = -1 EBADF (Bad file descriptor) [pid 3656] close(13) = -1 EBADF (Bad file descriptor) [pid 3656] close(14) = -1 EBADF (Bad file descriptor) [pid 3656] close(15) = -1 EBADF (Bad file descriptor) [pid 3656] close(16) = -1 EBADF (Bad file descriptor) [pid 3656] close(17) = -1 EBADF (Bad file descriptor) [pid 3656] close(18) = -1 EBADF (Bad file descriptor) [pid 3656] close(19) = -1 EBADF (Bad file descriptor) [pid 3656] close(20) = -1 EBADF (Bad file descriptor) [pid 3656] close(21) = -1 EBADF (Bad file descriptor) [pid 3656] close(22) = -1 EBADF (Bad file descriptor) [pid 3656] close(23) = -1 EBADF (Bad file descriptor) [pid 3656] close(24) = -1 EBADF (Bad file descriptor) [pid 3656] close(25) = -1 EBADF (Bad file descriptor) [ 54.022704][ T3656] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.031120][ T3656] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.039101][ T3656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.047061][ T3656] R13: 00000000000f4240 R14: 000000000000d0ed R15: 00007ffdc49a5924 [ 54.055113][ T3656] [pid 3656] close(26) = -1 EBADF (Bad file descriptor) [pid 3656] close(27) = -1 EBADF (Bad file descriptor) [pid 3656] close(28) = -1 EBADF (Bad file descriptor) [pid 3656] close(29) = -1 EBADF (Bad file descriptor) [pid 3656] exit_group(0) = ? [pid 3656] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3657 attached , child_tidptr=0x5555570bd5d0) = 39 [pid 3657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3657] setpgid(0, 0) = 0 [pid 3657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3657] write(3, "1000", 4) = 4 [pid 3657] close(3) = 0 [pid 3657] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3657] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3657] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3657] write(4, "5", 1) = 1 [pid 3657] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.120965][ T3657] FAULT_INJECTION: forcing a failure. [ 54.120965][ T3657] name failslab, interval 1, probability 0, space 0, times 0 [ 54.133866][ T3657] CPU: 0 PID: 3657 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.143992][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.154233][ T3657] Call Trace: [ 54.157486][ T3657] [ 54.160393][ T3657] dump_stack_lvl+0xcd/0x134 [ 54.164967][ T3657] should_fail.cold+0x5/0xa [ 54.169450][ T3657] should_failslab+0x5/0x10 [ 54.173939][ T3657] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.179217][ T3657] ? ref_tracker_alloc+0x14c/0x550 [ 54.184335][ T3657] ref_tracker_alloc+0x14c/0x550 [ 54.189255][ T3657] ? ref_tracker_free+0x6b0/0x6b0 [ 54.194261][ T3657] ? lock_release+0x720/0x720 [ 54.198943][ T3657] ? do_raw_spin_lock+0x120/0x2a0 [ 54.203956][ T3657] ? rwlock_bug.part.0+0x90/0x90 [ 54.208895][ T3657] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.214266][ T3657] linkwatch_fire_event+0x202/0x260 [ 54.219458][ T3657] netif_carrier_off+0x96/0xb0 [ 54.224210][ T3657] __tun_detach+0xfe7/0x13e0 [ 54.228811][ T3657] tun_chr_close+0xc4/0x180 [ 54.233319][ T3657] __fput+0x277/0x9d0 [ 54.237296][ T3657] ? __tun_detach+0x13e0/0x13e0 [ 54.242146][ T3657] task_work_run+0xdd/0x1a0 [ 54.246641][ T3657] ptrace_notify+0x114/0x140 [ 54.251311][ T3657] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.257545][ T3657] syscall_exit_to_user_mode+0x9/0x60 [ 54.262904][ T3657] do_syscall_64+0x42/0xb0 [ 54.267319][ T3657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.273202][ T3657] RIP: 0033:0x7fc6cd2767a3 [ 54.277602][ T3657] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.297205][ T3657] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.305610][ T3657] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 54.313569][ T3657] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3657] close(3) = 0 [pid 3657] close(4) = 0 [pid 3657] close(5) = -1 EBADF (Bad file descriptor) [pid 3657] close(6) = -1 EBADF (Bad file descriptor) [pid 3657] close(7) = -1 EBADF (Bad file descriptor) [pid 3657] close(8) = -1 EBADF (Bad file descriptor) [pid 3657] close(9) = -1 EBADF (Bad file descriptor) [pid 3657] close(10) = -1 EBADF (Bad file descriptor) [pid 3657] close(11) = -1 EBADF (Bad file descriptor) [pid 3657] close(12) = -1 EBADF (Bad file descriptor) [pid 3657] close(13) = -1 EBADF (Bad file descriptor) [pid 3657] close(14) = -1 EBADF (Bad file descriptor) [pid 3657] close(15) = -1 EBADF (Bad file descriptor) [pid 3657] close(16) = -1 EBADF (Bad file descriptor) [pid 3657] close(17) = -1 EBADF (Bad file descriptor) [pid 3657] close(18) = -1 EBADF (Bad file descriptor) [pid 3657] close(19) = -1 EBADF (Bad file descriptor) [pid 3657] close(20) = -1 EBADF (Bad file descriptor) [pid 3657] close(21) = -1 EBADF (Bad file descriptor) [pid 3657] close(22) = -1 EBADF (Bad file descriptor) [pid 3657] close(23) = -1 EBADF (Bad file descriptor) [pid 3657] close(24) = -1 EBADF (Bad file descriptor) [pid 3657] close(25) = -1 EBADF (Bad file descriptor) [pid 3657] close(26) = -1 EBADF (Bad file descriptor) [pid 3657] close(27) = -1 EBADF (Bad file descriptor) [pid 3657] close(28) = -1 EBADF (Bad file descriptor) [pid 3657] close(29) = -1 EBADF (Bad file descriptor) [pid 3657] exit_group(0) = ? [pid 3657] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 40 ./strace-static-x86_64: Process 3658 attached [pid 3658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3658] setpgid(0, 0) = 0 [pid 3658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3658] write(3, "1000", 4) = 4 [pid 3658] close(3) = 0 [pid 3658] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 54.321527][ T3657] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.329503][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.337475][ T3657] R13: 00000000000f4240 R14: 000000000000d228 R15: 00007ffdc49a5924 [ 54.345447][ T3657] [pid 3658] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3658] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3658] write(4, "5", 1) = 1 [pid 3658] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.407990][ T3658] FAULT_INJECTION: forcing a failure. [ 54.407990][ T3658] name failslab, interval 1, probability 0, space 0, times 0 [ 54.421565][ T3658] CPU: 0 PID: 3658 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.432153][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.442206][ T3658] Call Trace: [ 54.445655][ T3658] [ 54.448573][ T3658] dump_stack_lvl+0xcd/0x134 [ 54.453158][ T3658] should_fail.cold+0x5/0xa [ 54.457661][ T3658] should_failslab+0x5/0x10 [ 54.462177][ T3658] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.467585][ T3658] ? ref_tracker_alloc+0x14c/0x550 [ 54.472730][ T3658] ref_tracker_alloc+0x14c/0x550 [ 54.477686][ T3658] ? ref_tracker_free+0x6b0/0x6b0 [ 54.482796][ T3658] ? lock_release+0x720/0x720 [ 54.487472][ T3658] ? do_raw_spin_lock+0x120/0x2a0 [ 54.492497][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 54.497530][ T3658] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.502909][ T3658] linkwatch_fire_event+0x202/0x260 [ 54.508138][ T3658] netif_carrier_off+0x96/0xb0 [ 54.512899][ T3658] __tun_detach+0xfe7/0x13e0 [ 54.517493][ T3658] tun_chr_close+0xc4/0x180 [ 54.521994][ T3658] __fput+0x277/0x9d0 [ 54.525969][ T3658] ? __tun_detach+0x13e0/0x13e0 [ 54.530816][ T3658] task_work_run+0xdd/0x1a0 [ 54.535317][ T3658] ptrace_notify+0x114/0x140 [ 54.539926][ T3658] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.546277][ T3658] syscall_exit_to_user_mode+0x9/0x60 [ 54.551647][ T3658] do_syscall_64+0x42/0xb0 [ 54.556058][ T3658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.561945][ T3658] RIP: 0033:0x7fc6cd2767a3 [ 54.566350][ T3658] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.585949][ T3658] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.594360][ T3658] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3658] close(3) = 0 [pid 3658] close(4) = 0 [pid 3658] close(5) = -1 EBADF (Bad file descriptor) [pid 3658] close(6) = -1 EBADF (Bad file descriptor) [pid 3658] close(7) = -1 EBADF (Bad file descriptor) [pid 3658] close(8) = -1 EBADF (Bad file descriptor) [pid 3658] close(9) = -1 EBADF (Bad file descriptor) [pid 3658] close(10) = -1 EBADF (Bad file descriptor) [pid 3658] close(11) = -1 EBADF (Bad file descriptor) [pid 3658] close(12) = -1 EBADF (Bad file descriptor) [pid 3658] close(13) = -1 EBADF (Bad file descriptor) [pid 3658] close(14) = -1 EBADF (Bad file descriptor) [pid 3658] close(15) = -1 EBADF (Bad file descriptor) [pid 3658] close(16) = -1 EBADF (Bad file descriptor) [pid 3658] close(17) = -1 EBADF (Bad file descriptor) [pid 3658] close(18) = -1 EBADF (Bad file descriptor) [pid 3658] close(19) = -1 EBADF (Bad file descriptor) [pid 3658] close(20) = -1 EBADF (Bad file descriptor) [pid 3658] close(21) = -1 EBADF (Bad file descriptor) [ 54.602327][ T3658] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.610293][ T3658] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.618435][ T3658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.626418][ T3658] R13: 00000000000f4240 R14: 000000000000d34c R15: 00007ffdc49a5924 [ 54.634399][ T3658] [pid 3658] close(22) = -1 EBADF (Bad file descriptor) [pid 3658] close(23) = -1 EBADF (Bad file descriptor) [pid 3658] close(24) = -1 EBADF (Bad file descriptor) [pid 3658] close(25) = -1 EBADF (Bad file descriptor) [pid 3658] close(26) = -1 EBADF (Bad file descriptor) [pid 3658] close(27) = -1 EBADF (Bad file descriptor) [pid 3658] close(28) = -1 EBADF (Bad file descriptor) [pid 3658] close(29) = -1 EBADF (Bad file descriptor) [pid 3658] exit_group(0) = ? [pid 3658] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3659 attached , child_tidptr=0x5555570bd5d0) = 41 [pid 3659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3659] setpgid(0, 0) = 0 [pid 3659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3659] write(3, "1000", 4) = 4 [pid 3659] close(3) = 0 [pid 3659] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3659] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3659] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3659] write(4, "5", 1) = 1 [pid 3659] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.709290][ T3659] FAULT_INJECTION: forcing a failure. [ 54.709290][ T3659] name failslab, interval 1, probability 0, space 0, times 0 [ 54.721926][ T3659] CPU: 0 PID: 3659 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.732072][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.742123][ T3659] Call Trace: [ 54.745400][ T3659] [ 54.748333][ T3659] dump_stack_lvl+0xcd/0x134 [ 54.753052][ T3659] should_fail.cold+0x5/0xa [ 54.757565][ T3659] should_failslab+0x5/0x10 [ 54.762085][ T3659] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.767377][ T3659] ? ref_tracker_alloc+0x14c/0x550 [ 54.772512][ T3659] ref_tracker_alloc+0x14c/0x550 [ 54.777561][ T3659] ? ref_tracker_free+0x6b0/0x6b0 [ 54.782601][ T3659] ? lock_release+0x720/0x720 [ 54.787284][ T3659] ? do_raw_spin_lock+0x120/0x2a0 [ 54.792418][ T3659] ? rwlock_bug.part.0+0x90/0x90 [ 54.797470][ T3659] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.802932][ T3659] linkwatch_fire_event+0x202/0x260 [ 54.808222][ T3659] netif_carrier_off+0x96/0xb0 [ 54.813002][ T3659] __tun_detach+0xfe7/0x13e0 [ 54.817622][ T3659] tun_chr_close+0xc4/0x180 [ 54.822134][ T3659] __fput+0x277/0x9d0 [ 54.826116][ T3659] ? __tun_detach+0x13e0/0x13e0 [ 54.830979][ T3659] task_work_run+0xdd/0x1a0 [ 54.835494][ T3659] ptrace_notify+0x114/0x140 [ 54.840082][ T3659] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.846331][ T3659] syscall_exit_to_user_mode+0x9/0x60 [ 54.851717][ T3659] do_syscall_64+0x42/0xb0 [ 54.856141][ T3659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.862042][ T3659] RIP: 0033:0x7fc6cd2767a3 [ 54.866627][ T3659] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.886231][ T3659] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.894644][ T3659] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3659] close(3) = 0 [pid 3659] close(4) = 0 [pid 3659] close(5) = -1 EBADF (Bad file descriptor) [pid 3659] close(6) = -1 EBADF (Bad file descriptor) [pid 3659] close(7) = -1 EBADF (Bad file descriptor) [pid 3659] close(8) = -1 EBADF (Bad file descriptor) [pid 3659] close(9) = -1 EBADF (Bad file descriptor) [pid 3659] close(10) = -1 EBADF (Bad file descriptor) [pid 3659] close(11) = -1 EBADF (Bad file descriptor) [pid 3659] close(12) = -1 EBADF (Bad file descriptor) [pid 3659] close(13) = -1 EBADF (Bad file descriptor) [pid 3659] close(14) = -1 EBADF (Bad file descriptor) [pid 3659] close(15) = -1 EBADF (Bad file descriptor) [pid 3659] close(16) = -1 EBADF (Bad file descriptor) [pid 3659] close(17) = -1 EBADF (Bad file descriptor) [pid 3659] close(18) = -1 EBADF (Bad file descriptor) [pid 3659] close(19) = -1 EBADF (Bad file descriptor) [pid 3659] close(20) = -1 EBADF (Bad file descriptor) [pid 3659] close(21) = -1 EBADF (Bad file descriptor) [pid 3659] close(22) = -1 EBADF (Bad file descriptor) [pid 3659] close(23) = -1 EBADF (Bad file descriptor) [pid 3659] close(24) = -1 EBADF (Bad file descriptor) [pid 3659] close(25) = -1 EBADF (Bad file descriptor) [pid 3659] close(26) = -1 EBADF (Bad file descriptor) [pid 3659] close(27) = -1 EBADF (Bad file descriptor) [pid 3659] close(28) = -1 EBADF (Bad file descriptor) [pid 3659] close(29) = -1 EBADF (Bad file descriptor) [pid 3659] exit_group(0) = ? [pid 3659] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3660 attached , child_tidptr=0x5555570bd5d0) = 42 [pid 3660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3660] setpgid(0, 0) = 0 [pid 3660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3660] write(3, "1000", 4) = 4 [pid 3660] close(3) = 0 [pid 3660] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3660] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3660] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3660] write(4, "5", 1) = 1 [ 54.902699][ T3659] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.910666][ T3659] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.918636][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.926622][ T3659] R13: 00000000000f4240 R14: 000000000000d468 R15: 00007ffdc49a5924 [ 54.934688][ T3659] [pid 3660] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.992476][ T3660] FAULT_INJECTION: forcing a failure. [ 54.992476][ T3660] name failslab, interval 1, probability 0, space 0, times 0 [ 55.005077][ T3660] CPU: 0 PID: 3660 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.015219][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.025271][ T3660] Call Trace: [ 55.028558][ T3660] [ 55.031480][ T3660] dump_stack_lvl+0xcd/0x134 [ 55.036080][ T3660] should_fail.cold+0x5/0xa [ 55.040606][ T3660] should_failslab+0x5/0x10 [ 55.045119][ T3660] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.050442][ T3660] ? ref_tracker_alloc+0x14c/0x550 [ 55.055583][ T3660] ref_tracker_alloc+0x14c/0x550 [ 55.060746][ T3660] ? ref_tracker_free+0x6b0/0x6b0 [ 55.065869][ T3660] ? lock_release+0x720/0x720 [ 55.070550][ T3660] ? do_raw_spin_lock+0x120/0x2a0 [ 55.075559][ T3660] ? rwlock_bug.part.0+0x90/0x90 [ 55.080499][ T3660] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.085938][ T3660] linkwatch_fire_event+0x202/0x260 [ 55.091131][ T3660] netif_carrier_off+0x96/0xb0 [ 55.095976][ T3660] __tun_detach+0xfe7/0x13e0 [ 55.100577][ T3660] tun_chr_close+0xc4/0x180 [ 55.105069][ T3660] __fput+0x277/0x9d0 [ 55.109054][ T3660] ? __tun_detach+0x13e0/0x13e0 [ 55.113893][ T3660] task_work_run+0xdd/0x1a0 [ 55.118387][ T3660] ptrace_notify+0x114/0x140 [ 55.122979][ T3660] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.129462][ T3660] syscall_exit_to_user_mode+0x9/0x60 [ 55.134816][ T3660] do_syscall_64+0x42/0xb0 [ 55.139215][ T3660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.145090][ T3660] RIP: 0033:0x7fc6cd2767a3 [ 55.149491][ T3660] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.169154][ T3660] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.177655][ T3660] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 55.186511][ T3660] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.194471][ T3660] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.202447][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.210496][ T3660] R13: 00000000000f4240 R14: 000000000000d595 R15: 00007ffdc49a5924 [ 55.218481][ T3660] [pid 3660] close(3) = 0 [pid 3660] close(4) = 0 [pid 3660] close(5) = -1 EBADF (Bad file descriptor) [pid 3660] close(6) = -1 EBADF (Bad file descriptor) [pid 3660] close(7) = -1 EBADF (Bad file descriptor) [pid 3660] close(8) = -1 EBADF (Bad file descriptor) [pid 3660] close(9) = -1 EBADF (Bad file descriptor) [pid 3660] close(10) = -1 EBADF (Bad file descriptor) [pid 3660] close(11) = -1 EBADF (Bad file descriptor) [pid 3660] close(12) = -1 EBADF (Bad file descriptor) [pid 3660] close(13) = -1 EBADF (Bad file descriptor) [pid 3660] close(14) = -1 EBADF (Bad file descriptor) [pid 3660] close(15) = -1 EBADF (Bad file descriptor) [pid 3660] close(16) = -1 EBADF (Bad file descriptor) [pid 3660] close(17) = -1 EBADF (Bad file descriptor) [pid 3660] close(18) = -1 EBADF (Bad file descriptor) [pid 3660] close(19) = -1 EBADF (Bad file descriptor) [pid 3660] close(20) = -1 EBADF (Bad file descriptor) [pid 3660] close(21) = -1 EBADF (Bad file descriptor) [pid 3660] close(22) = -1 EBADF (Bad file descriptor) [pid 3660] close(23) = -1 EBADF (Bad file descriptor) [pid 3660] close(24) = -1 EBADF (Bad file descriptor) [pid 3660] close(25) = -1 EBADF (Bad file descriptor) [pid 3660] close(26) = -1 EBADF (Bad file descriptor) [pid 3660] close(27) = -1 EBADF (Bad file descriptor) [pid 3660] close(28) = -1 EBADF (Bad file descriptor) [pid 3660] close(29) = -1 EBADF (Bad file descriptor) [pid 3660] exit_group(0) = ? [pid 3660] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3661 attached [pid 3661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3661] setpgid(0, 0) = 0 [pid 3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3661] write(3, "1000", 4) = 4 [pid 3661] close(3 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 43 [pid 3661] <... close resumed>) = 0 [pid 3661] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3661] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3661] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3661] write(4, "5", 1) = 1 [pid 3661] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.297798][ T3661] FAULT_INJECTION: forcing a failure. [ 55.297798][ T3661] name failslab, interval 1, probability 0, space 0, times 0 [ 55.310571][ T3661] CPU: 1 PID: 3661 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.320715][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.330768][ T3661] Call Trace: [ 55.334050][ T3661] [ 55.336979][ T3661] dump_stack_lvl+0xcd/0x134 [ 55.341587][ T3661] should_fail.cold+0x5/0xa [ 55.346096][ T3661] should_failslab+0x5/0x10 [ 55.350612][ T3661] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.355896][ T3661] ? ref_tracker_alloc+0x14c/0x550 [ 55.361012][ T3661] ref_tracker_alloc+0x14c/0x550 [ 55.365950][ T3661] ? ref_tracker_free+0x6b0/0x6b0 [ 55.370987][ T3661] ? lock_release+0x720/0x720 [ 55.375664][ T3661] ? do_raw_spin_lock+0x120/0x2a0 [ 55.380693][ T3661] ? rwlock_bug.part.0+0x90/0x90 [ 55.385737][ T3661] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.391113][ T3661] linkwatch_fire_event+0x202/0x260 [ 55.396319][ T3661] netif_carrier_off+0x96/0xb0 [ 55.401104][ T3661] __tun_detach+0xfe7/0x13e0 [ 55.405803][ T3661] tun_chr_close+0xc4/0x180 [ 55.410317][ T3661] __fput+0x277/0x9d0 [ 55.414295][ T3661] ? __tun_detach+0x13e0/0x13e0 [ 55.419249][ T3661] task_work_run+0xdd/0x1a0 [ 55.423779][ T3661] ptrace_notify+0x114/0x140 [ 55.428377][ T3661] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.434634][ T3661] syscall_exit_to_user_mode+0x9/0x60 [ 55.440127][ T3661] do_syscall_64+0x42/0xb0 [ 55.444754][ T3661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.451775][ T3661] RIP: 0033:0x7fc6cd2767a3 [ 55.456190][ T3661] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.476000][ T3661] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.484508][ T3661] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3661] close(3) = 0 [pid 3661] close(4) = 0 [pid 3661] close(5) = -1 EBADF (Bad file descriptor) [pid 3661] close(6) = -1 EBADF (Bad file descriptor) [pid 3661] close(7) = -1 EBADF (Bad file descriptor) [pid 3661] close(8) = -1 EBADF (Bad file descriptor) [pid 3661] close(9) = -1 EBADF (Bad file descriptor) [pid 3661] close(10) = -1 EBADF (Bad file descriptor) [pid 3661] close(11) = -1 EBADF (Bad file descriptor) [pid 3661] close(12) = -1 EBADF (Bad file descriptor) [pid 3661] close(13) = -1 EBADF (Bad file descriptor) [pid 3661] close(14) = -1 EBADF (Bad file descriptor) [pid 3661] close(15) = -1 EBADF (Bad file descriptor) [pid 3661] close(16) = -1 EBADF (Bad file descriptor) [pid 3661] close(17) = -1 EBADF (Bad file descriptor) [pid 3661] close(18) = -1 EBADF (Bad file descriptor) [pid 3661] close(19) = -1 EBADF (Bad file descriptor) [pid 3661] close(20) = -1 EBADF (Bad file descriptor) [pid 3661] close(21) = -1 EBADF (Bad file descriptor) [pid 3661] close(22) = -1 EBADF (Bad file descriptor) [pid 3661] close(23) = -1 EBADF (Bad file descriptor) [pid 3661] close(24) = -1 EBADF (Bad file descriptor) [pid 3661] close(25) = -1 EBADF (Bad file descriptor) [pid 3661] close(26) = -1 EBADF (Bad file descriptor) [pid 3661] close(27) = -1 EBADF (Bad file descriptor) [pid 3661] close(28) = -1 EBADF (Bad file descriptor) [pid 3661] close(29) = -1 EBADF (Bad file descriptor) [pid 3661] exit_group(0) = ? [pid 3661] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 44 ./strace-static-x86_64: Process 3662 attached [pid 3662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3662] setpgid(0, 0) = 0 [pid 3662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3662] write(3, "1000", 4) = 4 [pid 3662] close(3) = 0 [pid 3662] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 55.492508][ T3661] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.500468][ T3661] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.508928][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.516912][ T3661] R13: 00000000000f4240 R14: 000000000000d6b1 R15: 00007ffdc49a5924 [ 55.524894][ T3661] [pid 3662] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3662] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3662] write(4, "5", 1) = 1 [pid 3662] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.582588][ T3662] FAULT_INJECTION: forcing a failure. [ 55.582588][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 55.595443][ T3662] CPU: 0 PID: 3662 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.605868][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.615920][ T3662] Call Trace: [ 55.619192][ T3662] [ 55.622117][ T3662] dump_stack_lvl+0xcd/0x134 [ 55.626726][ T3662] should_fail.cold+0x5/0xa [ 55.631245][ T3662] should_failslab+0x5/0x10 [ 55.635772][ T3662] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.641083][ T3662] ? ref_tracker_alloc+0x14c/0x550 [ 55.646205][ T3662] ref_tracker_alloc+0x14c/0x550 [ 55.651249][ T3662] ? ref_tracker_free+0x6b0/0x6b0 [ 55.656298][ T3662] ? lock_release+0x720/0x720 [ 55.660982][ T3662] ? do_raw_spin_lock+0x120/0x2a0 [ 55.666014][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 55.671045][ T3662] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.676470][ T3662] linkwatch_fire_event+0x202/0x260 [ 55.681680][ T3662] netif_carrier_off+0x96/0xb0 [ 55.686457][ T3662] __tun_detach+0xfe7/0x13e0 [ 55.691074][ T3662] tun_chr_close+0xc4/0x180 [ 55.695585][ T3662] __fput+0x277/0x9d0 [ 55.699584][ T3662] ? __tun_detach+0x13e0/0x13e0 [ 55.704455][ T3662] task_work_run+0xdd/0x1a0 [ 55.708956][ T3662] ptrace_notify+0x114/0x140 [ 55.713538][ T3662] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.719950][ T3662] syscall_exit_to_user_mode+0x9/0x60 [ 55.725318][ T3662] do_syscall_64+0x42/0xb0 [ 55.729812][ T3662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.735708][ T3662] RIP: 0033:0x7fc6cd2767a3 [ 55.740138][ T3662] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.759748][ T3662] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.768176][ T3662] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 55.776145][ T3662] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.784115][ T3662] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.792090][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.800158][ T3662] R13: 00000000000f4240 R14: 000000000000d7e7 R15: 00007ffdc49a5924 [ 55.808139][ T3662] [pid 3662] close(3) = 0 [pid 3662] close(4) = 0 [pid 3662] close(5) = -1 EBADF (Bad file descriptor) [pid 3662] close(6) = -1 EBADF (Bad file descriptor) [pid 3662] close(7) = -1 EBADF (Bad file descriptor) [pid 3662] close(8) = -1 EBADF (Bad file descriptor) [pid 3662] close(9) = -1 EBADF (Bad file descriptor) [pid 3662] close(10) = -1 EBADF (Bad file descriptor) [pid 3662] close(11) = -1 EBADF (Bad file descriptor) [pid 3662] close(12) = -1 EBADF (Bad file descriptor) [pid 3662] close(13) = -1 EBADF (Bad file descriptor) [pid 3662] close(14) = -1 EBADF (Bad file descriptor) [pid 3662] close(15) = -1 EBADF (Bad file descriptor) [pid 3662] close(16) = -1 EBADF (Bad file descriptor) [pid 3662] close(17) = -1 EBADF (Bad file descriptor) [pid 3662] close(18) = -1 EBADF (Bad file descriptor) [pid 3662] close(19) = -1 EBADF (Bad file descriptor) [pid 3662] close(20) = -1 EBADF (Bad file descriptor) [pid 3662] close(21) = -1 EBADF (Bad file descriptor) [pid 3662] close(22) = -1 EBADF (Bad file descriptor) [pid 3662] close(23) = -1 EBADF (Bad file descriptor) [pid 3662] close(24) = -1 EBADF (Bad file descriptor) [pid 3662] close(25) = -1 EBADF (Bad file descriptor) [pid 3662] close(26) = -1 EBADF (Bad file descriptor) [pid 3662] close(27) = -1 EBADF (Bad file descriptor) [pid 3662] close(28) = -1 EBADF (Bad file descriptor) [pid 3662] close(29) = -1 EBADF (Bad file descriptor) [pid 3662] exit_group(0) = ? [pid 3662] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 45 ./strace-static-x86_64: Process 3663 attached [pid 3663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3663] setpgid(0, 0) = 0 [pid 3663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3663] write(3, "1000", 4) = 4 [pid 3663] close(3) = 0 [pid 3663] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3663] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3663] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3663] write(4, "5", 1) = 1 [pid 3663] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.895781][ T3663] FAULT_INJECTION: forcing a failure. [ 55.895781][ T3663] name failslab, interval 1, probability 0, space 0, times 0 [ 55.908599][ T3663] CPU: 0 PID: 3663 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.918747][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.928886][ T3663] Call Trace: [ 55.932170][ T3663] [ 55.935215][ T3663] dump_stack_lvl+0xcd/0x134 [ 55.939827][ T3663] should_fail.cold+0x5/0xa [ 55.944362][ T3663] should_failslab+0x5/0x10 [ 55.948872][ T3663] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.955033][ T3663] ? ref_tracker_alloc+0x14c/0x550 [ 55.960156][ T3663] ref_tracker_alloc+0x14c/0x550 [ 55.965104][ T3663] ? ref_tracker_free+0x6b0/0x6b0 [ 55.970120][ T3663] ? lock_release+0x720/0x720 [ 55.974798][ T3663] ? do_raw_spin_lock+0x120/0x2a0 [ 55.979827][ T3663] ? rwlock_bug.part.0+0x90/0x90 [ 55.984768][ T3663] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.990148][ T3663] linkwatch_fire_event+0x202/0x260 [ 55.995360][ T3663] netif_carrier_off+0x96/0xb0 [ 56.000121][ T3663] __tun_detach+0xfe7/0x13e0 [ 56.004717][ T3663] tun_chr_close+0xc4/0x180 [ 56.009229][ T3663] __fput+0x277/0x9d0 [ 56.013252][ T3663] ? __tun_detach+0x13e0/0x13e0 [ 56.018194][ T3663] task_work_run+0xdd/0x1a0 [ 56.022702][ T3663] ptrace_notify+0x114/0x140 [ 56.027283][ T3663] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.033517][ T3663] syscall_exit_to_user_mode+0x9/0x60 [ 56.038967][ T3663] do_syscall_64+0x42/0xb0 [ 56.043378][ T3663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.049261][ T3663] RIP: 0033:0x7fc6cd2767a3 [ 56.053665][ T3663] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.073265][ T3663] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.081764][ T3663] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3663] close(3) = 0 [pid 3663] close(4) = 0 [pid 3663] close(5) = -1 EBADF (Bad file descriptor) [pid 3663] close(6) = -1 EBADF (Bad file descriptor) [pid 3663] close(7) = -1 EBADF (Bad file descriptor) [pid 3663] close(8) = -1 EBADF (Bad file descriptor) [pid 3663] close(9) = -1 EBADF (Bad file descriptor) [pid 3663] close(10) = -1 EBADF (Bad file descriptor) [pid 3663] close(11) = -1 EBADF (Bad file descriptor) [pid 3663] close(12) = -1 EBADF (Bad file descriptor) [pid 3663] close(13) = -1 EBADF (Bad file descriptor) [pid 3663] close(14) = -1 EBADF (Bad file descriptor) [pid 3663] close(15) = -1 EBADF (Bad file descriptor) [pid 3663] close(16) = -1 EBADF (Bad file descriptor) [pid 3663] close(17) = -1 EBADF (Bad file descriptor) [pid 3663] close(18) = -1 EBADF (Bad file descriptor) [pid 3663] close(19) = -1 EBADF (Bad file descriptor) [pid 3663] close(20) = -1 EBADF (Bad file descriptor) [pid 3663] close(21) = -1 EBADF (Bad file descriptor) [pid 3663] close(22) = -1 EBADF (Bad file descriptor) [pid 3663] close(23) = -1 EBADF (Bad file descriptor) [pid 3663] close(24) = -1 EBADF (Bad file descriptor) [pid 3663] close(25) = -1 EBADF (Bad file descriptor) [pid 3663] close(26) = -1 EBADF (Bad file descriptor) [pid 3663] close(27) = -1 EBADF (Bad file descriptor) [pid 3663] close(28) = -1 EBADF (Bad file descriptor) [pid 3663] close(29) = -1 EBADF (Bad file descriptor) [pid 3663] exit_group(0) = ? [pid 3663] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [ 56.089729][ T3663] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.097688][ T3663] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.105649][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.113609][ T3663] R13: 00000000000f4240 R14: 000000000000d8ff R15: 00007ffdc49a5924 [ 56.121585][ T3663] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 46 ./strace-static-x86_64: Process 3664 attached [pid 3664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3664] setpgid(0, 0) = 0 [pid 3664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3664] write(3, "1000", 4) = 4 [pid 3664] close(3) = 0 [pid 3664] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3664] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3664] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3664] write(4, "5", 1) = 1 [pid 3664] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.187940][ T3664] FAULT_INJECTION: forcing a failure. [ 56.187940][ T3664] name failslab, interval 1, probability 0, space 0, times 0 [ 56.200787][ T3664] CPU: 1 PID: 3664 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.211162][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.221210][ T3664] Call Trace: [ 56.224477][ T3664] [ 56.227391][ T3664] dump_stack_lvl+0xcd/0x134 [ 56.231977][ T3664] should_fail.cold+0x5/0xa [ 56.236474][ T3664] should_failslab+0x5/0x10 [ 56.240972][ T3664] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.246245][ T3664] ? ref_tracker_alloc+0x14c/0x550 [ 56.251372][ T3664] ref_tracker_alloc+0x14c/0x550 [ 56.256304][ T3664] ? ref_tracker_free+0x6b0/0x6b0 [ 56.261323][ T3664] ? lock_release+0x720/0x720 [ 56.265993][ T3664] ? do_raw_spin_lock+0x120/0x2a0 [ 56.271009][ T3664] ? rwlock_bug.part.0+0x90/0x90 [ 56.276110][ T3664] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.281566][ T3664] linkwatch_fire_event+0x202/0x260 [ 56.286757][ T3664] netif_carrier_off+0x96/0xb0 [ 56.291508][ T3664] __tun_detach+0xfe7/0x13e0 [ 56.296092][ T3664] tun_chr_close+0xc4/0x180 [ 56.300580][ T3664] __fput+0x277/0x9d0 [ 56.304547][ T3664] ? __tun_detach+0x13e0/0x13e0 [ 56.309396][ T3664] task_work_run+0xdd/0x1a0 [ 56.313989][ T3664] ptrace_notify+0x114/0x140 [ 56.318580][ T3664] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.324828][ T3664] syscall_exit_to_user_mode+0x9/0x60 [ 56.330201][ T3664] do_syscall_64+0x42/0xb0 [ 56.334645][ T3664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.340537][ T3664] RIP: 0033:0x7fc6cd2767a3 [ 56.344947][ T3664] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.364547][ T3664] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.372964][ T3664] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 56.380937][ T3664] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3664] close(3) = 0 [pid 3664] close(4) = 0 [pid 3664] close(5) = -1 EBADF (Bad file descriptor) [pid 3664] close(6) = -1 EBADF (Bad file descriptor) [pid 3664] close(7) = -1 EBADF (Bad file descriptor) [pid 3664] close(8) = -1 EBADF (Bad file descriptor) [pid 3664] close(9) = -1 EBADF (Bad file descriptor) [pid 3664] close(10) = -1 EBADF (Bad file descriptor) [pid 3664] close(11) = -1 EBADF (Bad file descriptor) [pid 3664] close(12) = -1 EBADF (Bad file descriptor) [pid 3664] close(13) = -1 EBADF (Bad file descriptor) [pid 3664] close(14) = -1 EBADF (Bad file descriptor) [ 56.388907][ T3664] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.396962][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.404937][ T3664] R13: 00000000000f4240 R14: 000000000000da3a R15: 00007ffdc49a5924 [ 56.412925][ T3664] [pid 3664] close(15) = -1 EBADF (Bad file descriptor) [pid 3664] close(16) = -1 EBADF (Bad file descriptor) [pid 3664] close(17) = -1 EBADF (Bad file descriptor) [pid 3664] close(18) = -1 EBADF (Bad file descriptor) [pid 3664] close(19) = -1 EBADF (Bad file descriptor) [pid 3664] close(20) = -1 EBADF (Bad file descriptor) [pid 3664] close(21) = -1 EBADF (Bad file descriptor) [pid 3664] close(22) = -1 EBADF (Bad file descriptor) [pid 3664] close(23) = -1 EBADF (Bad file descriptor) [pid 3664] close(24) = -1 EBADF (Bad file descriptor) [pid 3664] close(25) = -1 EBADF (Bad file descriptor) [pid 3664] close(26) = -1 EBADF (Bad file descriptor) [pid 3664] close(27) = -1 EBADF (Bad file descriptor) [pid 3664] close(28) = -1 EBADF (Bad file descriptor) [pid 3664] close(29) = -1 EBADF (Bad file descriptor) [pid 3664] exit_group(0) = ? [pid 3664] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3665 attached , child_tidptr=0x5555570bd5d0) = 47 [pid 3665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3665] setpgid(0, 0) = 0 [pid 3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3665] write(3, "1000", 4) = 4 [pid 3665] close(3) = 0 [pid 3665] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3665] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3665] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3665] write(4, "5", 1) = 1 [pid 3665] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.493717][ T3665] FAULT_INJECTION: forcing a failure. [ 56.493717][ T3665] name failslab, interval 1, probability 0, space 0, times 0 [ 56.506338][ T3665] CPU: 1 PID: 3665 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.516795][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.527061][ T3665] Call Trace: [ 56.530337][ T3665] [ 56.533253][ T3665] dump_stack_lvl+0xcd/0x134 [ 56.537843][ T3665] should_fail.cold+0x5/0xa [ 56.542347][ T3665] should_failslab+0x5/0x10 [ 56.546840][ T3665] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.552288][ T3665] ? ref_tracker_alloc+0x14c/0x550 [ 56.557436][ T3665] ref_tracker_alloc+0x14c/0x550 [ 56.562386][ T3665] ? ref_tracker_free+0x6b0/0x6b0 [ 56.567402][ T3665] ? lock_release+0x720/0x720 [ 56.572074][ T3665] ? do_raw_spin_lock+0x120/0x2a0 [ 56.577092][ T3665] ? rwlock_bug.part.0+0x90/0x90 [ 56.582111][ T3665] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.587499][ T3665] linkwatch_fire_event+0x202/0x260 [ 56.592693][ T3665] netif_carrier_off+0x96/0xb0 [ 56.597446][ T3665] __tun_detach+0xfe7/0x13e0 [ 56.602035][ T3665] tun_chr_close+0xc4/0x180 [ 56.606527][ T3665] __fput+0x277/0x9d0 [ 56.610497][ T3665] ? __tun_detach+0x13e0/0x13e0 [ 56.615342][ T3665] task_work_run+0xdd/0x1a0 [ 56.619850][ T3665] ptrace_notify+0x114/0x140 [ 56.624444][ T3665] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.630683][ T3665] syscall_exit_to_user_mode+0x9/0x60 [ 56.636140][ T3665] do_syscall_64+0x42/0xb0 [ 56.640548][ T3665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.646447][ T3665] RIP: 0033:0x7fc6cd2767a3 [ 56.650854][ T3665] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.670465][ T3665] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.678874][ T3665] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 56.686833][ T3665] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.694787][ T3665] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.702744][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.710710][ T3665] R13: 00000000000f4240 R14: 000000000000db5d R15: 00007ffdc49a5924 [ 56.718691][ T3665] [pid 3665] close(3) = 0 [pid 3665] close(4) = 0 [pid 3665] close(5) = -1 EBADF (Bad file descriptor) [pid 3665] close(6) = -1 EBADF (Bad file descriptor) [pid 3665] close(7) = -1 EBADF (Bad file descriptor) [pid 3665] close(8) = -1 EBADF (Bad file descriptor) [pid 3665] close(9) = -1 EBADF (Bad file descriptor) [pid 3665] close(10) = -1 EBADF (Bad file descriptor) [pid 3665] close(11) = -1 EBADF (Bad file descriptor) [pid 3665] close(12) = -1 EBADF (Bad file descriptor) [pid 3665] close(13) = -1 EBADF (Bad file descriptor) [pid 3665] close(14) = -1 EBADF (Bad file descriptor) [pid 3665] close(15) = -1 EBADF (Bad file descriptor) [pid 3665] close(16) = -1 EBADF (Bad file descriptor) [pid 3665] close(17) = -1 EBADF (Bad file descriptor) [pid 3665] close(18) = -1 EBADF (Bad file descriptor) [pid 3665] close(19) = -1 EBADF (Bad file descriptor) [pid 3665] close(20) = -1 EBADF (Bad file descriptor) [pid 3665] close(21) = -1 EBADF (Bad file descriptor) [pid 3665] close(22) = -1 EBADF (Bad file descriptor) [pid 3665] close(23) = -1 EBADF (Bad file descriptor) [pid 3665] close(24) = -1 EBADF (Bad file descriptor) [pid 3665] close(25) = -1 EBADF (Bad file descriptor) [pid 3665] close(26) = -1 EBADF (Bad file descriptor) [pid 3665] close(27) = -1 EBADF (Bad file descriptor) [pid 3665] close(28) = -1 EBADF (Bad file descriptor) [pid 3665] close(29) = -1 EBADF (Bad file descriptor) [pid 3665] exit_group(0) = ? [pid 3665] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 48 ./strace-static-x86_64: Process 3666 attached [pid 3666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3666] setpgid(0, 0) = 0 [pid 3666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3666] write(3, "1000", 4) = 4 [pid 3666] close(3) = 0 [pid 3666] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3666] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3666] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3666] write(4, "5", 1) = 1 [pid 3666] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.795029][ T3666] FAULT_INJECTION: forcing a failure. [ 56.795029][ T3666] name failslab, interval 1, probability 0, space 0, times 0 [ 56.807727][ T3666] CPU: 1 PID: 3666 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.817964][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.828237][ T3666] Call Trace: [ 56.831516][ T3666] [ 56.834684][ T3666] dump_stack_lvl+0xcd/0x134 [ 56.839284][ T3666] should_fail.cold+0x5/0xa [ 56.843926][ T3666] should_failslab+0x5/0x10 [ 56.848542][ T3666] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.854132][ T3666] ? ref_tracker_alloc+0x14c/0x550 [ 56.859255][ T3666] ref_tracker_alloc+0x14c/0x550 [ 56.864205][ T3666] ? ref_tracker_free+0x6b0/0x6b0 [ 56.869231][ T3666] ? lock_release+0x720/0x720 [ 56.874002][ T3666] ? do_raw_spin_lock+0x120/0x2a0 [ 56.879034][ T3666] ? rwlock_bug.part.0+0x90/0x90 [ 56.883976][ T3666] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.889362][ T3666] linkwatch_fire_event+0x202/0x260 [ 56.894580][ T3666] netif_carrier_off+0x96/0xb0 [ 56.899375][ T3666] __tun_detach+0xfe7/0x13e0 [ 56.903976][ T3666] tun_chr_close+0xc4/0x180 [ 56.908482][ T3666] __fput+0x277/0x9d0 [ 56.912905][ T3666] ? __tun_detach+0x13e0/0x13e0 [ 56.917769][ T3666] task_work_run+0xdd/0x1a0 [ 56.922292][ T3666] ptrace_notify+0x114/0x140 [ 56.926893][ T3666] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.933156][ T3666] syscall_exit_to_user_mode+0x9/0x60 [ 56.938643][ T3666] do_syscall_64+0x42/0xb0 [ 56.943089][ T3666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.949000][ T3666] RIP: 0033:0x7fc6cd2767a3 [ 56.953414][ T3666] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.973715][ T3666] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.982297][ T3666] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3666] close(3) = 0 [pid 3666] close(4) = 0 [pid 3666] close(5) = -1 EBADF (Bad file descriptor) [pid 3666] close(6) = -1 EBADF (Bad file descriptor) [pid 3666] close(7) = -1 EBADF (Bad file descriptor) [pid 3666] close(8) = -1 EBADF (Bad file descriptor) [pid 3666] close(9) = -1 EBADF (Bad file descriptor) [pid 3666] close(10) = -1 EBADF (Bad file descriptor) [pid 3666] close(11) = -1 EBADF (Bad file descriptor) [pid 3666] close(12) = -1 EBADF (Bad file descriptor) [pid 3666] close(13) = -1 EBADF (Bad file descriptor) [pid 3666] close(14) = -1 EBADF (Bad file descriptor) [pid 3666] close(15) = -1 EBADF (Bad file descriptor) [pid 3666] close(16) = -1 EBADF (Bad file descriptor) [pid 3666] close(17) = -1 EBADF (Bad file descriptor) [pid 3666] close(18) = -1 EBADF (Bad file descriptor) [pid 3666] close(19) = -1 EBADF (Bad file descriptor) [pid 3666] close(20) = -1 EBADF (Bad file descriptor) [pid 3666] close(21) = -1 EBADF (Bad file descriptor) [pid 3666] close(22) = -1 EBADF (Bad file descriptor) [pid 3666] close(23) = -1 EBADF (Bad file descriptor) [pid 3666] close(24) = -1 EBADF (Bad file descriptor) [pid 3666] close(25) = -1 EBADF (Bad file descriptor) [pid 3666] close(26) = -1 EBADF (Bad file descriptor) [pid 3666] close(27) = -1 EBADF (Bad file descriptor) [pid 3666] close(28) = -1 EBADF (Bad file descriptor) [pid 3666] close(29) = -1 EBADF (Bad file descriptor) [pid 3666] exit_group(0) = ? [pid 3666] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 49 ./strace-static-x86_64: Process 3667 attached [pid 3667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3667] setpgid(0, 0) = 0 [ 56.990366][ T3666] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.998334][ T3666] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.006311][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.014290][ T3666] R13: 00000000000f4240 R14: 000000000000dc8d R15: 00007ffdc49a5924 [ 57.022373][ T3666] [pid 3667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3667] write(3, "1000", 4) = 4 [pid 3667] close(3) = 0 [pid 3667] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3667] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3667] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3667] write(4, "5", 1) = 1 [pid 3667] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.085090][ T3667] FAULT_INJECTION: forcing a failure. [ 57.085090][ T3667] name failslab, interval 1, probability 0, space 0, times 0 [ 57.098205][ T3667] CPU: 0 PID: 3667 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.108349][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.118398][ T3667] Call Trace: [ 57.121665][ T3667] [ 57.124575][ T3667] dump_stack_lvl+0xcd/0x134 [ 57.129164][ T3667] should_fail.cold+0x5/0xa [ 57.133665][ T3667] should_failslab+0x5/0x10 [ 57.138248][ T3667] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.143742][ T3667] ? ref_tracker_alloc+0x14c/0x550 [ 57.148855][ T3667] ref_tracker_alloc+0x14c/0x550 [ 57.153985][ T3667] ? ref_tracker_free+0x6b0/0x6b0 [ 57.159000][ T3667] ? lock_release+0x720/0x720 [ 57.163670][ T3667] ? do_raw_spin_lock+0x120/0x2a0 [ 57.168694][ T3667] ? rwlock_bug.part.0+0x90/0x90 [ 57.173620][ T3667] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.178982][ T3667] linkwatch_fire_event+0x202/0x260 [ 57.184179][ T3667] netif_carrier_off+0x96/0xb0 [ 57.188949][ T3667] __tun_detach+0xfe7/0x13e0 [ 57.193532][ T3667] tun_chr_close+0xc4/0x180 [ 57.198013][ T3667] __fput+0x277/0x9d0 [ 57.201972][ T3667] ? __tun_detach+0x13e0/0x13e0 [ 57.206800][ T3667] task_work_run+0xdd/0x1a0 [ 57.211374][ T3667] ptrace_notify+0x114/0x140 [ 57.215952][ T3667] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.222176][ T3667] syscall_exit_to_user_mode+0x9/0x60 [ 57.227533][ T3667] do_syscall_64+0x42/0xb0 [ 57.231940][ T3667] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.237820][ T3667] RIP: 0033:0x7fc6cd2767a3 [ 57.242227][ T3667] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.261827][ T3667] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.270231][ T3667] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.278185][ T3667] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 57.286146][ T3667] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.294124][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.302084][ T3667] R13: 00000000000f4240 R14: 000000000000ddbc R15: 00007ffdc49a5924 [ 57.310055][ T3667] [pid 3667] close(3) = 0 [pid 3667] close(4) = 0 [pid 3667] close(5) = -1 EBADF (Bad file descriptor) [pid 3667] close(6) = -1 EBADF (Bad file descriptor) [pid 3667] close(7) = -1 EBADF (Bad file descriptor) [pid 3667] close(8) = -1 EBADF (Bad file descriptor) [pid 3667] close(9) = -1 EBADF (Bad file descriptor) [pid 3667] close(10) = -1 EBADF (Bad file descriptor) [pid 3667] close(11) = -1 EBADF (Bad file descriptor) [pid 3667] close(12) = -1 EBADF (Bad file descriptor) [pid 3667] close(13) = -1 EBADF (Bad file descriptor) [pid 3667] close(14) = -1 EBADF (Bad file descriptor) [pid 3667] close(15) = -1 EBADF (Bad file descriptor) [pid 3667] close(16) = -1 EBADF (Bad file descriptor) [pid 3667] close(17) = -1 EBADF (Bad file descriptor) [pid 3667] close(18) = -1 EBADF (Bad file descriptor) [pid 3667] close(19) = -1 EBADF (Bad file descriptor) [pid 3667] close(20) = -1 EBADF (Bad file descriptor) [pid 3667] close(21) = -1 EBADF (Bad file descriptor) [pid 3667] close(22) = -1 EBADF (Bad file descriptor) [pid 3667] close(23) = -1 EBADF (Bad file descriptor) [pid 3667] close(24) = -1 EBADF (Bad file descriptor) [pid 3667] close(25) = -1 EBADF (Bad file descriptor) [pid 3667] close(26) = -1 EBADF (Bad file descriptor) [pid 3667] close(27) = -1 EBADF (Bad file descriptor) [pid 3667] close(28) = -1 EBADF (Bad file descriptor) [pid 3667] close(29) = -1 EBADF (Bad file descriptor) [pid 3667] exit_group(0) = ? [pid 3667] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 50 ./strace-static-x86_64: Process 3668 attached [pid 3668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3668] setpgid(0, 0) = 0 [pid 3668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3668] write(3, "1000", 4) = 4 [pid 3668] close(3) = 0 [pid 3668] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3668] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3668] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3668] write(4, "5", 1) = 1 [pid 3668] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.393415][ T3668] FAULT_INJECTION: forcing a failure. [ 57.393415][ T3668] name failslab, interval 1, probability 0, space 0, times 0 [ 57.406062][ T3668] CPU: 0 PID: 3668 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.416202][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.426243][ T3668] Call Trace: [ 57.429505][ T3668] [ 57.432413][ T3668] dump_stack_lvl+0xcd/0x134 [ 57.436990][ T3668] should_fail.cold+0x5/0xa [ 57.441472][ T3668] should_failslab+0x5/0x10 [ 57.445957][ T3668] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.451255][ T3668] ? ref_tracker_alloc+0x14c/0x550 [ 57.456475][ T3668] ref_tracker_alloc+0x14c/0x550 [ 57.461413][ T3668] ? ref_tracker_free+0x6b0/0x6b0 [ 57.466423][ T3668] ? lock_release+0x720/0x720 [ 57.471092][ T3668] ? do_raw_spin_lock+0x120/0x2a0 [ 57.476104][ T3668] ? rwlock_bug.part.0+0x90/0x90 [ 57.481030][ T3668] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.486582][ T3668] linkwatch_fire_event+0x202/0x260 [ 57.491782][ T3668] netif_carrier_off+0x96/0xb0 [ 57.496716][ T3668] __tun_detach+0xfe7/0x13e0 [ 57.501304][ T3668] tun_chr_close+0xc4/0x180 [ 57.505798][ T3668] __fput+0x277/0x9d0 [ 57.509767][ T3668] ? __tun_detach+0x13e0/0x13e0 [ 57.514605][ T3668] task_work_run+0xdd/0x1a0 [ 57.519098][ T3668] ptrace_notify+0x114/0x140 [ 57.523679][ T3668] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.529911][ T3668] syscall_exit_to_user_mode+0x9/0x60 [ 57.535622][ T3668] do_syscall_64+0x42/0xb0 [ 57.540032][ T3668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.545914][ T3668] RIP: 0033:0x7fc6cd2767a3 [ 57.550318][ T3668] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.569911][ T3668] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.578313][ T3668] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.586267][ T3668] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3668] close(3) = 0 [pid 3668] close(4) = 0 [pid 3668] close(5) = -1 EBADF (Bad file descriptor) [pid 3668] close(6) = -1 EBADF (Bad file descriptor) [pid 3668] close(7) = -1 EBADF (Bad file descriptor) [pid 3668] close(8) = -1 EBADF (Bad file descriptor) [pid 3668] close(9) = -1 EBADF (Bad file descriptor) [pid 3668] close(10) = -1 EBADF (Bad file descriptor) [pid 3668] close(11) = -1 EBADF (Bad file descriptor) [pid 3668] close(12) = -1 EBADF (Bad file descriptor) [pid 3668] close(13) = -1 EBADF (Bad file descriptor) [pid 3668] close(14) = -1 EBADF (Bad file descriptor) [pid 3668] close(15) = -1 EBADF (Bad file descriptor) [pid 3668] close(16) = -1 EBADF (Bad file descriptor) [pid 3668] close(17) = -1 EBADF (Bad file descriptor) [pid 3668] close(18) = -1 EBADF (Bad file descriptor) [pid 3668] close(19) = -1 EBADF (Bad file descriptor) [pid 3668] close(20) = -1 EBADF (Bad file descriptor) [pid 3668] close(21) = -1 EBADF (Bad file descriptor) [pid 3668] close(22) = -1 EBADF (Bad file descriptor) [pid 3668] close(23) = -1 EBADF (Bad file descriptor) [pid 3668] close(24) = -1 EBADF (Bad file descriptor) [pid 3668] close(25) = -1 EBADF (Bad file descriptor) [pid 3668] close(26) = -1 EBADF (Bad file descriptor) [pid 3668] close(27) = -1 EBADF (Bad file descriptor) [pid 3668] close(28) = -1 EBADF (Bad file descriptor) [pid 3668] close(29) = -1 EBADF (Bad file descriptor) [ 57.594226][ T3668] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.602179][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.610149][ T3668] R13: 00000000000f4240 R14: 000000000000dede R15: 00007ffdc49a5924 [ 57.618118][ T3668] [pid 3668] exit_group(0) = ? [pid 3668] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3669 attached , child_tidptr=0x5555570bd5d0) = 51 [pid 3669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3669] setpgid(0, 0) = 0 [pid 3669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3669] write(3, "1000", 4) = 4 [pid 3669] close(3) = 0 [pid 3669] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3669] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3669] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3669] write(4, "5", 1) = 1 [pid 3669] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.688271][ T3669] FAULT_INJECTION: forcing a failure. [ 57.688271][ T3669] name failslab, interval 1, probability 0, space 0, times 0 [ 57.701124][ T3669] CPU: 1 PID: 3669 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.711253][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.721291][ T3669] Call Trace: [ 57.724555][ T3669] [ 57.727464][ T3669] dump_stack_lvl+0xcd/0x134 [ 57.732042][ T3669] should_fail.cold+0x5/0xa [ 57.736525][ T3669] should_failslab+0x5/0x10 [ 57.741006][ T3669] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.746267][ T3669] ? ref_tracker_alloc+0x14c/0x550 [ 57.751482][ T3669] ref_tracker_alloc+0x14c/0x550 [ 57.756412][ T3669] ? ref_tracker_free+0x6b0/0x6b0 [ 57.761414][ T3669] ? lock_release+0x720/0x720 [ 57.766071][ T3669] ? do_raw_spin_lock+0x120/0x2a0 [ 57.771096][ T3669] ? rwlock_bug.part.0+0x90/0x90 [ 57.776014][ T3669] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.781385][ T3669] linkwatch_fire_event+0x202/0x260 [ 57.786585][ T3669] netif_carrier_off+0x96/0xb0 [ 57.791329][ T3669] __tun_detach+0xfe7/0x13e0 [ 57.795906][ T3669] tun_chr_close+0xc4/0x180 [ 57.800387][ T3669] __fput+0x277/0x9d0 [ 57.804343][ T3669] ? __tun_detach+0x13e0/0x13e0 [ 57.809171][ T3669] task_work_run+0xdd/0x1a0 [ 57.813656][ T3669] ptrace_notify+0x114/0x140 [ 57.818228][ T3669] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.824534][ T3669] syscall_exit_to_user_mode+0x9/0x60 [ 57.829883][ T3669] do_syscall_64+0x42/0xb0 [ 57.834279][ T3669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.840150][ T3669] RIP: 0033:0x7fc6cd2767a3 [ 57.844542][ T3669] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.864123][ T3669] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.872529][ T3669] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.880652][ T3669] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3669] close(3) = 0 [pid 3669] close(4) = 0 [pid 3669] close(5) = -1 EBADF (Bad file descriptor) [pid 3669] close(6) = -1 EBADF (Bad file descriptor) [pid 3669] close(7) = -1 EBADF (Bad file descriptor) [pid 3669] close(8) = -1 EBADF (Bad file descriptor) [pid 3669] close(9) = -1 EBADF (Bad file descriptor) [pid 3669] close(10) = -1 EBADF (Bad file descriptor) [pid 3669] close(11) = -1 EBADF (Bad file descriptor) [pid 3669] close(12) = -1 EBADF (Bad file descriptor) [pid 3669] close(13) = -1 EBADF (Bad file descriptor) [pid 3669] close(14) = -1 EBADF (Bad file descriptor) [pid 3669] close(15) = -1 EBADF (Bad file descriptor) [pid 3669] close(16) = -1 EBADF (Bad file descriptor) [pid 3669] close(17) = -1 EBADF (Bad file descriptor) [pid 3669] close(18) = -1 EBADF (Bad file descriptor) [pid 3669] close(19) = -1 EBADF (Bad file descriptor) [pid 3669] close(20) = -1 EBADF (Bad file descriptor) [pid 3669] close(21) = -1 EBADF (Bad file descriptor) [pid 3669] close(22) = -1 EBADF (Bad file descriptor) [pid 3669] close(23) = -1 EBADF (Bad file descriptor) [pid 3669] close(24) = -1 EBADF (Bad file descriptor) [pid 3669] close(25) = -1 EBADF (Bad file descriptor) [pid 3669] close(26) = -1 EBADF (Bad file descriptor) [pid 3669] close(27) = -1 EBADF (Bad file descriptor) [pid 3669] close(28) = -1 EBADF (Bad file descriptor) [pid 3669] close(29) = -1 EBADF (Bad file descriptor) [pid 3669] exit_group(0) = ? [pid 3669] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 52 ./strace-static-x86_64: Process 3670 attached [pid 3670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3670] setpgid(0, 0) = 0 [pid 3670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3670] write(3, "1000", 4) = 4 [pid 3670] close(3) = 0 [pid 3670] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 57.888599][ T3669] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.896805][ T3669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.904753][ T3669] R13: 00000000000f4240 R14: 000000000000e016 R15: 00007ffdc49a5924 [ 57.912711][ T3669] [pid 3670] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3670] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3670] write(4, "5", 1) = 1 [pid 3670] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.972801][ T3670] FAULT_INJECTION: forcing a failure. [ 57.972801][ T3670] name failslab, interval 1, probability 0, space 0, times 0 [ 57.985410][ T3670] CPU: 0 PID: 3670 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.995553][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.006034][ T3670] Call Trace: [ 58.009310][ T3670] [ 58.012224][ T3670] dump_stack_lvl+0xcd/0x134 [ 58.016806][ T3670] should_fail.cold+0x5/0xa [ 58.021306][ T3670] should_failslab+0x5/0x10 [ 58.025806][ T3670] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.031114][ T3670] ? ref_tracker_alloc+0x14c/0x550 [ 58.036225][ T3670] ref_tracker_alloc+0x14c/0x550 [ 58.041162][ T3670] ? ref_tracker_free+0x6b0/0x6b0 [ 58.046174][ T3670] ? lock_release+0x720/0x720 [ 58.050838][ T3670] ? do_raw_spin_lock+0x120/0x2a0 [ 58.055848][ T3670] ? rwlock_bug.part.0+0x90/0x90 [ 58.060788][ T3670] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.066162][ T3670] linkwatch_fire_event+0x202/0x260 [ 58.071368][ T3670] netif_carrier_off+0x96/0xb0 [ 58.076119][ T3670] __tun_detach+0xfe7/0x13e0 [ 58.080716][ T3670] tun_chr_close+0xc4/0x180 [ 58.085205][ T3670] __fput+0x277/0x9d0 [ 58.089179][ T3670] ? __tun_detach+0x13e0/0x13e0 [ 58.094018][ T3670] task_work_run+0xdd/0x1a0 [ 58.098682][ T3670] ptrace_notify+0x114/0x140 [ 58.103347][ T3670] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.109576][ T3670] syscall_exit_to_user_mode+0x9/0x60 [ 58.114934][ T3670] do_syscall_64+0x42/0xb0 [ 58.119335][ T3670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.125216][ T3670] RIP: 0033:0x7fc6cd2767a3 [ 58.129622][ T3670] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.149743][ T3670] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.158141][ T3670] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3670] close(3) = 0 [pid 3670] close(4) = 0 [pid 3670] close(5) = -1 EBADF (Bad file descriptor) [pid 3670] close(6) = -1 EBADF (Bad file descriptor) [pid 3670] close(7) = -1 EBADF (Bad file descriptor) [pid 3670] close(8) = -1 EBADF (Bad file descriptor) [pid 3670] close(9) = -1 EBADF (Bad file descriptor) [pid 3670] close(10) = -1 EBADF (Bad file descriptor) [pid 3670] close(11) = -1 EBADF (Bad file descriptor) [pid 3670] close(12) = -1 EBADF (Bad file descriptor) [pid 3670] close(13) = -1 EBADF (Bad file descriptor) [pid 3670] close(14) = -1 EBADF (Bad file descriptor) [pid 3670] close(15) = -1 EBADF (Bad file descriptor) [ 58.166094][ T3670] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.174046][ T3670] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.182001][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.189965][ T3670] R13: 00000000000f4240 R14: 000000000000e13a R15: 00007ffdc49a5924 [ 58.198030][ T3670] [pid 3670] close(16) = -1 EBADF (Bad file descriptor) [pid 3670] close(17) = -1 EBADF (Bad file descriptor) [pid 3670] close(18) = -1 EBADF (Bad file descriptor) [pid 3670] close(19) = -1 EBADF (Bad file descriptor) [pid 3670] close(20) = -1 EBADF (Bad file descriptor) [pid 3670] close(21) = -1 EBADF (Bad file descriptor) [pid 3670] close(22) = -1 EBADF (Bad file descriptor) [pid 3670] close(23) = -1 EBADF (Bad file descriptor) [pid 3670] close(24) = -1 EBADF (Bad file descriptor) [pid 3670] close(25) = -1 EBADF (Bad file descriptor) [pid 3670] close(26) = -1 EBADF (Bad file descriptor) [pid 3670] close(27) = -1 EBADF (Bad file descriptor) [pid 3670] close(28) = -1 EBADF (Bad file descriptor) [pid 3670] close(29) = -1 EBADF (Bad file descriptor) [pid 3670] exit_group(0) = ? [pid 3670] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3671 attached , child_tidptr=0x5555570bd5d0) = 53 [pid 3671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3671] setpgid(0, 0) = 0 [pid 3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3671] write(3, "1000", 4) = 4 [pid 3671] close(3) = 0 [pid 3671] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3671] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3671] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3671] write(4, "5", 1) = 1 [pid 3671] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.271782][ T3671] FAULT_INJECTION: forcing a failure. [ 58.271782][ T3671] name failslab, interval 1, probability 0, space 0, times 0 [ 58.284582][ T3671] CPU: 0 PID: 3671 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.294917][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.304969][ T3671] Call Trace: [ 58.308240][ T3671] [ 58.311158][ T3671] dump_stack_lvl+0xcd/0x134 [ 58.315748][ T3671] should_fail.cold+0x5/0xa [ 58.320270][ T3671] should_failslab+0x5/0x10 [ 58.324767][ T3671] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.330063][ T3671] ? ref_tracker_alloc+0x14c/0x550 [ 58.335176][ T3671] ref_tracker_alloc+0x14c/0x550 [ 58.340106][ T3671] ? ref_tracker_free+0x6b0/0x6b0 [ 58.345119][ T3671] ? lock_release+0x720/0x720 [ 58.349791][ T3671] ? do_raw_spin_lock+0x120/0x2a0 [ 58.354808][ T3671] ? rwlock_bug.part.0+0x90/0x90 [ 58.359741][ T3671] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.365109][ T3671] linkwatch_fire_event+0x202/0x260 [ 58.370304][ T3671] netif_carrier_off+0x96/0xb0 [ 58.375059][ T3671] __tun_detach+0xfe7/0x13e0 [ 58.379646][ T3671] tun_chr_close+0xc4/0x180 [ 58.384140][ T3671] __fput+0x277/0x9d0 [ 58.388113][ T3671] ? __tun_detach+0x13e0/0x13e0 [ 58.392951][ T3671] task_work_run+0xdd/0x1a0 [ 58.397446][ T3671] ptrace_notify+0x114/0x140 [ 58.402026][ T3671] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.408254][ T3671] syscall_exit_to_user_mode+0x9/0x60 [ 58.413614][ T3671] do_syscall_64+0x42/0xb0 [ 58.418106][ T3671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.423989][ T3671] RIP: 0033:0x7fc6cd2767a3 [ 58.428392][ T3671] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.450609][ T3671] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.459131][ T3671] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 58.467105][ T3671] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.475074][ T3671] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.483043][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.491124][ T3671] R13: 00000000000f4240 R14: 000000000000e257 R15: 00007ffdc49a5924 [ 58.499105][ T3671] [pid 3671] close(3) = 0 [pid 3671] close(4) = 0 [pid 3671] close(5) = -1 EBADF (Bad file descriptor) [pid 3671] close(6) = -1 EBADF (Bad file descriptor) [pid 3671] close(7) = -1 EBADF (Bad file descriptor) [pid 3671] close(8) = -1 EBADF (Bad file descriptor) [pid 3671] close(9) = -1 EBADF (Bad file descriptor) [pid 3671] close(10) = -1 EBADF (Bad file descriptor) [pid 3671] close(11) = -1 EBADF (Bad file descriptor) [pid 3671] close(12) = -1 EBADF (Bad file descriptor) [pid 3671] close(13) = -1 EBADF (Bad file descriptor) [pid 3671] close(14) = -1 EBADF (Bad file descriptor) [pid 3671] close(15) = -1 EBADF (Bad file descriptor) [pid 3671] close(16) = -1 EBADF (Bad file descriptor) [pid 3671] close(17) = -1 EBADF (Bad file descriptor) [pid 3671] close(18) = -1 EBADF (Bad file descriptor) [pid 3671] close(19) = -1 EBADF (Bad file descriptor) [pid 3671] close(20) = -1 EBADF (Bad file descriptor) [pid 3671] close(21) = -1 EBADF (Bad file descriptor) [pid 3671] close(22) = -1 EBADF (Bad file descriptor) [pid 3671] close(23) = -1 EBADF (Bad file descriptor) [pid 3671] close(24) = -1 EBADF (Bad file descriptor) [pid 3671] close(25) = -1 EBADF (Bad file descriptor) [pid 3671] close(26) = -1 EBADF (Bad file descriptor) [pid 3671] close(27) = -1 EBADF (Bad file descriptor) [pid 3671] close(28) = -1 EBADF (Bad file descriptor) [pid 3671] close(29) = -1 EBADF (Bad file descriptor) [pid 3671] exit_group(0) = ? [pid 3671] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 54 ./strace-static-x86_64: Process 3672 attached [pid 3672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3672] setpgid(0, 0) = 0 [pid 3672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3672] write(3, "1000", 4) = 4 [pid 3672] close(3) = 0 [pid 3672] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3672] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3672] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3672] write(4, "5", 1) = 1 [pid 3672] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.582312][ T3672] FAULT_INJECTION: forcing a failure. [ 58.582312][ T3672] name failslab, interval 1, probability 0, space 0, times 0 [ 58.594926][ T3672] CPU: 0 PID: 3672 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.605309][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.615483][ T3672] Call Trace: [ 58.618766][ T3672] [ 58.621709][ T3672] dump_stack_lvl+0xcd/0x134 [ 58.626307][ T3672] should_fail.cold+0x5/0xa [ 58.630828][ T3672] should_failslab+0x5/0x10 [ 58.635348][ T3672] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.640726][ T3672] ? ref_tracker_alloc+0x14c/0x550 [ 58.645865][ T3672] ref_tracker_alloc+0x14c/0x550 [ 58.650917][ T3672] ? ref_tracker_free+0x6b0/0x6b0 [ 58.655955][ T3672] ? lock_release+0x720/0x720 [ 58.660664][ T3672] ? do_raw_spin_lock+0x120/0x2a0 [ 58.665907][ T3672] ? rwlock_bug.part.0+0x90/0x90 [ 58.670858][ T3672] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.676237][ T3672] linkwatch_fire_event+0x202/0x260 [ 58.681443][ T3672] netif_carrier_off+0x96/0xb0 [ 58.686213][ T3672] __tun_detach+0xfe7/0x13e0 [ 58.690998][ T3672] tun_chr_close+0xc4/0x180 [ 58.695528][ T3672] __fput+0x277/0x9d0 [ 58.699647][ T3672] ? __tun_detach+0x13e0/0x13e0 [ 58.704513][ T3672] task_work_run+0xdd/0x1a0 [ 58.709017][ T3672] ptrace_notify+0x114/0x140 [ 58.713622][ T3672] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.719865][ T3672] syscall_exit_to_user_mode+0x9/0x60 [ 58.725244][ T3672] do_syscall_64+0x42/0xb0 [ 58.730020][ T3672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.735921][ T3672] RIP: 0033:0x7fc6cd2767a3 [ 58.740348][ T3672] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.760043][ T3672] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.768451][ T3672] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3672] close(3) = 0 [pid 3672] close(4) = 0 [pid 3672] close(5) = -1 EBADF (Bad file descriptor) [pid 3672] close(6) = -1 EBADF (Bad file descriptor) [pid 3672] close(7) = -1 EBADF (Bad file descriptor) [pid 3672] close(8) = -1 EBADF (Bad file descriptor) [pid 3672] close(9) = -1 EBADF (Bad file descriptor) [pid 3672] close(10) = -1 EBADF (Bad file descriptor) [pid 3672] close(11) = -1 EBADF (Bad file descriptor) [pid 3672] close(12) = -1 EBADF (Bad file descriptor) [pid 3672] close(13) = -1 EBADF (Bad file descriptor) [pid 3672] close(14) = -1 EBADF (Bad file descriptor) [pid 3672] close(15) = -1 EBADF (Bad file descriptor) [ 58.776441][ T3672] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.784411][ T3672] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.792390][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.800480][ T3672] R13: 00000000000f4240 R14: 000000000000e383 R15: 00007ffdc49a5924 [ 58.808460][ T3672] [pid 3672] close(16) = -1 EBADF (Bad file descriptor) [pid 3672] close(17) = -1 EBADF (Bad file descriptor) [pid 3672] close(18) = -1 EBADF (Bad file descriptor) [pid 3672] close(19) = -1 EBADF (Bad file descriptor) [pid 3672] close(20) = -1 EBADF (Bad file descriptor) [pid 3672] close(21) = -1 EBADF (Bad file descriptor) [pid 3672] close(22) = -1 EBADF (Bad file descriptor) [pid 3672] close(23) = -1 EBADF (Bad file descriptor) [pid 3672] close(24) = -1 EBADF (Bad file descriptor) [pid 3672] close(25) = -1 EBADF (Bad file descriptor) [pid 3672] close(26) = -1 EBADF (Bad file descriptor) [pid 3672] close(27) = -1 EBADF (Bad file descriptor) [pid 3672] close(28) = -1 EBADF (Bad file descriptor) [pid 3672] close(29) = -1 EBADF (Bad file descriptor) [pid 3672] exit_group(0) = ? [pid 3672] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 55 ./strace-static-x86_64: Process 3673 attached [pid 3673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3673] setpgid(0, 0) = 0 [pid 3673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3673] write(3, "1000", 4) = 4 [pid 3673] close(3) = 0 [pid 3673] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3673] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3673] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3673] write(4, "5", 1) = 1 [pid 3673] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.877549][ T3673] FAULT_INJECTION: forcing a failure. [ 58.877549][ T3673] name failslab, interval 1, probability 0, space 0, times 0 [ 58.890709][ T3673] CPU: 0 PID: 3673 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.901403][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.911460][ T3673] Call Trace: [ 58.914912][ T3673] [ 58.917852][ T3673] dump_stack_lvl+0xcd/0x134 [ 58.922455][ T3673] should_fail.cold+0x5/0xa [ 58.927058][ T3673] should_failslab+0x5/0x10 [ 58.931566][ T3673] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.936855][ T3673] ? ref_tracker_alloc+0x14c/0x550 [ 58.942066][ T3673] ref_tracker_alloc+0x14c/0x550 [ 58.947192][ T3673] ? ref_tracker_free+0x6b0/0x6b0 [ 58.952405][ T3673] ? lock_release+0x720/0x720 [ 58.957080][ T3673] ? do_raw_spin_lock+0x120/0x2a0 [ 58.962101][ T3673] ? rwlock_bug.part.0+0x90/0x90 [ 58.967032][ T3673] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.972664][ T3673] linkwatch_fire_event+0x202/0x260 [ 58.977864][ T3673] netif_carrier_off+0x96/0xb0 [ 58.983130][ T3673] __tun_detach+0xfe7/0x13e0 [ 58.987729][ T3673] tun_chr_close+0xc4/0x180 [ 58.992223][ T3673] __fput+0x277/0x9d0 [ 58.996195][ T3673] ? __tun_detach+0x13e0/0x13e0 [ 59.001045][ T3673] task_work_run+0xdd/0x1a0 [ 59.005547][ T3673] ptrace_notify+0x114/0x140 [ 59.010132][ T3673] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 59.016370][ T3673] syscall_exit_to_user_mode+0x9/0x60 [ 59.021740][ T3673] do_syscall_64+0x42/0xb0 [ 59.026327][ T3673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.032215][ T3673] RIP: 0033:0x7fc6cd2767a3 [ 59.036619][ T3673] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 59.056216][ T3673] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 59.064621][ T3673] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3673] close(3) = 0 [pid 3673] close(4) = 0 [pid 3673] close(5) = -1 EBADF (Bad file descriptor) [pid 3673] close(6) = -1 EBADF (Bad file descriptor) [ 59.072581][ T3673] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.080542][ T3673] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.088504][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.096464][ T3673] R13: 00000000000f4240 R14: 000000000000e4b9 R15: 00007ffdc49a5924 [ 59.104439][ T3673] [pid 3673] close(7) = -1 EBADF (Bad file descriptor) [pid 3673] close(8) = -1 EBADF (Bad file descriptor) [pid 3673] close(9) = -1 EBADF (Bad file descriptor) [pid 3673] close(10) = -1 EBADF (Bad file descriptor) [pid 3673] close(11) = -1 EBADF (Bad file descriptor) [pid 3673] close(12) = -1 EBADF (Bad file descriptor) [pid 3673] close(13) = -1 EBADF (Bad file descriptor) [pid 3673] close(14) = -1 EBADF (Bad file descriptor) [pid 3673] close(15) = -1 EBADF (Bad file descriptor) [pid 3673] close(16) = -1 EBADF (Bad file descriptor) [pid 3673] close(17) = -1 EBADF (Bad file descriptor) [pid 3673] close(18) = -1 EBADF (Bad file descriptor) [pid 3673] close(19) = -1 EBADF (Bad file descriptor) [pid 3673] close(20) = -1 EBADF (Bad file descriptor) [pid 3673] close(21) = -1 EBADF (Bad file descriptor) [pid 3673] close(22) = -1 EBADF (Bad file descriptor) [pid 3673] close(23) = -1 EBADF (Bad file descriptor) [pid 3673] close(24) = -1 EBADF (Bad file descriptor) [pid 3673] close(25) = -1 EBADF (Bad file descriptor) [pid 3673] close(26) = -1 EBADF (Bad file descriptor) [pid 3673] close(27) = -1 EBADF (Bad file descriptor) [pid 3673] close(28) = -1 EBADF (Bad file descriptor) [pid 3673] close(29) = -1 EBADF (Bad file descriptor) [pid 3673] exit_group(0) = ? [pid 3673] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 56 ./strace-static-x86_64: Process 3674 attached [pid 3674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3674] setpgid(0, 0) = 0 [pid 3674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3674] write(3, "1000", 4) = 4 [pid 3674] close(3) = 0 [pid 3674] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3674] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3674] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3674] write(4, "5", 1) = 1 [ 59.184395][ T3674] FAULT_INJECTION: forcing a failure. [ 59.184395][ T3674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.197686][ T3674] CPU: 0 PID: 3674 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.207836][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.218227][ T3674] Call Trace: [ 59.221518][ T3674] [ 59.224454][ T3674] dump_stack_lvl+0xcd/0x134 [ 59.229141][ T3674] should_fail.cold+0x5/0xa [ 59.233655][ T3674] prepare_alloc_pages+0x17b/0x570 [ 59.238775][ T3674] __alloc_pages+0x12f/0x500 [ 59.243377][ T3674] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 59.250171][ T3674] ? ___slab_alloc+0x47e/0xf20 [ 59.254959][ T3674] alloc_pages+0x1aa/0x310 [ 59.259382][ T3674] ? mark_held_locks+0x9f/0xe0 [ 59.264152][ T3674] allocate_slab+0x26c/0x3c0 [ 59.268752][ T3674] ___slab_alloc+0x8df/0xf20 [ 59.273348][ T3674] ? napi_skb_cache_get+0xeb/0x170 [ 59.278473][ T3674] ? mark_held_locks+0x9f/0xe0 [ 59.283260][ T3674] kmem_cache_alloc_bulk+0x21c/0x720 [ 59.288573][ T3674] napi_skb_cache_get+0xeb/0x170 [ 59.293514][ T3674] __alloc_skb+0x9b/0x340 [ 59.297845][ T3674] ? __lock_acquire+0xbca/0x56c0 [ 59.302784][ T3674] __napi_alloc_skb+0x70/0x310 [ 59.307549][ T3674] napi_get_frags+0x5e/0x140 [ 59.312144][ T3674] tun_get_user+0xa07/0x3b00 [ 59.316763][ T3674] ? tun_build_skb+0x1170/0x1170 [ 59.321715][ T3674] ? lock_downgrade+0x6e0/0x6e0 [ 59.326580][ T3674] ? find_held_lock+0x2d/0x110 [ 59.331358][ T3674] tun_chr_write_iter+0xdb/0x200 [ 59.336302][ T3674] do_iter_readv_writev+0x3d1/0x640 [ 59.341508][ T3674] ? new_sync_write+0x560/0x560 [ 59.346378][ T3674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.352648][ T3674] ? security_file_permission+0xab/0xd0 [ 59.358205][ T3674] do_iter_write+0x182/0x700 [ 59.362804][ T3674] ? import_iovec+0x10c/0x150 [ 59.367493][ T3674] vfs_writev+0x1aa/0x630 [ 59.371830][ T3674] ? vfs_iter_write+0xa0/0xa0 [ 59.376516][ T3674] ? do_raw_spin_lock+0x120/0x2a0 [ 59.381559][ T3674] ? rwlock_bug.part.0+0x90/0x90 [ 59.386509][ T3674] ? _raw_spin_lock_irq+0x41/0x50 [ 59.391544][ T3674] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 59.397795][ T3674] ? find_held_lock+0x2d/0x110 [ 59.402570][ T3674] ? ptrace_notify+0xfa/0x140 [ 59.407267][ T3674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.413891][ T3674] ? __fget_light+0x20f/0x270 [ 59.418577][ T3674] do_writev+0x133/0x2f0 [ 59.422824][ T3674] ? vfs_writev+0x630/0x630 [ 59.427332][ T3674] ? lockdep_hardirqs_on+0x79/0x100 [ 59.432562][ T3674] ? _raw_spin_unlock_irq+0x2a/0x40 [ 59.437783][ T3674] ? ptrace_notify+0xfa/0x140 [ 59.442476][ T3674] do_syscall_64+0x35/0xb0 [ 59.446906][ T3674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.452817][ T3674] RIP: 0033:0x7fc6cd2b4c39 [ 59.457229][ T3674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.476918][ T3674] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3674] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.485336][ T3674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 59.493406][ T3674] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.501375][ T3674] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.509345][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.517400][ T3674] R13: 00000000000f4240 R14: 000000000000e5e2 R15: 00007ffdc49a5924 [ 59.525638][ T3674] [pid 3674] close(3) = 0 [pid 3674] close(4) = 0 [pid 3674] close(5) = -1 EBADF (Bad file descriptor) [pid 3674] close(6) = -1 EBADF (Bad file descriptor) [pid 3674] close(7) = -1 EBADF (Bad file descriptor) [pid 3674] close(8) = -1 EBADF (Bad file descriptor) [pid 3674] close(9) = -1 EBADF (Bad file descriptor) [pid 3674] close(10) = -1 EBADF (Bad file descriptor) [pid 3674] close(11) = -1 EBADF (Bad file descriptor) [pid 3674] close(12) = -1 EBADF (Bad file descriptor) [pid 3674] close(13) = -1 EBADF (Bad file descriptor) [pid 3674] close(14) = -1 EBADF (Bad file descriptor) [pid 3674] close(15) = -1 EBADF (Bad file descriptor) [pid 3674] close(16) = -1 EBADF (Bad file descriptor) [pid 3674] close(17) = -1 EBADF (Bad file descriptor) [pid 3674] close(18) = -1 EBADF (Bad file descriptor) [pid 3674] close(19) = -1 EBADF (Bad file descriptor) [pid 3674] close(20) = -1 EBADF (Bad file descriptor) [pid 3674] close(21) = -1 EBADF (Bad file descriptor) [pid 3674] close(22) = -1 EBADF (Bad file descriptor) [pid 3674] close(23) = -1 EBADF (Bad file descriptor) [pid 3674] close(24) = -1 EBADF (Bad file descriptor) [pid 3674] close(25) = -1 EBADF (Bad file descriptor) [pid 3674] close(26) = -1 EBADF (Bad file descriptor) [pid 3674] close(27) = -1 EBADF (Bad file descriptor) [pid 3674] close(28) = -1 EBADF (Bad file descriptor) [pid 3674] close(29) = -1 EBADF (Bad file descriptor) [pid 3674] exit_group(0) = ? [pid 3674] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 57 ./strace-static-x86_64: Process 3675 attached [pid 3675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3675] setpgid(0, 0) = 0 [pid 3675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3675] write(3, "1000", 4) = 4 [pid 3675] close(3) = 0 [pid 3675] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3675] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3675] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3675] write(4, "5", 1) = 1 [pid 3675] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.591755][ T3675] FAULT_INJECTION: forcing a failure. [ 59.591755][ T3675] name failslab, interval 1, probability 0, space 0, times 0 [ 59.604574][ T3675] CPU: 0 PID: 3675 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.615833][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.625961][ T3675] Call Trace: [ 59.629225][ T3675] [ 59.632138][ T3675] dump_stack_lvl+0xcd/0x134 [ 59.636737][ T3675] should_fail.cold+0x5/0xa [ 59.641229][ T3675] should_failslab+0x5/0x10 [ 59.645719][ T3675] kmem_cache_alloc_trace+0x60/0x3f0 [ 59.651022][ T3675] ? ref_tracker_alloc+0x14c/0x550 [ 59.656136][ T3675] ref_tracker_alloc+0x14c/0x550 [ 59.661068][ T3675] ? ref_tracker_free+0x6b0/0x6b0 [ 59.666081][ T3675] ? lock_release+0x720/0x720 [ 59.670752][ T3675] ? do_raw_spin_lock+0x120/0x2a0 [ 59.675855][ T3675] ? rwlock_bug.part.0+0x90/0x90 [ 59.680783][ T3675] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 59.686150][ T3675] linkwatch_fire_event+0x202/0x260 [ 59.691350][ T3675] netif_carrier_off+0x96/0xb0 [ 59.696105][ T3675] __tun_detach+0xfe7/0x13e0 [ 59.700782][ T3675] tun_chr_close+0xc4/0x180 [ 59.705284][ T3675] __fput+0x277/0x9d0 [ 59.709263][ T3675] ? __tun_detach+0x13e0/0x13e0 [ 59.714203][ T3675] task_work_run+0xdd/0x1a0 [ 59.718705][ T3675] ptrace_notify+0x114/0x140 [ 59.723287][ T3675] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 59.729522][ T3675] syscall_exit_to_user_mode+0x9/0x60 [ 59.734886][ T3675] do_syscall_64+0x42/0xb0 [ 59.739298][ T3675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.745189][ T3675] RIP: 0033:0x7fc6cd2767a3 [ 59.749599][ T3675] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 59.769292][ T3675] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 59.777721][ T3675] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 59.785687][ T3675] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.793645][ T3675] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.801605][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.809571][ T3675] R13: 00000000000f4240 R14: 000000000000e717 R15: 00007ffdc49a5924 [ 59.817546][ T3675] [pid 3675] close(3) = 0 [pid 3675] close(4) = 0 [pid 3675] close(5) = -1 EBADF (Bad file descriptor) [pid 3675] close(6) = -1 EBADF (Bad file descriptor) [pid 3675] close(7) = -1 EBADF (Bad file descriptor) [pid 3675] close(8) = -1 EBADF (Bad file descriptor) [pid 3675] close(9) = -1 EBADF (Bad file descriptor) [pid 3675] close(10) = -1 EBADF (Bad file descriptor) [pid 3675] close(11) = -1 EBADF (Bad file descriptor) [pid 3675] close(12) = -1 EBADF (Bad file descriptor) [pid 3675] close(13) = -1 EBADF (Bad file descriptor) [pid 3675] close(14) = -1 EBADF (Bad file descriptor) [pid 3675] close(15) = -1 EBADF (Bad file descriptor) [pid 3675] close(16) = -1 EBADF (Bad file descriptor) [pid 3675] close(17) = -1 EBADF (Bad file descriptor) [pid 3675] close(18) = -1 EBADF (Bad file descriptor) [pid 3675] close(19) = -1 EBADF (Bad file descriptor) [pid 3675] close(20) = -1 EBADF (Bad file descriptor) [pid 3675] close(21) = -1 EBADF (Bad file descriptor) [pid 3675] close(22) = -1 EBADF (Bad file descriptor) [pid 3675] close(23) = -1 EBADF (Bad file descriptor) [pid 3675] close(24) = -1 EBADF (Bad file descriptor) [pid 3675] close(25) = -1 EBADF (Bad file descriptor) [pid 3675] close(26) = -1 EBADF (Bad file descriptor) [pid 3675] close(27) = -1 EBADF (Bad file descriptor) [pid 3675] close(28) = -1 EBADF (Bad file descriptor) [pid 3675] close(29) = -1 EBADF (Bad file descriptor) [pid 3675] exit_group(0) = ? [pid 3675] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 58 ./strace-static-x86_64: Process 3676 attached [pid 3676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3676] setpgid(0, 0) = 0 [pid 3676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3676] write(3, "1000", 4) = 4 [pid 3676] close(3) = 0 [pid 3676] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3676] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3676] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3676] write(4, "5", 1) = 1 [pid 3676] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.904324][ T3676] FAULT_INJECTION: forcing a failure. [ 59.904324][ T3676] name failslab, interval 1, probability 0, space 0, times 0 [ 59.916955][ T3676] CPU: 0 PID: 3676 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.927763][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.937806][ T3676] Call Trace: [ 59.941069][ T3676] [ 59.943994][ T3676] dump_stack_lvl+0xcd/0x134 [ 59.948583][ T3676] should_fail.cold+0x5/0xa [ 59.953081][ T3676] should_failslab+0x5/0x10 [ 59.957572][ T3676] kmem_cache_alloc_trace+0x60/0x3f0 [ 59.962859][ T3676] ? ref_tracker_alloc+0x14c/0x550 [ 59.968658][ T3676] ref_tracker_alloc+0x14c/0x550 [ 59.973582][ T3676] ? ref_tracker_free+0x6b0/0x6b0 [ 59.978588][ T3676] ? lock_release+0x720/0x720 [ 59.983342][ T3676] ? do_raw_spin_lock+0x120/0x2a0 [ 59.988351][ T3676] ? rwlock_bug.part.0+0x90/0x90 [ 59.993274][ T3676] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 59.998639][ T3676] linkwatch_fire_event+0x202/0x260 [ 60.003827][ T3676] netif_carrier_off+0x96/0xb0 [ 60.008582][ T3676] __tun_detach+0xfe7/0x13e0 [ 60.013185][ T3676] tun_chr_close+0xc4/0x180 [ 60.017845][ T3676] __fput+0x277/0x9d0 [ 60.021810][ T3676] ? __tun_detach+0x13e0/0x13e0 [ 60.026646][ T3676] task_work_run+0xdd/0x1a0 [ 60.031143][ T3676] ptrace_notify+0x114/0x140 [ 60.035716][ T3676] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.041941][ T3676] syscall_exit_to_user_mode+0x9/0x60 [ 60.047299][ T3676] do_syscall_64+0x42/0xb0 [ 60.051704][ T3676] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.057584][ T3676] RIP: 0033:0x7fc6cd2767a3 [ 60.062069][ T3676] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.081661][ T3676] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.090064][ T3676] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3676] close(3) = 0 [pid 3676] close(4) = 0 [pid 3676] close(5) = -1 EBADF (Bad file descriptor) [pid 3676] close(6) = -1 EBADF (Bad file descriptor) [pid 3676] close(7) = -1 EBADF (Bad file descriptor) [pid 3676] close(8) = -1 EBADF (Bad file descriptor) [pid 3676] close(9) = -1 EBADF (Bad file descriptor) [pid 3676] close(10) = -1 EBADF (Bad file descriptor) [pid 3676] close(11) = -1 EBADF (Bad file descriptor) [pid 3676] close(12) = -1 EBADF (Bad file descriptor) [pid 3676] close(13) = -1 EBADF (Bad file descriptor) [pid 3676] close(14) = -1 EBADF (Bad file descriptor) [pid 3676] close(15) = -1 EBADF (Bad file descriptor) [pid 3676] close(16) = -1 EBADF (Bad file descriptor) [pid 3676] close(17) = -1 EBADF (Bad file descriptor) [pid 3676] close(18) = -1 EBADF (Bad file descriptor) [pid 3676] close(19) = -1 EBADF (Bad file descriptor) [pid 3676] close(20) = -1 EBADF (Bad file descriptor) [pid 3676] close(21) = -1 EBADF (Bad file descriptor) [pid 3676] close(22) = -1 EBADF (Bad file descriptor) [pid 3676] close(23) = -1 EBADF (Bad file descriptor) [pid 3676] close(24) = -1 EBADF (Bad file descriptor) [pid 3676] close(25) = -1 EBADF (Bad file descriptor) [pid 3676] close(26) = -1 EBADF (Bad file descriptor) [pid 3676] close(27) = -1 EBADF (Bad file descriptor) [pid 3676] close(28) = -1 EBADF (Bad file descriptor) [pid 3676] close(29) = -1 EBADF (Bad file descriptor) [pid 3676] exit_group(0) = ? [pid 3676] +++ exited with 0 +++ [ 60.098110][ T3676] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.106073][ T3676] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.114062][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.122033][ T3676] R13: 00000000000f4240 R14: 000000000000e8ab R15: 00007ffdc49a5924 [ 60.130010][ T3676] [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3677 attached , child_tidptr=0x5555570bd5d0) = 59 [pid 3677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3677] setpgid(0, 0) = 0 [pid 3677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3677] write(3, "1000", 4) = 4 [pid 3677] close(3) = 0 [pid 3677] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3677] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3677] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3677] write(4, "5", 1) = 1 [pid 3677] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.201903][ T3677] FAULT_INJECTION: forcing a failure. [ 60.201903][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 60.214623][ T3677] CPU: 0 PID: 3677 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.224770][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.235029][ T3677] Call Trace: [ 60.238317][ T3677] [ 60.241490][ T3677] dump_stack_lvl+0xcd/0x134 [ 60.246083][ T3677] should_fail.cold+0x5/0xa [ 60.250624][ T3677] should_failslab+0x5/0x10 [ 60.255123][ T3677] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.260412][ T3677] ? ref_tracker_alloc+0x14c/0x550 [ 60.265537][ T3677] ref_tracker_alloc+0x14c/0x550 [ 60.270496][ T3677] ? ref_tracker_free+0x6b0/0x6b0 [ 60.275525][ T3677] ? lock_release+0x720/0x720 [ 60.280229][ T3677] ? do_raw_spin_lock+0x120/0x2a0 [ 60.285260][ T3677] ? rwlock_bug.part.0+0x90/0x90 [ 60.290223][ T3677] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.295606][ T3677] linkwatch_fire_event+0x202/0x260 [ 60.300821][ T3677] netif_carrier_off+0x96/0xb0 [ 60.305590][ T3677] __tun_detach+0xfe7/0x13e0 [ 60.310192][ T3677] tun_chr_close+0xc4/0x180 [ 60.314693][ T3677] __fput+0x277/0x9d0 [ 60.318670][ T3677] ? __tun_detach+0x13e0/0x13e0 [ 60.323517][ T3677] task_work_run+0xdd/0x1a0 [ 60.328243][ T3677] ptrace_notify+0x114/0x140 [ 60.332872][ T3677] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.339124][ T3677] syscall_exit_to_user_mode+0x9/0x60 [ 60.344502][ T3677] do_syscall_64+0x42/0xb0 [ 60.348935][ T3677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.354832][ T3677] RIP: 0033:0x7fc6cd2767a3 [ 60.359244][ T3677] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.378851][ T3677] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.387261][ T3677] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3677] close(3) = 0 [pid 3677] close(4) = 0 [pid 3677] close(5) = -1 EBADF (Bad file descriptor) [pid 3677] close(6) = -1 EBADF (Bad file descriptor) [pid 3677] close(7) = -1 EBADF (Bad file descriptor) [pid 3677] close(8) = -1 EBADF (Bad file descriptor) [pid 3677] close(9) = -1 EBADF (Bad file descriptor) [pid 3677] close(10) = -1 EBADF (Bad file descriptor) [pid 3677] close(11) = -1 EBADF (Bad file descriptor) [pid 3677] close(12) = -1 EBADF (Bad file descriptor) [pid 3677] close(13) = -1 EBADF (Bad file descriptor) [pid 3677] close(14) = -1 EBADF (Bad file descriptor) [pid 3677] close(15) = -1 EBADF (Bad file descriptor) [pid 3677] close(16) = -1 EBADF (Bad file descriptor) [ 60.395230][ T3677] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.403201][ T3677] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.411174][ T3677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.419160][ T3677] R13: 00000000000f4240 R14: 000000000000e9df R15: 00007ffdc49a5924 [ 60.427153][ T3677] [pid 3677] close(17) = -1 EBADF (Bad file descriptor) [pid 3677] close(18) = -1 EBADF (Bad file descriptor) [pid 3677] close(19) = -1 EBADF (Bad file descriptor) [pid 3677] close(20) = -1 EBADF (Bad file descriptor) [pid 3677] close(21) = -1 EBADF (Bad file descriptor) [pid 3677] close(22) = -1 EBADF (Bad file descriptor) [pid 3677] close(23) = -1 EBADF (Bad file descriptor) [pid 3677] close(24) = -1 EBADF (Bad file descriptor) [pid 3677] close(25) = -1 EBADF (Bad file descriptor) [pid 3677] close(26) = -1 EBADF (Bad file descriptor) [pid 3677] close(27) = -1 EBADF (Bad file descriptor) [pid 3677] close(28) = -1 EBADF (Bad file descriptor) [pid 3677] close(29) = -1 EBADF (Bad file descriptor) [pid 3677] exit_group(0) = ? [pid 3677] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 60 ./strace-static-x86_64: Process 3678 attached [pid 3678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3678] setpgid(0, 0) = 0 [pid 3678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3678] write(3, "1000", 4) = 4 [pid 3678] close(3) = 0 [pid 3678] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3678] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3678] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3678] write(4, "5", 1) = 1 [pid 3678] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.508280][ T3678] FAULT_INJECTION: forcing a failure. [ 60.508280][ T3678] name failslab, interval 1, probability 0, space 0, times 0 [ 60.523199][ T3678] CPU: 0 PID: 3678 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.533551][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.543711][ T3678] Call Trace: [ 60.546989][ T3678] [ 60.549925][ T3678] dump_stack_lvl+0xcd/0x134 [ 60.554530][ T3678] should_fail.cold+0x5/0xa [ 60.559041][ T3678] should_failslab+0x5/0x10 [ 60.563541][ T3678] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.568820][ T3678] ? ref_tracker_alloc+0x14c/0x550 [ 60.573944][ T3678] ref_tracker_alloc+0x14c/0x550 [ 60.578893][ T3678] ? ref_tracker_free+0x6b0/0x6b0 [ 60.583928][ T3678] ? lock_release+0x720/0x720 [ 60.588619][ T3678] ? do_raw_spin_lock+0x120/0x2a0 [ 60.593673][ T3678] ? rwlock_bug.part.0+0x90/0x90 [ 60.598657][ T3678] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.604039][ T3678] linkwatch_fire_event+0x202/0x260 [ 60.609267][ T3678] netif_carrier_off+0x96/0xb0 [ 60.614058][ T3678] __tun_detach+0xfe7/0x13e0 [ 60.618662][ T3678] tun_chr_close+0xc4/0x180 [ 60.623172][ T3678] __fput+0x277/0x9d0 [ 60.627160][ T3678] ? __tun_detach+0x13e0/0x13e0 [ 60.632021][ T3678] task_work_run+0xdd/0x1a0 [ 60.636541][ T3678] ptrace_notify+0x114/0x140 [ 60.641160][ T3678] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.647415][ T3678] syscall_exit_to_user_mode+0x9/0x60 [ 60.652795][ T3678] do_syscall_64+0x42/0xb0 [ 60.657405][ T3678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.663325][ T3678] RIP: 0033:0x7fc6cd2767a3 [ 60.667739][ T3678] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.687531][ T3678] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.696493][ T3678] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3678] close(3) = 0 [pid 3678] close(4) = 0 [pid 3678] close(5) = -1 EBADF (Bad file descriptor) [pid 3678] close(6) = -1 EBADF (Bad file descriptor) [pid 3678] close(7) = -1 EBADF (Bad file descriptor) [pid 3678] close(8) = -1 EBADF (Bad file descriptor) [pid 3678] close(9) = -1 EBADF (Bad file descriptor) [pid 3678] close(10) = -1 EBADF (Bad file descriptor) [pid 3678] close(11) = -1 EBADF (Bad file descriptor) [pid 3678] close(12) = -1 EBADF (Bad file descriptor) [pid 3678] close(13) = -1 EBADF (Bad file descriptor) [pid 3678] close(14) = -1 EBADF (Bad file descriptor) [pid 3678] close(15) = -1 EBADF (Bad file descriptor) [pid 3678] close(16) = -1 EBADF (Bad file descriptor) [pid 3678] close(17) = -1 EBADF (Bad file descriptor) [pid 3678] close(18) = -1 EBADF (Bad file descriptor) [pid 3678] close(19) = -1 EBADF (Bad file descriptor) [pid 3678] close(20) = -1 EBADF (Bad file descriptor) [pid 3678] close(21) = -1 EBADF (Bad file descriptor) [pid 3678] close(22) = -1 EBADF (Bad file descriptor) [pid 3678] close(23) = -1 EBADF (Bad file descriptor) [pid 3678] close(24) = -1 EBADF (Bad file descriptor) [pid 3678] close(25) = -1 EBADF (Bad file descriptor) [pid 3678] close(26) = -1 EBADF (Bad file descriptor) [pid 3678] close(27) = -1 EBADF (Bad file descriptor) [pid 3678] close(28) = -1 EBADF (Bad file descriptor) [ 60.704645][ T3678] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.712613][ T3678] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.720667][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.728633][ T3678] R13: 00000000000f4240 R14: 000000000000eb0d R15: 00007ffdc49a5924 [ 60.736700][ T3678] [pid 3678] close(29) = -1 EBADF (Bad file descriptor) [pid 3678] exit_group(0) = ? [pid 3678] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=25} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 61 ./strace-static-x86_64: Process 3679 attached [pid 3679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3679] setpgid(0, 0) = 0 [pid 3679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3679] write(3, "1000", 4) = 4 [pid 3679] close(3) = 0 [pid 3679] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3679] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3679] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3679] write(4, "5", 1) = 1 [pid 3679] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.798919][ T3679] FAULT_INJECTION: forcing a failure. [ 60.798919][ T3679] name failslab, interval 1, probability 0, space 0, times 0 [ 60.812108][ T3679] CPU: 0 PID: 3679 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.822558][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.832606][ T3679] Call Trace: [ 60.835984][ T3679] [ 60.838902][ T3679] dump_stack_lvl+0xcd/0x134 [ 60.843504][ T3679] should_fail.cold+0x5/0xa [ 60.848000][ T3679] should_failslab+0x5/0x10 [ 60.852500][ T3679] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.857775][ T3679] ? ref_tracker_alloc+0x14c/0x550 [ 60.862976][ T3679] ref_tracker_alloc+0x14c/0x550 [ 60.867901][ T3679] ? ref_tracker_free+0x6b0/0x6b0 [ 60.872998][ T3679] ? lock_release+0x720/0x720 [ 60.877666][ T3679] ? do_raw_spin_lock+0x120/0x2a0 [ 60.882684][ T3679] ? rwlock_bug.part.0+0x90/0x90 [ 60.887611][ T3679] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.892995][ T3679] linkwatch_fire_event+0x202/0x260 [ 60.898186][ T3679] netif_carrier_off+0x96/0xb0 [ 60.903024][ T3679] __tun_detach+0xfe7/0x13e0 [ 60.907614][ T3679] tun_chr_close+0xc4/0x180 [ 60.912112][ T3679] __fput+0x277/0x9d0 [ 60.916079][ T3679] ? __tun_detach+0x13e0/0x13e0 [ 60.920921][ T3679] task_work_run+0xdd/0x1a0 [ 60.925439][ T3679] ptrace_notify+0x114/0x140 [ 60.930280][ T3679] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.936510][ T3679] syscall_exit_to_user_mode+0x9/0x60 [ 60.941867][ T3679] do_syscall_64+0x42/0xb0 [ 60.946274][ T3679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.952155][ T3679] RIP: 0033:0x7fc6cd2767a3 [ 60.956556][ T3679] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.976429][ T3679] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.984833][ T3679] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3679] close(3) = 0 [pid 3679] close(4) = 0 [pid 3679] close(5) = -1 EBADF (Bad file descriptor) [pid 3679] close(6) = -1 EBADF (Bad file descriptor) [pid 3679] close(7) = -1 EBADF (Bad file descriptor) [pid 3679] close(8) = -1 EBADF (Bad file descriptor) [pid 3679] close(9) = -1 EBADF (Bad file descriptor) [pid 3679] close(10) = -1 EBADF (Bad file descriptor) [pid 3679] close(11) = -1 EBADF (Bad file descriptor) [pid 3679] close(12) = -1 EBADF (Bad file descriptor) [pid 3679] close(13) = -1 EBADF (Bad file descriptor) [pid 3679] close(14) = -1 EBADF (Bad file descriptor) [pid 3679] close(15) = -1 EBADF (Bad file descriptor) [pid 3679] close(16) = -1 EBADF (Bad file descriptor) [pid 3679] close(17) = -1 EBADF (Bad file descriptor) [pid 3679] close(18) = -1 EBADF (Bad file descriptor) [pid 3679] close(19) = -1 EBADF (Bad file descriptor) [pid 3679] close(20) = -1 EBADF (Bad file descriptor) [pid 3679] close(21) = -1 EBADF (Bad file descriptor) [pid 3679] close(22) = -1 EBADF (Bad file descriptor) [pid 3679] close(23) = -1 EBADF (Bad file descriptor) [pid 3679] close(24) = -1 EBADF (Bad file descriptor) [pid 3679] close(25) = -1 EBADF (Bad file descriptor) [pid 3679] close(26) = -1 EBADF (Bad file descriptor) [ 60.992790][ T3679] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.000962][ T3679] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.009013][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.016978][ T3679] R13: 00000000000f4240 R14: 000000000000ec35 R15: 00007ffdc49a5924 [ 61.025212][ T3679] [pid 3679] close(27) = -1 EBADF (Bad file descriptor) [pid 3679] close(28) = -1 EBADF (Bad file descriptor) [pid 3679] close(29) = -1 EBADF (Bad file descriptor) [pid 3679] exit_group(0) = ? [pid 3679] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 62 ./strace-static-x86_64: Process 3680 attached [pid 3680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3680] setpgid(0, 0) = 0 [pid 3680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3680] write(3, "1000", 4) = 4 [pid 3680] close(3) = 0 [pid 3680] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3680] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3680] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3680] write(4, "5", 1) = 1 [ 61.094148][ T3680] FAULT_INJECTION: forcing a failure. [ 61.094148][ T3680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.107424][ T3680] CPU: 1 PID: 3680 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.117673][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.127727][ T3680] Call Trace: [ 61.130996][ T3680] [ 61.133914][ T3680] dump_stack_lvl+0xcd/0x134 [ 61.138511][ T3680] should_fail.cold+0x5/0xa [ 61.143260][ T3680] prepare_alloc_pages+0x17b/0x570 [ 61.148610][ T3680] __alloc_pages+0x12f/0x500 [ 61.153336][ T3680] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 61.160116][ T3680] ? ___slab_alloc+0x47e/0xf20 [ 61.164890][ T3680] alloc_pages+0x1aa/0x310 [ 61.169481][ T3680] ? mark_held_locks+0x9f/0xe0 [ 61.174256][ T3680] allocate_slab+0x26c/0x3c0 [ 61.178859][ T3680] ___slab_alloc+0x8df/0xf20 [ 61.183458][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.188426][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.193380][ T3680] __slab_alloc.constprop.0+0x4d/0xa0 [ 61.198758][ T3680] __kmalloc_node_track_caller+0x2cb/0x360 [ 61.204748][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.209726][ T3680] __alloc_skb+0xde/0x340 [ 61.214068][ T3680] ? __lock_acquire+0xbca/0x56c0 [ 61.219033][ T3680] __napi_alloc_skb+0x70/0x310 [ 61.223809][ T3680] napi_get_frags+0x5e/0x140 [ 61.228413][ T3680] tun_get_user+0xa07/0x3b00 [ 61.233291][ T3680] ? tun_build_skb+0x1170/0x1170 [ 61.238237][ T3680] ? lock_downgrade+0x6e0/0x6e0 [ 61.243239][ T3680] ? find_held_lock+0x2d/0x110 [ 61.248102][ T3680] tun_chr_write_iter+0xdb/0x200 [ 61.253041][ T3680] do_iter_readv_writev+0x3d1/0x640 [ 61.258249][ T3680] ? new_sync_write+0x560/0x560 [ 61.263106][ T3680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 61.269691][ T3680] ? security_file_permission+0xab/0xd0 [ 61.275252][ T3680] do_iter_write+0x182/0x700 [ 61.279870][ T3680] ? import_iovec+0x10c/0x150 [ 61.284549][ T3680] vfs_writev+0x1aa/0x630 [ 61.288887][ T3680] ? vfs_iter_write+0xa0/0xa0 [ 61.293567][ T3680] ? do_raw_spin_lock+0x120/0x2a0 [ 61.298594][ T3680] ? rwlock_bug.part.0+0x90/0x90 [ 61.303564][ T3680] ? _raw_spin_lock_irq+0x41/0x50 [ 61.308600][ T3680] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 61.314861][ T3680] ? find_held_lock+0x2d/0x110 [ 61.319630][ T3680] ? ptrace_notify+0xfa/0x140 [ 61.324336][ T3680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 61.330577][ T3680] ? __fget_light+0x20f/0x270 [ 61.335258][ T3680] do_writev+0x133/0x2f0 [ 61.339501][ T3680] ? vfs_writev+0x630/0x630 [ 61.344090][ T3680] ? lockdep_hardirqs_on+0x79/0x100 [ 61.349297][ T3680] ? _raw_spin_unlock_irq+0x2a/0x40 [ 61.354496][ T3680] ? ptrace_notify+0xfa/0x140 [ 61.359179][ T3680] do_syscall_64+0x35/0xb0 [ 61.363601][ T3680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.369519][ T3680] RIP: 0033:0x7fc6cd2b4c39 [ 61.373931][ T3680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3680] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.393773][ T3680] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.402181][ T3680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 61.410150][ T3680] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.418111][ T3680] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.426076][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.434041][ T3680] R13: 00000000000f4240 R14: 000000000000ed63 R15: 00007ffdc49a5924 [ 61.442016][ T3680] [pid 3680] close(3) = 0 [pid 3680] close(4) = 0 [pid 3680] close(5) = -1 EBADF (Bad file descriptor) [pid 3680] close(6) = -1 EBADF (Bad file descriptor) [pid 3680] close(7) = -1 EBADF (Bad file descriptor) [pid 3680] close(8) = -1 EBADF (Bad file descriptor) [pid 3680] close(9) = -1 EBADF (Bad file descriptor) [pid 3680] close(10) = -1 EBADF (Bad file descriptor) [pid 3680] close(11) = -1 EBADF (Bad file descriptor) [pid 3680] close(12) = -1 EBADF (Bad file descriptor) [pid 3680] close(13) = -1 EBADF (Bad file descriptor) [pid 3680] close(14) = -1 EBADF (Bad file descriptor) [pid 3680] close(15) = -1 EBADF (Bad file descriptor) [pid 3680] close(16) = -1 EBADF (Bad file descriptor) [pid 3680] close(17) = -1 EBADF (Bad file descriptor) [pid 3680] close(18) = -1 EBADF (Bad file descriptor) [pid 3680] close(19) = -1 EBADF (Bad file descriptor) [pid 3680] close(20) = -1 EBADF (Bad file descriptor) [pid 3680] close(21) = -1 EBADF (Bad file descriptor) [pid 3680] close(22) = -1 EBADF (Bad file descriptor) [pid 3680] close(23) = -1 EBADF (Bad file descriptor) [pid 3680] close(24) = -1 EBADF (Bad file descriptor) [pid 3680] close(25) = -1 EBADF (Bad file descriptor) [pid 3680] close(26) = -1 EBADF (Bad file descriptor) [pid 3680] close(27) = -1 EBADF (Bad file descriptor) [pid 3680] close(28) = -1 EBADF (Bad file descriptor) [pid 3680] close(29) = -1 EBADF (Bad file descriptor) [pid 3680] exit_group(0) = ? [pid 3680] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 63 ./strace-static-x86_64: Process 3681 attached [pid 3681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3681] setpgid(0, 0) = 0 [pid 3681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3681] write(3, "1000", 4) = 4 [pid 3681] close(3) = 0 [pid 3681] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3681] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3681] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3681] write(4, "5", 1) = 1 [pid 3681] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.514361][ T3681] FAULT_INJECTION: forcing a failure. [ 61.514361][ T3681] name failslab, interval 1, probability 0, space 0, times 0 [ 61.526973][ T3681] CPU: 1 PID: 3681 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.537104][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.547370][ T3681] Call Trace: [ 61.550812][ T3681] [ 61.553719][ T3681] dump_stack_lvl+0xcd/0x134 [ 61.558298][ T3681] should_fail.cold+0x5/0xa [ 61.562793][ T3681] should_failslab+0x5/0x10 [ 61.567280][ T3681] kmem_cache_alloc_trace+0x60/0x3f0 [ 61.572552][ T3681] ? ref_tracker_alloc+0x14c/0x550 [ 61.577651][ T3681] ref_tracker_alloc+0x14c/0x550 [ 61.582576][ T3681] ? ref_tracker_free+0x6b0/0x6b0 [ 61.587583][ T3681] ? lock_release+0x720/0x720 [ 61.592249][ T3681] ? do_raw_spin_lock+0x120/0x2a0 [ 61.597259][ T3681] ? rwlock_bug.part.0+0x90/0x90 [ 61.602184][ T3681] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 61.607547][ T3681] linkwatch_fire_event+0x202/0x260 [ 61.612738][ T3681] netif_carrier_off+0x96/0xb0 [ 61.617487][ T3681] __tun_detach+0xfe7/0x13e0 [ 61.622070][ T3681] tun_chr_close+0xc4/0x180 [ 61.626559][ T3681] __fput+0x277/0x9d0 [ 61.630528][ T3681] ? __tun_detach+0x13e0/0x13e0 [ 61.635366][ T3681] task_work_run+0xdd/0x1a0 [ 61.639860][ T3681] ptrace_notify+0x114/0x140 [ 61.644436][ T3681] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 61.650668][ T3681] syscall_exit_to_user_mode+0x9/0x60 [ 61.656027][ T3681] do_syscall_64+0x42/0xb0 [ 61.660445][ T3681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.666324][ T3681] RIP: 0033:0x7fc6cd2767a3 [ 61.670729][ T3681] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 61.690322][ T3681] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 61.698732][ T3681] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 61.706686][ T3681] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.714641][ T3681] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.722591][ T3681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.730544][ T3681] R13: 00000000000f4240 R14: 000000000000ee88 R15: 00007ffdc49a5924 [ 61.738691][ T3681] [pid 3681] close(3) = 0 [pid 3681] close(4) = 0 [pid 3681] close(5) = -1 EBADF (Bad file descriptor) [pid 3681] close(6) = -1 EBADF (Bad file descriptor) [pid 3681] close(7) = -1 EBADF (Bad file descriptor) [pid 3681] close(8) = -1 EBADF (Bad file descriptor) [pid 3681] close(9) = -1 EBADF (Bad file descriptor) [pid 3681] close(10) = -1 EBADF (Bad file descriptor) [pid 3681] close(11) = -1 EBADF (Bad file descriptor) [pid 3681] close(12) = -1 EBADF (Bad file descriptor) [pid 3681] close(13) = -1 EBADF (Bad file descriptor) [pid 3681] close(14) = -1 EBADF (Bad file descriptor) [pid 3681] close(15) = -1 EBADF (Bad file descriptor) [pid 3681] close(16) = -1 EBADF (Bad file descriptor) [pid 3681] close(17) = -1 EBADF (Bad file descriptor) [pid 3681] close(18) = -1 EBADF (Bad file descriptor) [pid 3681] close(19) = -1 EBADF (Bad file descriptor) [pid 3681] close(20) = -1 EBADF (Bad file descriptor) [pid 3681] close(21) = -1 EBADF (Bad file descriptor) [pid 3681] close(22) = -1 EBADF (Bad file descriptor) [pid 3681] close(23) = -1 EBADF (Bad file descriptor) [pid 3681] close(24) = -1 EBADF (Bad file descriptor) [pid 3681] close(25) = -1 EBADF (Bad file descriptor) [pid 3681] close(26) = -1 EBADF (Bad file descriptor) [pid 3681] close(27) = -1 EBADF (Bad file descriptor) [pid 3681] close(28) = -1 EBADF (Bad file descriptor) [pid 3681] close(29) = -1 EBADF (Bad file descriptor) [pid 3681] exit_group(0) = ? [pid 3681] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3682 attached , child_tidptr=0x5555570bd5d0) = 64 [pid 3682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3682] setpgid(0, 0) = 0 [pid 3682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3682] write(3, "1000", 4) = 4 [pid 3682] close(3) = 0 [pid 3682] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3682] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3682] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3682] write(4, "5", 1) = 1 [pid 3682] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.826608][ T3682] FAULT_INJECTION: forcing a failure. [ 61.826608][ T3682] name failslab, interval 1, probability 0, space 0, times 0 [ 61.839443][ T3682] CPU: 0 PID: 3682 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.849572][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.859602][ T3682] Call Trace: [ 61.863122][ T3682] [ 61.866033][ T3682] dump_stack_lvl+0xcd/0x134 [ 61.870612][ T3682] should_fail.cold+0x5/0xa [ 61.875094][ T3682] should_failslab+0x5/0x10 [ 61.879592][ T3682] kmem_cache_alloc_trace+0x60/0x3f0 [ 61.884855][ T3682] ? ref_tracker_alloc+0x14c/0x550 [ 61.889960][ T3682] ref_tracker_alloc+0x14c/0x550 [ 61.894873][ T3682] ? ref_tracker_free+0x6b0/0x6b0 [ 61.899873][ T3682] ? lock_release+0x720/0x720 [ 61.904530][ T3682] ? do_raw_spin_lock+0x120/0x2a0 [ 61.909532][ T3682] ? rwlock_bug.part.0+0x90/0x90 [ 61.914448][ T3682] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 61.919801][ T3682] linkwatch_fire_event+0x202/0x260 [ 61.924981][ T3682] netif_carrier_off+0x96/0xb0 [ 61.929724][ T3682] __tun_detach+0xfe7/0x13e0 [ 61.934300][ T3682] tun_chr_close+0xc4/0x180 [ 61.938782][ T3682] __fput+0x277/0x9d0 [ 61.942761][ T3682] ? __tun_detach+0x13e0/0x13e0 [ 61.947595][ T3682] task_work_run+0xdd/0x1a0 [ 61.952085][ T3682] ptrace_notify+0x114/0x140 [ 61.956667][ T3682] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 61.962888][ T3682] syscall_exit_to_user_mode+0x9/0x60 [ 61.968238][ T3682] do_syscall_64+0x42/0xb0 [ 61.972637][ T3682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.978508][ T3682] RIP: 0033:0x7fc6cd2767a3 [ 61.982904][ T3682] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.002487][ T3682] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.010875][ T3682] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.018824][ T3682] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3682] close(3) = 0 [pid 3682] close(4) = 0 [pid 3682] close(5) = -1 EBADF (Bad file descriptor) [pid 3682] close(6) = -1 EBADF (Bad file descriptor) [pid 3682] close(7) = -1 EBADF (Bad file descriptor) [pid 3682] close(8) = -1 EBADF (Bad file descriptor) [pid 3682] close(9) = -1 EBADF (Bad file descriptor) [pid 3682] close(10) = -1 EBADF (Bad file descriptor) [pid 3682] close(11) = -1 EBADF (Bad file descriptor) [pid 3682] close(12) = -1 EBADF (Bad file descriptor) [pid 3682] close(13) = -1 EBADF (Bad file descriptor) [pid 3682] close(14) = -1 EBADF (Bad file descriptor) [pid 3682] close(15) = -1 EBADF (Bad file descriptor) [pid 3682] close(16) = -1 EBADF (Bad file descriptor) [pid 3682] close(17) = -1 EBADF (Bad file descriptor) [pid 3682] close(18) = -1 EBADF (Bad file descriptor) [pid 3682] close(19) = -1 EBADF (Bad file descriptor) [pid 3682] close(20) = -1 EBADF (Bad file descriptor) [pid 3682] close(21) = -1 EBADF (Bad file descriptor) [pid 3682] close(22) = -1 EBADF (Bad file descriptor) [pid 3682] close(23) = -1 EBADF (Bad file descriptor) [pid 3682] close(24) = -1 EBADF (Bad file descriptor) [pid 3682] close(25) = -1 EBADF (Bad file descriptor) [pid 3682] close(26) = -1 EBADF (Bad file descriptor) [pid 3682] close(27) = -1 EBADF (Bad file descriptor) [pid 3682] close(28) = -1 EBADF (Bad file descriptor) [pid 3682] close(29) = -1 EBADF (Bad file descriptor) [pid 3682] exit_group(0) = ? [pid 3682] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 65 ./strace-static-x86_64: Process 3683 attached [pid 3683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3683] setpgid(0, 0) = 0 [pid 3683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3683] write(3, "1000", 4) = 4 [pid 3683] close(3) = 0 [pid 3683] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3683] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3683] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 62.026773][ T3682] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.034725][ T3682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.042686][ T3682] R13: 00000000000f4240 R14: 000000000000f02c R15: 00007ffdc49a5924 [ 62.050655][ T3682] [pid 3683] write(4, "5", 1) = 1 [pid 3683] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.109550][ T3683] FAULT_INJECTION: forcing a failure. [ 62.109550][ T3683] name failslab, interval 1, probability 0, space 0, times 0 [ 62.122249][ T3683] CPU: 0 PID: 3683 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.132480][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.142544][ T3683] Call Trace: [ 62.145821][ T3683] [ 62.148733][ T3683] dump_stack_lvl+0xcd/0x134 [ 62.153312][ T3683] should_fail.cold+0x5/0xa [ 62.157797][ T3683] should_failslab+0x5/0x10 [ 62.162281][ T3683] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.167548][ T3683] ? ref_tracker_alloc+0x14c/0x550 [ 62.172654][ T3683] ref_tracker_alloc+0x14c/0x550 [ 62.177583][ T3683] ? ref_tracker_free+0x6b0/0x6b0 [ 62.182595][ T3683] ? lock_release+0x720/0x720 [ 62.187260][ T3683] ? do_raw_spin_lock+0x120/0x2a0 [ 62.192276][ T3683] ? rwlock_bug.part.0+0x90/0x90 [ 62.197205][ T3683] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.202576][ T3683] linkwatch_fire_event+0x202/0x260 [ 62.207776][ T3683] netif_carrier_off+0x96/0xb0 [ 62.212532][ T3683] __tun_detach+0xfe7/0x13e0 [ 62.217128][ T3683] tun_chr_close+0xc4/0x180 [ 62.221718][ T3683] __fput+0x277/0x9d0 [ 62.225688][ T3683] ? __tun_detach+0x13e0/0x13e0 [ 62.230544][ T3683] task_work_run+0xdd/0x1a0 [ 62.235044][ T3683] ptrace_notify+0x114/0x140 [ 62.239630][ T3683] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.245869][ T3683] syscall_exit_to_user_mode+0x9/0x60 [ 62.251357][ T3683] do_syscall_64+0x42/0xb0 [ 62.255770][ T3683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.261656][ T3683] RIP: 0033:0x7fc6cd2767a3 [ 62.266059][ T3683] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.285664][ T3683] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.294072][ T3683] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.302032][ T3683] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3683] close(3) = 0 [pid 3683] close(4) = 0 [pid 3683] close(5) = -1 EBADF (Bad file descriptor) [pid 3683] close(6) = -1 EBADF (Bad file descriptor) [pid 3683] close(7) = -1 EBADF (Bad file descriptor) [pid 3683] close(8) = -1 EBADF (Bad file descriptor) [pid 3683] close(9) = -1 EBADF (Bad file descriptor) [pid 3683] close(10) = -1 EBADF (Bad file descriptor) [pid 3683] close(11) = -1 EBADF (Bad file descriptor) [pid 3683] close(12) = -1 EBADF (Bad file descriptor) [pid 3683] close(13) = -1 EBADF (Bad file descriptor) [pid 3683] close(14) = -1 EBADF (Bad file descriptor) [pid 3683] close(15) = -1 EBADF (Bad file descriptor) [pid 3683] close(16) = -1 EBADF (Bad file descriptor) [pid 3683] close(17) = -1 EBADF (Bad file descriptor) [pid 3683] close(18) = -1 EBADF (Bad file descriptor) [pid 3683] close(19) = -1 EBADF (Bad file descriptor) [pid 3683] close(20) = -1 EBADF (Bad file descriptor) [pid 3683] close(21) = -1 EBADF (Bad file descriptor) [pid 3683] close(22) = -1 EBADF (Bad file descriptor) [pid 3683] close(23) = -1 EBADF (Bad file descriptor) [pid 3683] close(24) = -1 EBADF (Bad file descriptor) [pid 3683] close(25) = -1 EBADF (Bad file descriptor) [pid 3683] close(26) = -1 EBADF (Bad file descriptor) [pid 3683] close(27) = -1 EBADF (Bad file descriptor) [pid 3683] close(28) = -1 EBADF (Bad file descriptor) [pid 3683] close(29) = -1 EBADF (Bad file descriptor) [pid 3683] exit_group(0) = ? [pid 3683] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 66 ./strace-static-x86_64: Process 3684 attached [pid 3684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3684] setpgid(0, 0) = 0 [ 62.309993][ T3683] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.317957][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.325916][ T3683] R13: 00000000000f4240 R14: 000000000000f166 R15: 00007ffdc49a5924 [ 62.333888][ T3683] [pid 3684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3684] write(3, "1000", 4) = 4 [pid 3684] close(3) = 0 [pid 3684] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3684] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3684] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3684] write(4, "5", 1) = 1 [pid 3684] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.399448][ T3684] FAULT_INJECTION: forcing a failure. [ 62.399448][ T3684] name failslab, interval 1, probability 0, space 0, times 0 [ 62.412060][ T3684] CPU: 1 PID: 3684 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.422425][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.432663][ T3684] Call Trace: [ 62.435931][ T3684] [ 62.438841][ T3684] dump_stack_lvl+0xcd/0x134 [ 62.443506][ T3684] should_fail.cold+0x5/0xa [ 62.448000][ T3684] should_failslab+0x5/0x10 [ 62.452490][ T3684] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.457757][ T3684] ? ref_tracker_alloc+0x14c/0x550 [ 62.462853][ T3684] ref_tracker_alloc+0x14c/0x550 [ 62.467774][ T3684] ? ref_tracker_free+0x6b0/0x6b0 [ 62.472793][ T3684] ? lock_release+0x720/0x720 [ 62.477463][ T3684] ? do_raw_spin_lock+0x120/0x2a0 [ 62.482475][ T3684] ? rwlock_bug.part.0+0x90/0x90 [ 62.487399][ T3684] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.492853][ T3684] linkwatch_fire_event+0x202/0x260 [ 62.498055][ T3684] netif_carrier_off+0x96/0xb0 [ 62.502801][ T3684] __tun_detach+0xfe7/0x13e0 [ 62.507380][ T3684] tun_chr_close+0xc4/0x180 [ 62.511866][ T3684] __fput+0x277/0x9d0 [ 62.515829][ T3684] ? __tun_detach+0x13e0/0x13e0 [ 62.520660][ T3684] task_work_run+0xdd/0x1a0 [ 62.525144][ T3684] ptrace_notify+0x114/0x140 [ 62.529724][ T3684] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.535959][ T3684] syscall_exit_to_user_mode+0x9/0x60 [ 62.541330][ T3684] do_syscall_64+0x42/0xb0 [ 62.545917][ T3684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.551791][ T3684] RIP: 0033:0x7fc6cd2767a3 [ 62.556185][ T3684] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.575783][ T3684] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.584187][ T3684] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.592148][ T3684] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3684] close(3) = 0 [pid 3684] close(4) = 0 [pid 3684] close(5) = -1 EBADF (Bad file descriptor) [pid 3684] close(6) = -1 EBADF (Bad file descriptor) [pid 3684] close(7) = -1 EBADF (Bad file descriptor) [pid 3684] close(8) = -1 EBADF (Bad file descriptor) [pid 3684] close(9) = -1 EBADF (Bad file descriptor) [ 62.600118][ T3684] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.608077][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.616121][ T3684] R13: 00000000000f4240 R14: 000000000000f27e R15: 00007ffdc49a5924 [ 62.624084][ T3684] [pid 3684] close(10) = -1 EBADF (Bad file descriptor) [pid 3684] close(11) = -1 EBADF (Bad file descriptor) [pid 3684] close(12) = -1 EBADF (Bad file descriptor) [pid 3684] close(13) = -1 EBADF (Bad file descriptor) [pid 3684] close(14) = -1 EBADF (Bad file descriptor) [pid 3684] close(15) = -1 EBADF (Bad file descriptor) [pid 3684] close(16) = -1 EBADF (Bad file descriptor) [pid 3684] close(17) = -1 EBADF (Bad file descriptor) [pid 3684] close(18) = -1 EBADF (Bad file descriptor) [pid 3684] close(19) = -1 EBADF (Bad file descriptor) [pid 3684] close(20) = -1 EBADF (Bad file descriptor) [pid 3684] close(21) = -1 EBADF (Bad file descriptor) [pid 3684] close(22) = -1 EBADF (Bad file descriptor) [pid 3684] close(23) = -1 EBADF (Bad file descriptor) [pid 3684] close(24) = -1 EBADF (Bad file descriptor) [pid 3684] close(25) = -1 EBADF (Bad file descriptor) [pid 3684] close(26) = -1 EBADF (Bad file descriptor) [pid 3684] close(27) = -1 EBADF (Bad file descriptor) [pid 3684] close(28) = -1 EBADF (Bad file descriptor) [pid 3684] close(29) = -1 EBADF (Bad file descriptor) [pid 3684] exit_group(0) = ? [pid 3684] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 67 ./strace-static-x86_64: Process 3685 attached [pid 3685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3685] setpgid(0, 0) = 0 [pid 3685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3685] write(3, "1000", 4) = 4 [pid 3685] close(3) = 0 [pid 3685] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3685] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3685] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3685] write(4, "5", 1) = 1 [pid 3685] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.703820][ T3685] FAULT_INJECTION: forcing a failure. [ 62.703820][ T3685] name failslab, interval 1, probability 0, space 0, times 0 [ 62.716434][ T3685] CPU: 1 PID: 3685 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.726580][ T3685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.736628][ T3685] Call Trace: [ 62.739897][ T3685] [ 62.742812][ T3685] dump_stack_lvl+0xcd/0x134 [ 62.747403][ T3685] should_fail.cold+0x5/0xa [ 62.751906][ T3685] should_failslab+0x5/0x10 [ 62.756404][ T3685] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.761684][ T3685] ? ref_tracker_alloc+0x14c/0x550 [ 62.766788][ T3685] ref_tracker_alloc+0x14c/0x550 [ 62.771718][ T3685] ? ref_tracker_free+0x6b0/0x6b0 [ 62.776733][ T3685] ? lock_release+0x720/0x720 [ 62.781405][ T3685] ? do_raw_spin_lock+0x120/0x2a0 [ 62.786420][ T3685] ? rwlock_bug.part.0+0x90/0x90 [ 62.791352][ T3685] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.796722][ T3685] linkwatch_fire_event+0x202/0x260 [ 62.801922][ T3685] netif_carrier_off+0x96/0xb0 [ 62.806679][ T3685] __tun_detach+0xfe7/0x13e0 [ 62.811272][ T3685] tun_chr_close+0xc4/0x180 [ 62.815765][ T3685] __fput+0x277/0x9d0 [ 62.819828][ T3685] ? __tun_detach+0x13e0/0x13e0 [ 62.824674][ T3685] task_work_run+0xdd/0x1a0 [ 62.829181][ T3685] ptrace_notify+0x114/0x140 [ 62.833771][ T3685] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.840014][ T3685] syscall_exit_to_user_mode+0x9/0x60 [ 62.845389][ T3685] do_syscall_64+0x42/0xb0 [ 62.849806][ T3685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.855710][ T3685] RIP: 0033:0x7fc6cd2767a3 [ 62.860119][ T3685] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.879723][ T3685] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.888135][ T3685] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.896097][ T3685] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3685] close(3) = 0 [pid 3685] close(4) = 0 [pid 3685] close(5) = -1 EBADF (Bad file descriptor) [pid 3685] close(6) = -1 EBADF (Bad file descriptor) [pid 3685] close(7) = -1 EBADF (Bad file descriptor) [pid 3685] close(8) = -1 EBADF (Bad file descriptor) [pid 3685] close(9) = -1 EBADF (Bad file descriptor) [pid 3685] close(10) = -1 EBADF (Bad file descriptor) [pid 3685] close(11) = -1 EBADF (Bad file descriptor) [pid 3685] close(12) = -1 EBADF (Bad file descriptor) [pid 3685] close(13) = -1 EBADF (Bad file descriptor) [pid 3685] close(14) = -1 EBADF (Bad file descriptor) [pid 3685] close(15) = -1 EBADF (Bad file descriptor) [pid 3685] close(16) = -1 EBADF (Bad file descriptor) [pid 3685] close(17) = -1 EBADF (Bad file descriptor) [pid 3685] close(18) = -1 EBADF (Bad file descriptor) [pid 3685] close(19) = -1 EBADF (Bad file descriptor) [pid 3685] close(20) = -1 EBADF (Bad file descriptor) [pid 3685] close(21) = -1 EBADF (Bad file descriptor) [pid 3685] close(22) = -1 EBADF (Bad file descriptor) [pid 3685] close(23) = -1 EBADF (Bad file descriptor) [pid 3685] close(24) = -1 EBADF (Bad file descriptor) [pid 3685] close(25) = -1 EBADF (Bad file descriptor) [pid 3685] close(26) = -1 EBADF (Bad file descriptor) [pid 3685] close(27) = -1 EBADF (Bad file descriptor) [pid 3685] close(28) = -1 EBADF (Bad file descriptor) [pid 3685] close(29) = -1 EBADF (Bad file descriptor) [pid 3685] exit_group(0) = ? [pid 3685] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 68 ./strace-static-x86_64: Process 3686 attached [pid 3686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3686] setpgid(0, 0) = 0 [pid 3686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3686] write(3, "1000", 4) = 4 [pid 3686] close(3) = 0 [pid 3686] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3686] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3686] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 62.904054][ T3685] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.912017][ T3685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.919982][ T3685] R13: 00000000000f4240 R14: 000000000000f3a0 R15: 00007ffdc49a5924 [ 62.928051][ T3685] [pid 3686] write(4, "5", 1) = 1 [pid 3686] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.986987][ T3686] FAULT_INJECTION: forcing a failure. [ 62.986987][ T3686] name failslab, interval 1, probability 0, space 0, times 0 [ 62.999906][ T3686] CPU: 1 PID: 3686 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.010158][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.020222][ T3686] Call Trace: [ 63.023501][ T3686] [ 63.026434][ T3686] dump_stack_lvl+0xcd/0x134 [ 63.031061][ T3686] should_fail.cold+0x5/0xa [ 63.035570][ T3686] should_failslab+0x5/0x10 [ 63.040090][ T3686] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.045376][ T3686] ? ref_tracker_alloc+0x14c/0x550 [ 63.050495][ T3686] ref_tracker_alloc+0x14c/0x550 [ 63.055464][ T3686] ? ref_tracker_free+0x6b0/0x6b0 [ 63.060512][ T3686] ? lock_release+0x720/0x720 [ 63.065192][ T3686] ? do_raw_spin_lock+0x120/0x2a0 [ 63.070221][ T3686] ? rwlock_bug.part.0+0x90/0x90 [ 63.075163][ T3686] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.080569][ T3686] linkwatch_fire_event+0x202/0x260 [ 63.085778][ T3686] netif_carrier_off+0x96/0xb0 [ 63.090534][ T3686] __tun_detach+0xfe7/0x13e0 [ 63.095121][ T3686] tun_chr_close+0xc4/0x180 [ 63.099620][ T3686] __fput+0x277/0x9d0 [ 63.103596][ T3686] ? __tun_detach+0x13e0/0x13e0 [ 63.108442][ T3686] task_work_run+0xdd/0x1a0 [ 63.112947][ T3686] ptrace_notify+0x114/0x140 [ 63.117530][ T3686] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.123760][ T3686] syscall_exit_to_user_mode+0x9/0x60 [ 63.129126][ T3686] do_syscall_64+0x42/0xb0 [ 63.133539][ T3686] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.139448][ T3686] RIP: 0033:0x7fc6cd2767a3 [ 63.143854][ T3686] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.163456][ T3686] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.171885][ T3686] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 63.179866][ T3686] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3686] close(3) = 0 [pid 3686] close(4) = 0 [pid 3686] close(5) = -1 EBADF (Bad file descriptor) [pid 3686] close(6) = -1 EBADF (Bad file descriptor) [pid 3686] close(7) = -1 EBADF (Bad file descriptor) [pid 3686] close(8) = -1 EBADF (Bad file descriptor) [pid 3686] close(9) = -1 EBADF (Bad file descriptor) [pid 3686] close(10) = -1 EBADF (Bad file descriptor) [pid 3686] close(11) = -1 EBADF (Bad file descriptor) [pid 3686] close(12) = -1 EBADF (Bad file descriptor) [pid 3686] close(13) = -1 EBADF (Bad file descriptor) [pid 3686] close(14) = -1 EBADF (Bad file descriptor) [pid 3686] close(15) = -1 EBADF (Bad file descriptor) [pid 3686] close(16) = -1 EBADF (Bad file descriptor) [pid 3686] close(17) = -1 EBADF (Bad file descriptor) [pid 3686] close(18) = -1 EBADF (Bad file descriptor) [ 63.187829][ T3686] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.195870][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.203823][ T3686] R13: 00000000000f4240 R14: 000000000000f4cf R15: 00007ffdc49a5924 [ 63.211793][ T3686] [pid 3686] close(19) = -1 EBADF (Bad file descriptor) [pid 3686] close(20) = -1 EBADF (Bad file descriptor) [pid 3686] close(21) = -1 EBADF (Bad file descriptor) [pid 3686] close(22) = -1 EBADF (Bad file descriptor) [pid 3686] close(23) = -1 EBADF (Bad file descriptor) [pid 3686] close(24) = -1 EBADF (Bad file descriptor) [pid 3686] close(25) = -1 EBADF (Bad file descriptor) [pid 3686] close(26) = -1 EBADF (Bad file descriptor) [pid 3686] close(27) = -1 EBADF (Bad file descriptor) [pid 3686] close(28) = -1 EBADF (Bad file descriptor) [pid 3686] close(29) = -1 EBADF (Bad file descriptor) [pid 3686] exit_group(0) = ? [pid 3686] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 69 ./strace-static-x86_64: Process 3687 attached [pid 3687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3687] setpgid(0, 0) = 0 [pid 3687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3687] write(3, "1000", 4) = 4 [pid 3687] close(3) = 0 [pid 3687] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3687] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3687] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3687] write(4, "5", 1) = 1 [pid 3687] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.282413][ T3687] FAULT_INJECTION: forcing a failure. [ 63.282413][ T3687] name failslab, interval 1, probability 0, space 0, times 0 [ 63.295446][ T3687] CPU: 0 PID: 3687 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.305593][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.315648][ T3687] Call Trace: [ 63.318908][ T3687] [ 63.321818][ T3687] dump_stack_lvl+0xcd/0x134 [ 63.326573][ T3687] should_fail.cold+0x5/0xa [ 63.331078][ T3687] should_failslab+0x5/0x10 [ 63.335575][ T3687] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.340845][ T3687] ? ref_tracker_alloc+0x14c/0x550 [ 63.345964][ T3687] ref_tracker_alloc+0x14c/0x550 [ 63.350889][ T3687] ? ref_tracker_free+0x6b0/0x6b0 [ 63.355917][ T3687] ? lock_release+0x720/0x720 [ 63.360598][ T3687] ? do_raw_spin_lock+0x120/0x2a0 [ 63.365610][ T3687] ? rwlock_bug.part.0+0x90/0x90 [ 63.370536][ T3687] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.376992][ T3687] linkwatch_fire_event+0x202/0x260 [ 63.382215][ T3687] netif_carrier_off+0x96/0xb0 [ 63.387060][ T3687] __tun_detach+0xfe7/0x13e0 [ 63.391646][ T3687] tun_chr_close+0xc4/0x180 [ 63.396154][ T3687] __fput+0x277/0x9d0 [ 63.400124][ T3687] ? __tun_detach+0x13e0/0x13e0 [ 63.404966][ T3687] task_work_run+0xdd/0x1a0 [ 63.409477][ T3687] ptrace_notify+0x114/0x140 [ 63.414079][ T3687] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.420328][ T3687] syscall_exit_to_user_mode+0x9/0x60 [ 63.425692][ T3687] do_syscall_64+0x42/0xb0 [ 63.430112][ T3687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.436109][ T3687] RIP: 0033:0x7fc6cd2767a3 [ 63.440599][ T3687] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.460196][ T3687] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.468618][ T3687] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3687] close(3) = 0 [pid 3687] close(4) = 0 [pid 3687] close(5) = -1 EBADF (Bad file descriptor) [pid 3687] close(6) = -1 EBADF (Bad file descriptor) [pid 3687] close(7) = -1 EBADF (Bad file descriptor) [pid 3687] close(8) = -1 EBADF (Bad file descriptor) [pid 3687] close(9) = -1 EBADF (Bad file descriptor) [pid 3687] close(10) = -1 EBADF (Bad file descriptor) [pid 3687] close(11) = -1 EBADF (Bad file descriptor) [pid 3687] close(12) = -1 EBADF (Bad file descriptor) [pid 3687] close(13) = -1 EBADF (Bad file descriptor) [pid 3687] close(14) = -1 EBADF (Bad file descriptor) [pid 3687] close(15) = -1 EBADF (Bad file descriptor) [pid 3687] close(16) = -1 EBADF (Bad file descriptor) [pid 3687] close(17) = -1 EBADF (Bad file descriptor) [pid 3687] close(18) = -1 EBADF (Bad file descriptor) [pid 3687] close(19) = -1 EBADF (Bad file descriptor) [pid 3687] close(20) = -1 EBADF (Bad file descriptor) [pid 3687] close(21) = -1 EBADF (Bad file descriptor) [pid 3687] close(22) = -1 EBADF (Bad file descriptor) [pid 3687] close(23) = -1 EBADF (Bad file descriptor) [pid 3687] close(24) = -1 EBADF (Bad file descriptor) [pid 3687] close(25) = -1 EBADF (Bad file descriptor) [pid 3687] close(26) = -1 EBADF (Bad file descriptor) [pid 3687] close(27) = -1 EBADF (Bad file descriptor) [pid 3687] close(28) = -1 EBADF (Bad file descriptor) [pid 3687] close(29) = -1 EBADF (Bad file descriptor) [pid 3687] exit_group(0) = ? [pid 3687] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 70 ./strace-static-x86_64: Process 3688 attached [ 63.476763][ T3687] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 63.484719][ T3687] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.492689][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.500645][ T3687] R13: 00000000000f4240 R14: 000000000000f5ec R15: 00007ffdc49a5924 [ 63.508718][ T3687] [pid 3688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3688] setpgid(0, 0) = 0 [pid 3688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3688] write(3, "1000", 4) = 4 [pid 3688] close(3) = 0 [pid 3688] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3688] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3688] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3688] write(4, "5", 1) = 1 [pid 3688] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.571729][ T3688] FAULT_INJECTION: forcing a failure. [ 63.571729][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 63.584764][ T3688] CPU: 0 PID: 3688 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.594904][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.604965][ T3688] Call Trace: [ 63.608228][ T3688] [ 63.611136][ T3688] dump_stack_lvl+0xcd/0x134 [ 63.615730][ T3688] should_fail.cold+0x5/0xa [ 63.620217][ T3688] should_failslab+0x5/0x10 [ 63.624698][ T3688] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.629975][ T3688] ? ref_tracker_alloc+0x14c/0x550 [ 63.635255][ T3688] ref_tracker_alloc+0x14c/0x550 [ 63.640199][ T3688] ? ref_tracker_free+0x6b0/0x6b0 [ 63.645212][ T3688] ? lock_release+0x720/0x720 [ 63.649878][ T3688] ? do_raw_spin_lock+0x120/0x2a0 [ 63.654903][ T3688] ? rwlock_bug.part.0+0x90/0x90 [ 63.659837][ T3688] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.665225][ T3688] linkwatch_fire_event+0x202/0x260 [ 63.670418][ T3688] netif_carrier_off+0x96/0xb0 [ 63.675173][ T3688] __tun_detach+0xfe7/0x13e0 [ 63.679941][ T3688] tun_chr_close+0xc4/0x180 [ 63.684547][ T3688] __fput+0x277/0x9d0 [ 63.688515][ T3688] ? __tun_detach+0x13e0/0x13e0 [ 63.693354][ T3688] task_work_run+0xdd/0x1a0 [ 63.697934][ T3688] ptrace_notify+0x114/0x140 [ 63.702518][ T3688] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.708769][ T3688] syscall_exit_to_user_mode+0x9/0x60 [ 63.714142][ T3688] do_syscall_64+0x42/0xb0 [ 63.718547][ T3688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.724429][ T3688] RIP: 0033:0x7fc6cd2767a3 [ 63.728833][ T3688] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.748429][ T3688] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.756831][ T3688] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3688] close(3) = 0 [pid 3688] close(4) = 0 [pid 3688] close(5) = -1 EBADF (Bad file descriptor) [pid 3688] close(6) = -1 EBADF (Bad file descriptor) [pid 3688] close(7) = -1 EBADF (Bad file descriptor) [pid 3688] close(8) = -1 EBADF (Bad file descriptor) [pid 3688] close(9) = -1 EBADF (Bad file descriptor) [pid 3688] close(10) = -1 EBADF (Bad file descriptor) [pid 3688] close(11) = -1 EBADF (Bad file descriptor) [pid 3688] close(12) = -1 EBADF (Bad file descriptor) [pid 3688] close(13) = -1 EBADF (Bad file descriptor) [pid 3688] close(14) = -1 EBADF (Bad file descriptor) [pid 3688] close(15) = -1 EBADF (Bad file descriptor) [pid 3688] close(16) = -1 EBADF (Bad file descriptor) [pid 3688] close(17) = -1 EBADF (Bad file descriptor) [pid 3688] close(18) = -1 EBADF (Bad file descriptor) [pid 3688] close(19) = -1 EBADF (Bad file descriptor) [pid 3688] close(20) = -1 EBADF (Bad file descriptor) [pid 3688] close(21) = -1 EBADF (Bad file descriptor) [pid 3688] close(22) = -1 EBADF (Bad file descriptor) [pid 3688] close(23) = -1 EBADF (Bad file descriptor) [pid 3688] close(24) = -1 EBADF (Bad file descriptor) [pid 3688] close(25) = -1 EBADF (Bad file descriptor) [pid 3688] close(26) = -1 EBADF (Bad file descriptor) [pid 3688] close(27) = -1 EBADF (Bad file descriptor) [pid 3688] close(28) = -1 EBADF (Bad file descriptor) [pid 3688] close(29) = -1 EBADF (Bad file descriptor) [pid 3688] exit_group(0) = ? [pid 3688] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 71 ./strace-static-x86_64: Process 3689 attached [pid 3689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3689] setpgid(0, 0) = 0 [pid 3689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3689] write(3, "1000", 4) = 4 [pid 3689] close(3) = 0 [pid 3689] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 63.764787][ T3688] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 63.772918][ T3688] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.780882][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.788839][ T3688] R13: 00000000000f4240 R14: 000000000000f714 R15: 00007ffdc49a5924 [ 63.796809][ T3688] [pid 3689] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3689] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3689] write(4, "5", 1) = 1 [pid 3689] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.859752][ T3689] FAULT_INJECTION: forcing a failure. [ 63.859752][ T3689] name failslab, interval 1, probability 0, space 0, times 0 [ 63.872692][ T3689] CPU: 0 PID: 3689 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.882857][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.893011][ T3689] Call Trace: [ 63.896289][ T3689] [ 63.899220][ T3689] dump_stack_lvl+0xcd/0x134 [ 63.903825][ T3689] should_fail.cold+0x5/0xa [ 63.908346][ T3689] should_failslab+0x5/0x10 [ 63.912863][ T3689] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.918150][ T3689] ? ref_tracker_alloc+0x14c/0x550 [ 63.923268][ T3689] ref_tracker_alloc+0x14c/0x550 [ 63.928400][ T3689] ? ref_tracker_free+0x6b0/0x6b0 [ 63.933455][ T3689] ? lock_release+0x720/0x720 [ 63.938319][ T3689] ? do_raw_spin_lock+0x120/0x2a0 [ 63.943422][ T3689] ? rwlock_bug.part.0+0x90/0x90 [ 63.948395][ T3689] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.954500][ T3689] linkwatch_fire_event+0x202/0x260 [ 63.959801][ T3689] netif_carrier_off+0x96/0xb0 [ 63.964586][ T3689] __tun_detach+0xfe7/0x13e0 [ 63.969216][ T3689] tun_chr_close+0xc4/0x180 [ 63.973734][ T3689] __fput+0x277/0x9d0 [ 63.977762][ T3689] ? __tun_detach+0x13e0/0x13e0 [ 63.982734][ T3689] task_work_run+0xdd/0x1a0 [ 63.987263][ T3689] ptrace_notify+0x114/0x140 [ 63.992039][ T3689] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.998308][ T3689] syscall_exit_to_user_mode+0x9/0x60 [ 64.003691][ T3689] do_syscall_64+0x42/0xb0 [ 64.008131][ T3689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.014029][ T3689] RIP: 0033:0x7fc6cd2767a3 [ 64.018543][ T3689] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.038169][ T3689] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.046804][ T3689] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3689] close(3) = 0 [pid 3689] close(4) = 0 [pid 3689] close(5) = -1 EBADF (Bad file descriptor) [pid 3689] close(6) = -1 EBADF (Bad file descriptor) [pid 3689] close(7) = -1 EBADF (Bad file descriptor) [pid 3689] close(8) = -1 EBADF (Bad file descriptor) [pid 3689] close(9) = -1 EBADF (Bad file descriptor) [pid 3689] close(10) = -1 EBADF (Bad file descriptor) [pid 3689] close(11) = -1 EBADF (Bad file descriptor) [pid 3689] close(12) = -1 EBADF (Bad file descriptor) [pid 3689] close(13) = -1 EBADF (Bad file descriptor) [pid 3689] close(14) = -1 EBADF (Bad file descriptor) [pid 3689] close(15) = -1 EBADF (Bad file descriptor) [pid 3689] close(16) = -1 EBADF (Bad file descriptor) [pid 3689] close(17) = -1 EBADF (Bad file descriptor) [pid 3689] close(18) = -1 EBADF (Bad file descriptor) [pid 3689] close(19) = -1 EBADF (Bad file descriptor) [pid 3689] close(20) = -1 EBADF (Bad file descriptor) [pid 3689] close(21) = -1 EBADF (Bad file descriptor) [pid 3689] close(22) = -1 EBADF (Bad file descriptor) [pid 3689] close(23) = -1 EBADF (Bad file descriptor) [pid 3689] close(24) = -1 EBADF (Bad file descriptor) [pid 3689] close(25) = -1 EBADF (Bad file descriptor) [pid 3689] close(26) = -1 EBADF (Bad file descriptor) [pid 3689] close(27) = -1 EBADF (Bad file descriptor) [pid 3689] close(28) = -1 EBADF (Bad file descriptor) [pid 3689] close(29) = -1 EBADF (Bad file descriptor) [pid 3689] exit_group(0) = ? [pid 3689] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3690 attached , child_tidptr=0x5555570bd5d0) = 72 [pid 3690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3690] setpgid(0, 0) = 0 [pid 3690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3690] write(3, "1000", 4) = 4 [pid 3690] close(3) = 0 [pid 3690] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 64.054783][ T3689] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.062756][ T3689] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.070828][ T3689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.078797][ T3689] R13: 00000000000f4240 R14: 000000000000f83a R15: 00007ffdc49a5924 [ 64.086784][ T3689] [pid 3690] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3690] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3690] write(4, "5", 1) = 1 [pid 3690] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.144223][ T3690] FAULT_INJECTION: forcing a failure. [ 64.144223][ T3690] name failslab, interval 1, probability 0, space 0, times 0 [ 64.157297][ T3690] CPU: 1 PID: 3690 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.167769][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.177847][ T3690] Call Trace: [ 64.181136][ T3690] [ 64.184056][ T3690] dump_stack_lvl+0xcd/0x134 [ 64.188736][ T3690] should_fail.cold+0x5/0xa [ 64.193245][ T3690] should_failslab+0x5/0x10 [ 64.197743][ T3690] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.203025][ T3690] ? ref_tracker_alloc+0x14c/0x550 [ 64.208134][ T3690] ref_tracker_alloc+0x14c/0x550 [ 64.213071][ T3690] ? ref_tracker_free+0x6b0/0x6b0 [ 64.218098][ T3690] ? lock_release+0x720/0x720 [ 64.222793][ T3690] ? do_raw_spin_lock+0x120/0x2a0 [ 64.227992][ T3690] ? rwlock_bug.part.0+0x90/0x90 [ 64.232937][ T3690] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.238608][ T3690] linkwatch_fire_event+0x202/0x260 [ 64.243831][ T3690] netif_carrier_off+0x96/0xb0 [ 64.248605][ T3690] __tun_detach+0xfe7/0x13e0 [ 64.253198][ T3690] tun_chr_close+0xc4/0x180 [ 64.257712][ T3690] __fput+0x277/0x9d0 [ 64.261705][ T3690] ? __tun_detach+0x13e0/0x13e0 [ 64.266553][ T3690] task_work_run+0xdd/0x1a0 [ 64.271056][ T3690] ptrace_notify+0x114/0x140 [ 64.275651][ T3690] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.281913][ T3690] syscall_exit_to_user_mode+0x9/0x60 [ 64.287296][ T3690] do_syscall_64+0x42/0xb0 [ 64.291724][ T3690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.297625][ T3690] RIP: 0033:0x7fc6cd2767a3 [ 64.302060][ T3690] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.321671][ T3690] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.330099][ T3690] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3690] close(3) = 0 [pid 3690] close(4) = 0 [pid 3690] close(5) = -1 EBADF (Bad file descriptor) [pid 3690] close(6) = -1 EBADF (Bad file descriptor) [pid 3690] close(7) = -1 EBADF (Bad file descriptor) [pid 3690] close(8) = -1 EBADF (Bad file descriptor) [pid 3690] close(9) = -1 EBADF (Bad file descriptor) [pid 3690] close(10) = -1 EBADF (Bad file descriptor) [pid 3690] close(11) = -1 EBADF (Bad file descriptor) [pid 3690] close(12) = -1 EBADF (Bad file descriptor) [pid 3690] close(13) = -1 EBADF (Bad file descriptor) [pid 3690] close(14) = -1 EBADF (Bad file descriptor) [pid 3690] close(15) = -1 EBADF (Bad file descriptor) [pid 3690] close(16) = -1 EBADF (Bad file descriptor) [pid 3690] close(17) = -1 EBADF (Bad file descriptor) [ 64.338089][ T3690] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.346093][ T3690] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.354092][ T3690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.362087][ T3690] R13: 00000000000f4240 R14: 000000000000f953 R15: 00007ffdc49a5924 [ 64.370081][ T3690] [pid 3690] close(18) = -1 EBADF (Bad file descriptor) [pid 3690] close(19) = -1 EBADF (Bad file descriptor) [pid 3690] close(20) = -1 EBADF (Bad file descriptor) [pid 3690] close(21) = -1 EBADF (Bad file descriptor) [pid 3690] close(22) = -1 EBADF (Bad file descriptor) [pid 3690] close(23) = -1 EBADF (Bad file descriptor) [pid 3690] close(24) = -1 EBADF (Bad file descriptor) [pid 3690] close(25) = -1 EBADF (Bad file descriptor) [pid 3690] close(26) = -1 EBADF (Bad file descriptor) [pid 3690] close(27) = -1 EBADF (Bad file descriptor) [pid 3690] close(28) = -1 EBADF (Bad file descriptor) [pid 3690] close(29) = -1 EBADF (Bad file descriptor) [pid 3690] exit_group(0) = ? [pid 3690] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 73 ./strace-static-x86_64: Process 3691 attached [pid 3691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3691] setpgid(0, 0) = 0 [pid 3691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3691] write(3, "1000", 4) = 4 [pid 3691] close(3) = 0 [pid 3691] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3691] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3691] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3691] write(4, "5", 1) = 1 [pid 3691] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.447728][ T3691] FAULT_INJECTION: forcing a failure. [ 64.447728][ T3691] name failslab, interval 1, probability 0, space 0, times 0 [ 64.461017][ T3691] CPU: 0 PID: 3691 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.471182][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.481414][ T3691] Call Trace: [ 64.484689][ T3691] [ 64.487610][ T3691] dump_stack_lvl+0xcd/0x134 [ 64.492211][ T3691] should_fail.cold+0x5/0xa [ 64.496720][ T3691] should_failslab+0x5/0x10 [ 64.501225][ T3691] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.506515][ T3691] ? ref_tracker_alloc+0x14c/0x550 [ 64.511644][ T3691] ref_tracker_alloc+0x14c/0x550 [ 64.516607][ T3691] ? ref_tracker_free+0x6b0/0x6b0 [ 64.521634][ T3691] ? lock_release+0x720/0x720 [ 64.526606][ T3691] ? do_raw_spin_lock+0x120/0x2a0 [ 64.532045][ T3691] ? rwlock_bug.part.0+0x90/0x90 [ 64.537080][ T3691] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.542466][ T3691] linkwatch_fire_event+0x202/0x260 [ 64.547784][ T3691] netif_carrier_off+0x96/0xb0 [ 64.552569][ T3691] __tun_detach+0xfe7/0x13e0 [ 64.557168][ T3691] tun_chr_close+0xc4/0x180 [ 64.561679][ T3691] __fput+0x277/0x9d0 [ 64.565680][ T3691] ? __tun_detach+0x13e0/0x13e0 [ 64.570543][ T3691] task_work_run+0xdd/0x1a0 [ 64.575088][ T3691] ptrace_notify+0x114/0x140 [ 64.579707][ T3691] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.585996][ T3691] syscall_exit_to_user_mode+0x9/0x60 [ 64.591395][ T3691] do_syscall_64+0x42/0xb0 [ 64.595926][ T3691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.601812][ T3691] RIP: 0033:0x7fc6cd2767a3 [ 64.606317][ T3691] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.626012][ T3691] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.634425][ T3691] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3691] close(3) = 0 [pid 3691] close(4) = 0 [pid 3691] close(5) = -1 EBADF (Bad file descriptor) [pid 3691] close(6) = -1 EBADF (Bad file descriptor) [pid 3691] close(7) = -1 EBADF (Bad file descriptor) [pid 3691] close(8) = -1 EBADF (Bad file descriptor) [pid 3691] close(9) = -1 EBADF (Bad file descriptor) [pid 3691] close(10) = -1 EBADF (Bad file descriptor) [pid 3691] close(11) = -1 EBADF (Bad file descriptor) [pid 3691] close(12) = -1 EBADF (Bad file descriptor) [pid 3691] close(13) = -1 EBADF (Bad file descriptor) [pid 3691] close(14) = -1 EBADF (Bad file descriptor) [pid 3691] close(15) = -1 EBADF (Bad file descriptor) [pid 3691] close(16) = -1 EBADF (Bad file descriptor) [pid 3691] close(17) = -1 EBADF (Bad file descriptor) [pid 3691] close(18) = -1 EBADF (Bad file descriptor) [pid 3691] close(19) = -1 EBADF (Bad file descriptor) [pid 3691] close(20) = -1 EBADF (Bad file descriptor) [pid 3691] close(21) = -1 EBADF (Bad file descriptor) [pid 3691] close(22) = -1 EBADF (Bad file descriptor) [ 64.642414][ T3691] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.650423][ T3691] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.658414][ T3691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.666395][ T3691] R13: 00000000000f4240 R14: 000000000000fa74 R15: 00007ffdc49a5924 [ 64.674587][ T3691] [pid 3691] close(23) = -1 EBADF (Bad file descriptor) [pid 3691] close(24) = -1 EBADF (Bad file descriptor) [pid 3691] close(25) = -1 EBADF (Bad file descriptor) [pid 3691] close(26) = -1 EBADF (Bad file descriptor) [pid 3691] close(27) = -1 EBADF (Bad file descriptor) [pid 3691] close(28) = -1 EBADF (Bad file descriptor) [pid 3691] close(29) = -1 EBADF (Bad file descriptor) [pid 3691] exit_group(0) = ? [pid 3691] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 74 ./strace-static-x86_64: Process 3692 attached [pid 3692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3692] setpgid(0, 0) = 0 [pid 3692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3692] write(3, "1000", 4) = 4 [pid 3692] close(3) = 0 [pid 3692] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3692] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3692] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3692] write(4, "5", 1) = 1 [pid 3692] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.747802][ T3692] FAULT_INJECTION: forcing a failure. [ 64.747802][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 64.760642][ T3692] CPU: 0 PID: 3692 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.770786][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.781052][ T3692] Call Trace: [ 64.784327][ T3692] [ 64.787252][ T3692] dump_stack_lvl+0xcd/0x134 [ 64.791864][ T3692] should_fail.cold+0x5/0xa [ 64.796385][ T3692] should_failslab+0x5/0x10 [ 64.800912][ T3692] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.806190][ T3692] ? ref_tracker_alloc+0x14c/0x550 [ 64.811325][ T3692] ref_tracker_alloc+0x14c/0x550 [ 64.816270][ T3692] ? ref_tracker_free+0x6b0/0x6b0 [ 64.821373][ T3692] ? lock_release+0x720/0x720 [ 64.826046][ T3692] ? do_raw_spin_lock+0x120/0x2a0 [ 64.831065][ T3692] ? rwlock_bug.part.0+0x90/0x90 [ 64.836180][ T3692] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.841638][ T3692] linkwatch_fire_event+0x202/0x260 [ 64.847096][ T3692] netif_carrier_off+0x96/0xb0 [ 64.851861][ T3692] __tun_detach+0xfe7/0x13e0 [ 64.856471][ T3692] tun_chr_close+0xc4/0x180 [ 64.861055][ T3692] __fput+0x277/0x9d0 [ 64.865023][ T3692] ? __tun_detach+0x13e0/0x13e0 [ 64.869869][ T3692] task_work_run+0xdd/0x1a0 [ 64.874372][ T3692] ptrace_notify+0x114/0x140 [ 64.878961][ T3692] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.885198][ T3692] syscall_exit_to_user_mode+0x9/0x60 [ 64.890562][ T3692] do_syscall_64+0x42/0xb0 [ 64.894976][ T3692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.900861][ T3692] RIP: 0033:0x7fc6cd2767a3 [ 64.905263][ T3692] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.924865][ T3692] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.933281][ T3692] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3692] close(3) = 0 [pid 3692] close(4) = 0 [pid 3692] close(5) = -1 EBADF (Bad file descriptor) [pid 3692] close(6) = -1 EBADF (Bad file descriptor) [pid 3692] close(7) = -1 EBADF (Bad file descriptor) [pid 3692] close(8) = -1 EBADF (Bad file descriptor) [pid 3692] close(9) = -1 EBADF (Bad file descriptor) [pid 3692] close(10) = -1 EBADF (Bad file descriptor) [pid 3692] close(11) = -1 EBADF (Bad file descriptor) [pid 3692] close(12) = -1 EBADF (Bad file descriptor) [pid 3692] close(13) = -1 EBADF (Bad file descriptor) [pid 3692] close(14) = -1 EBADF (Bad file descriptor) [pid 3692] close(15) = -1 EBADF (Bad file descriptor) [pid 3692] close(16) = -1 EBADF (Bad file descriptor) [pid 3692] close(17) = -1 EBADF (Bad file descriptor) [pid 3692] close(18) = -1 EBADF (Bad file descriptor) [pid 3692] close(19) = -1 EBADF (Bad file descriptor) [pid 3692] close(20) = -1 EBADF (Bad file descriptor) [pid 3692] close(21) = -1 EBADF (Bad file descriptor) [pid 3692] close(22) = -1 EBADF (Bad file descriptor) [pid 3692] close(23) = -1 EBADF (Bad file descriptor) [pid 3692] close(24) = -1 EBADF (Bad file descriptor) [pid 3692] close(25) = -1 EBADF (Bad file descriptor) [pid 3692] close(26) = -1 EBADF (Bad file descriptor) [pid 3692] close(27) = -1 EBADF (Bad file descriptor) [ 64.941264][ T3692] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.949235][ T3692] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.957201][ T3692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.965177][ T3692] R13: 00000000000f4240 R14: 000000000000fba0 R15: 00007ffdc49a5924 [ 64.973153][ T3692] [pid 3692] close(28) = -1 EBADF (Bad file descriptor) [pid 3692] close(29) = -1 EBADF (Bad file descriptor) [pid 3692] exit_group(0) = ? [pid 3692] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3693 attached , child_tidptr=0x5555570bd5d0) = 75 [pid 3693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3693] setpgid(0, 0) = 0 [pid 3693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3693] write(3, "1000", 4) = 4 [pid 3693] close(3) = 0 [pid 3693] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3693] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3693] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3693] write(4, "5", 1) = 1 [pid 3693] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.043178][ T3693] FAULT_INJECTION: forcing a failure. [ 65.043178][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 65.055788][ T3693] CPU: 0 PID: 3693 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.065923][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.075957][ T3693] Call Trace: [ 65.079216][ T3693] [ 65.082124][ T3693] dump_stack_lvl+0xcd/0x134 [ 65.086700][ T3693] should_fail.cold+0x5/0xa [ 65.091183][ T3693] should_failslab+0x5/0x10 [ 65.095680][ T3693] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.100964][ T3693] ? ref_tracker_alloc+0x14c/0x550 [ 65.106095][ T3693] ref_tracker_alloc+0x14c/0x550 [ 65.111036][ T3693] ? ref_tracker_free+0x6b0/0x6b0 [ 65.116048][ T3693] ? lock_release+0x720/0x720 [ 65.120716][ T3693] ? do_raw_spin_lock+0x120/0x2a0 [ 65.125733][ T3693] ? rwlock_bug.part.0+0x90/0x90 [ 65.130663][ T3693] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.136031][ T3693] linkwatch_fire_event+0x202/0x260 [ 65.141225][ T3693] netif_carrier_off+0x96/0xb0 [ 65.145983][ T3693] __tun_detach+0xfe7/0x13e0 [ 65.150573][ T3693] tun_chr_close+0xc4/0x180 [ 65.155080][ T3693] __fput+0x277/0x9d0 [ 65.159052][ T3693] ? __tun_detach+0x13e0/0x13e0 [ 65.163902][ T3693] task_work_run+0xdd/0x1a0 [ 65.168419][ T3693] ptrace_notify+0x114/0x140 [ 65.173013][ T3693] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.179272][ T3693] syscall_exit_to_user_mode+0x9/0x60 [ 65.184646][ T3693] do_syscall_64+0x42/0xb0 [ 65.189061][ T3693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.195034][ T3693] RIP: 0033:0x7fc6cd2767a3 [ 65.199442][ T3693] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.219074][ T3693] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.227483][ T3693] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 65.235449][ T3693] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3693] close(3) = 0 [pid 3693] close(4) = 0 [pid 3693] close(5) = -1 EBADF (Bad file descriptor) [pid 3693] close(6) = -1 EBADF (Bad file descriptor) [pid 3693] close(7) = -1 EBADF (Bad file descriptor) [pid 3693] close(8) = -1 EBADF (Bad file descriptor) [pid 3693] close(9) = -1 EBADF (Bad file descriptor) [pid 3693] close(10) = -1 EBADF (Bad file descriptor) [pid 3693] close(11) = -1 EBADF (Bad file descriptor) [pid 3693] close(12) = -1 EBADF (Bad file descriptor) [pid 3693] close(13) = -1 EBADF (Bad file descriptor) [pid 3693] close(14) = -1 EBADF (Bad file descriptor) [ 65.243414][ T3693] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.251383][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.259356][ T3693] R13: 00000000000f4240 R14: 000000000000fccc R15: 00007ffdc49a5924 [ 65.267344][ T3693] [pid 3693] close(15) = -1 EBADF (Bad file descriptor) [pid 3693] close(16) = -1 EBADF (Bad file descriptor) [pid 3693] close(17) = -1 EBADF (Bad file descriptor) [pid 3693] close(18) = -1 EBADF (Bad file descriptor) [pid 3693] close(19) = -1 EBADF (Bad file descriptor) [pid 3693] close(20) = -1 EBADF (Bad file descriptor) [pid 3693] close(21) = -1 EBADF (Bad file descriptor) [pid 3693] close(22) = -1 EBADF (Bad file descriptor) [pid 3693] close(23) = -1 EBADF (Bad file descriptor) [pid 3693] close(24) = -1 EBADF (Bad file descriptor) [pid 3693] close(25) = -1 EBADF (Bad file descriptor) [pid 3693] close(26) = -1 EBADF (Bad file descriptor) [pid 3693] close(27) = -1 EBADF (Bad file descriptor) [pid 3693] close(28) = -1 EBADF (Bad file descriptor) [pid 3693] close(29) = -1 EBADF (Bad file descriptor) [pid 3693] exit_group(0) = ? [pid 3693] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 76 ./strace-static-x86_64: Process 3694 attached [pid 3694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3694] setpgid(0, 0) = 0 [pid 3694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3694] write(3, "1000", 4) = 4 [pid 3694] close(3) = 0 [pid 3694] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3694] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3694] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3694] write(4, "5", 1) = 1 [pid 3694] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.354376][ T3694] FAULT_INJECTION: forcing a failure. [ 65.354376][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 65.367707][ T3694] CPU: 0 PID: 3694 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.377876][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.387928][ T3694] Call Trace: [ 65.391202][ T3694] [ 65.394130][ T3694] dump_stack_lvl+0xcd/0x134 [ 65.398737][ T3694] should_fail.cold+0x5/0xa [ 65.403238][ T3694] should_failslab+0x5/0x10 [ 65.407748][ T3694] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.413060][ T3694] ? ref_tracker_alloc+0x14c/0x550 [ 65.418170][ T3694] ref_tracker_alloc+0x14c/0x550 [ 65.423134][ T3694] ? ref_tracker_free+0x6b0/0x6b0 [ 65.428173][ T3694] ? lock_release+0x720/0x720 [ 65.432844][ T3694] ? do_raw_spin_lock+0x120/0x2a0 [ 65.437864][ T3694] ? rwlock_bug.part.0+0x90/0x90 [ 65.442799][ T3694] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.448173][ T3694] linkwatch_fire_event+0x202/0x260 [ 65.453464][ T3694] netif_carrier_off+0x96/0xb0 [ 65.458309][ T3694] __tun_detach+0xfe7/0x13e0 [ 65.462902][ T3694] tun_chr_close+0xc4/0x180 [ 65.467484][ T3694] __fput+0x277/0x9d0 [ 65.471461][ T3694] ? __tun_detach+0x13e0/0x13e0 [ 65.476304][ T3694] task_work_run+0xdd/0x1a0 [ 65.480804][ T3694] ptrace_notify+0x114/0x140 [ 65.485480][ T3694] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.491738][ T3694] syscall_exit_to_user_mode+0x9/0x60 [ 65.497123][ T3694] do_syscall_64+0x42/0xb0 [ 65.501530][ T3694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.507413][ T3694] RIP: 0033:0x7fc6cd2767a3 [ 65.511816][ T3694] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.531599][ T3694] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.539997][ T3694] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 65.547951][ T3694] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 65.555903][ T3694] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.563854][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.571805][ T3694] R13: 00000000000f4240 R14: 000000000000fdf3 R15: 00007ffdc49a5924 [ 65.579945][ T3694] [pid 3694] close(3) = 0 [pid 3694] close(4) = 0 [pid 3694] close(5) = -1 EBADF (Bad file descriptor) [pid 3694] close(6) = -1 EBADF (Bad file descriptor) [pid 3694] close(7) = -1 EBADF (Bad file descriptor) [pid 3694] close(8) = -1 EBADF (Bad file descriptor) [pid 3694] close(9) = -1 EBADF (Bad file descriptor) [pid 3694] close(10) = -1 EBADF (Bad file descriptor) [pid 3694] close(11) = -1 EBADF (Bad file descriptor) [pid 3694] close(12) = -1 EBADF (Bad file descriptor) [pid 3694] close(13) = -1 EBADF (Bad file descriptor) [pid 3694] close(14) = -1 EBADF (Bad file descriptor) [pid 3694] close(15) = -1 EBADF (Bad file descriptor) [pid 3694] close(16) = -1 EBADF (Bad file descriptor) [pid 3694] close(17) = -1 EBADF (Bad file descriptor) [pid 3694] close(18) = -1 EBADF (Bad file descriptor) [pid 3694] close(19) = -1 EBADF (Bad file descriptor) [pid 3694] close(20) = -1 EBADF (Bad file descriptor) [pid 3694] close(21) = -1 EBADF (Bad file descriptor) [pid 3694] close(22) = -1 EBADF (Bad file descriptor) [pid 3694] close(23) = -1 EBADF (Bad file descriptor) [pid 3694] close(24) = -1 EBADF (Bad file descriptor) [pid 3694] close(25) = -1 EBADF (Bad file descriptor) [pid 3694] close(26) = -1 EBADF (Bad file descriptor) [pid 3694] close(27) = -1 EBADF (Bad file descriptor) [pid 3694] close(28) = -1 EBADF (Bad file descriptor) [pid 3694] close(29) = -1 EBADF (Bad file descriptor) [pid 3694] exit_group(0) = ? [pid 3694] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 77 ./strace-static-x86_64: Process 3695 attached [pid 3695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3695] setpgid(0, 0) = 0 [pid 3695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3695] write(3, "1000", 4) = 4 [pid 3695] close(3) = 0 [pid 3695] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3695] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3695] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3695] write(4, "5", 1) = 1 [pid 3695] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.651929][ T3695] FAULT_INJECTION: forcing a failure. [ 65.651929][ T3695] name failslab, interval 1, probability 0, space 0, times 0 [ 65.665146][ T3695] CPU: 0 PID: 3695 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.675288][ T3695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.685404][ T3695] Call Trace: [ 65.688666][ T3695] [ 65.691573][ T3695] dump_stack_lvl+0xcd/0x134 [ 65.696236][ T3695] should_fail.cold+0x5/0xa [ 65.700718][ T3695] should_failslab+0x5/0x10 [ 65.705198][ T3695] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.710471][ T3695] ? ref_tracker_alloc+0x14c/0x550 [ 65.715577][ T3695] ref_tracker_alloc+0x14c/0x550 [ 65.720510][ T3695] ? ref_tracker_free+0x6b0/0x6b0 [ 65.725515][ T3695] ? lock_release+0x720/0x720 [ 65.730180][ T3695] ? do_raw_spin_lock+0x120/0x2a0 [ 65.735202][ T3695] ? rwlock_bug.part.0+0x90/0x90 [ 65.740556][ T3695] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.745932][ T3695] linkwatch_fire_event+0x202/0x260 [ 65.751134][ T3695] netif_carrier_off+0x96/0xb0 [ 65.755892][ T3695] __tun_detach+0xfe7/0x13e0 [ 65.760486][ T3695] tun_chr_close+0xc4/0x180 [ 65.765070][ T3695] __fput+0x277/0x9d0 [ 65.769034][ T3695] ? __tun_detach+0x13e0/0x13e0 [ 65.773874][ T3695] task_work_run+0xdd/0x1a0 [ 65.778382][ T3695] ptrace_notify+0x114/0x140 [ 65.783047][ T3695] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.789290][ T3695] syscall_exit_to_user_mode+0x9/0x60 [ 65.794646][ T3695] do_syscall_64+0x42/0xb0 [ 65.799062][ T3695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.804937][ T3695] RIP: 0033:0x7fc6cd2767a3 [ 65.809421][ T3695] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.829092][ T3695] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.837484][ T3695] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3695] close(3) = 0 [pid 3695] close(4) = 0 [pid 3695] close(5) = -1 EBADF (Bad file descriptor) [pid 3695] close(6) = -1 EBADF (Bad file descriptor) [pid 3695] close(7) = -1 EBADF (Bad file descriptor) [pid 3695] close(8) = -1 EBADF (Bad file descriptor) [pid 3695] close(9) = -1 EBADF (Bad file descriptor) [pid 3695] close(10) = -1 EBADF (Bad file descriptor) [pid 3695] close(11) = -1 EBADF (Bad file descriptor) [pid 3695] close(12) = -1 EBADF (Bad file descriptor) [pid 3695] close(13) = -1 EBADF (Bad file descriptor) [pid 3695] close(14) = -1 EBADF (Bad file descriptor) [pid 3695] close(15) = -1 EBADF (Bad file descriptor) [pid 3695] close(16) = -1 EBADF (Bad file descriptor) [pid 3695] close(17) = -1 EBADF (Bad file descriptor) [pid 3695] close(18) = -1 EBADF (Bad file descriptor) [pid 3695] close(19) = -1 EBADF (Bad file descriptor) [pid 3695] close(20) = -1 EBADF (Bad file descriptor) [pid 3695] close(21) = -1 EBADF (Bad file descriptor) [pid 3695] close(22) = -1 EBADF (Bad file descriptor) [pid 3695] close(23) = -1 EBADF (Bad file descriptor) [pid 3695] close(24) = -1 EBADF (Bad file descriptor) [pid 3695] close(25) = -1 EBADF (Bad file descriptor) [pid 3695] close(26) = -1 EBADF (Bad file descriptor) [pid 3695] close(27) = -1 EBADF (Bad file descriptor) [pid 3695] close(28) = -1 EBADF (Bad file descriptor) [pid 3695] close(29) = -1 EBADF (Bad file descriptor) [pid 3695] exit_group(0) = ? [pid 3695] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 78 ./strace-static-x86_64: Process 3696 attached [pid 3696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3696] setpgid(0, 0) = 0 [pid 3696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3696] write(3, "1000", 4) = 4 [pid 3696] close(3) = 0 [pid 3696] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3696] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3696] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3696] write(4, "5", 1) = 1 [pid 3696] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.845449][ T3695] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 65.853499][ T3695] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.861624][ T3695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.869575][ T3695] R13: 00000000000f4240 R14: 000000000000ff2a R15: 00007ffdc49a5924 [ 65.878056][ T3695] [ 65.922843][ T3696] FAULT_INJECTION: forcing a failure. [ 65.922843][ T3696] name failslab, interval 1, probability 0, space 0, times 0 [ 65.935537][ T3696] CPU: 0 PID: 3696 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.945680][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.955715][ T3696] Call Trace: [ 65.958983][ T3696] [ 65.961893][ T3696] dump_stack_lvl+0xcd/0x134 [ 65.966482][ T3696] should_fail.cold+0x5/0xa [ 65.970981][ T3696] should_failslab+0x5/0x10 [ 65.975469][ T3696] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.980748][ T3696] ? ref_tracker_alloc+0x14c/0x550 [ 65.985858][ T3696] ref_tracker_alloc+0x14c/0x550 [ 65.990779][ T3696] ? ref_tracker_free+0x6b0/0x6b0 [ 65.995886][ T3696] ? lock_release+0x720/0x720 [ 66.000571][ T3696] ? do_raw_spin_lock+0x120/0x2a0 [ 66.005579][ T3696] ? rwlock_bug.part.0+0x90/0x90 [ 66.010502][ T3696] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.015883][ T3696] linkwatch_fire_event+0x202/0x260 [ 66.021095][ T3696] netif_carrier_off+0x96/0xb0 [ 66.025858][ T3696] __tun_detach+0xfe7/0x13e0 [ 66.030447][ T3696] tun_chr_close+0xc4/0x180 [ 66.034936][ T3696] __fput+0x277/0x9d0 [ 66.038902][ T3696] ? __tun_detach+0x13e0/0x13e0 [ 66.043829][ T3696] task_work_run+0xdd/0x1a0 [ 66.048321][ T3696] ptrace_notify+0x114/0x140 [ 66.052898][ T3696] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 66.059129][ T3696] syscall_exit_to_user_mode+0x9/0x60 [ 66.064598][ T3696] do_syscall_64+0x42/0xb0 [ 66.069030][ T3696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.074923][ T3696] RIP: 0033:0x7fc6cd2767a3 [ 66.079349][ T3696] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 66.099133][ T3696] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 66.107543][ T3696] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 66.115504][ T3696] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3696] close(3) = 0 [pid 3696] close(4) = 0 [pid 3696] close(5) = -1 EBADF (Bad file descriptor) [pid 3696] close(6) = -1 EBADF (Bad file descriptor) [pid 3696] close(7) = -1 EBADF (Bad file descriptor) [pid 3696] close(8) = -1 EBADF (Bad file descriptor) [pid 3696] close(9) = -1 EBADF (Bad file descriptor) [pid 3696] close(10) = -1 EBADF (Bad file descriptor) [pid 3696] close(11) = -1 EBADF (Bad file descriptor) [pid 3696] close(12) = -1 EBADF (Bad file descriptor) [pid 3696] close(13) = -1 EBADF (Bad file descriptor) [pid 3696] close(14) = -1 EBADF (Bad file descriptor) [pid 3696] close(15) = -1 EBADF (Bad file descriptor) [pid 3696] close(16) = -1 EBADF (Bad file descriptor) [pid 3696] close(17) = -1 EBADF (Bad file descriptor) [pid 3696] close(18) = -1 EBADF (Bad file descriptor) [pid 3696] close(19) = -1 EBADF (Bad file descriptor) [pid 3696] close(20) = -1 EBADF (Bad file descriptor) [pid 3696] close(21) = -1 EBADF (Bad file descriptor) [pid 3696] close(22) = -1 EBADF (Bad file descriptor) [pid 3696] close(23) = -1 EBADF (Bad file descriptor) [pid 3696] close(24) = -1 EBADF (Bad file descriptor) [pid 3696] close(25) = -1 EBADF (Bad file descriptor) [pid 3696] close(26) = -1 EBADF (Bad file descriptor) [pid 3696] close(27) = -1 EBADF (Bad file descriptor) [pid 3696] close(28) = -1 EBADF (Bad file descriptor) [pid 3696] close(29) = -1 EBADF (Bad file descriptor) [pid 3696] exit_group(0) = ? [pid 3696] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 79 ./strace-static-x86_64: Process 3697 attached [pid 3697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3697] setpgid(0, 0) = 0 [pid 3697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3697] write(3, "1000", 4) = 4 [pid 3697] close(3) = 0 [pid 3697] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3697] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3697] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3697] write(4, "5", 1) = 1 [ 66.123459][ T3696] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.131440][ T3696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.139411][ T3696] R13: 00000000000f4240 R14: 0000000000010056 R15: 00007ffdc49a5924 [ 66.147396][ T3696] [ 66.197275][ T3697] FAULT_INJECTION: forcing a failure. [ 66.197275][ T3697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.210545][ T3697] CPU: 0 PID: 3697 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.220695][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.230752][ T3697] Call Trace: [ 66.234048][ T3697] [ 66.236965][ T3697] dump_stack_lvl+0xcd/0x134 [ 66.241554][ T3697] should_fail.cold+0x5/0xa [ 66.246073][ T3697] prepare_alloc_pages+0x17b/0x570 [ 66.251172][ T3697] __alloc_pages+0x12f/0x500 [ 66.255761][ T3697] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 66.262527][ T3697] ? ___slab_alloc+0x47e/0xf20 [ 66.267276][ T3697] alloc_pages+0x1aa/0x310 [ 66.271680][ T3697] ? mark_held_locks+0x9f/0xe0 [ 66.276523][ T3697] allocate_slab+0x26c/0x3c0 [ 66.281102][ T3697] ___slab_alloc+0x8df/0xf20 [ 66.285676][ T3697] ? napi_skb_cache_get+0xeb/0x170 [ 66.290777][ T3697] ? mark_held_locks+0x9f/0xe0 [ 66.295532][ T3697] kmem_cache_alloc_bulk+0x21c/0x720 [ 66.301243][ T3697] napi_skb_cache_get+0xeb/0x170 [ 66.306174][ T3697] __alloc_skb+0x9b/0x340 [ 66.310487][ T3697] ? __lock_acquire+0xbca/0x56c0 [ 66.315436][ T3697] __napi_alloc_skb+0x70/0x310 [ 66.320376][ T3697] napi_get_frags+0x5e/0x140 [ 66.324954][ T3697] tun_get_user+0xa07/0x3b00 [ 66.329565][ T3697] ? tun_build_skb+0x1170/0x1170 [ 66.334495][ T3697] ? lock_downgrade+0x6e0/0x6e0 [ 66.339343][ T3697] ? find_held_lock+0x2d/0x110 [ 66.344132][ T3697] tun_chr_write_iter+0xdb/0x200 [ 66.349066][ T3697] do_iter_readv_writev+0x3d1/0x640 [ 66.354261][ T3697] ? new_sync_write+0x560/0x560 [ 66.359109][ T3697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.365342][ T3697] ? security_file_permission+0xab/0xd0 [ 66.370887][ T3697] do_iter_write+0x182/0x700 [ 66.375564][ T3697] ? import_iovec+0x10c/0x150 [ 66.380233][ T3697] vfs_writev+0x1aa/0x630 [ 66.384574][ T3697] ? vfs_iter_write+0xa0/0xa0 [ 66.389260][ T3697] ? do_raw_spin_lock+0x120/0x2a0 [ 66.394286][ T3697] ? rwlock_bug.part.0+0x90/0x90 [ 66.399217][ T3697] ? _raw_spin_lock_irq+0x41/0x50 [ 66.404241][ T3697] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 66.410480][ T3697] ? find_held_lock+0x2d/0x110 [ 66.415243][ T3697] ? ptrace_notify+0xfa/0x140 [ 66.419923][ T3697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.426166][ T3697] ? __fget_light+0x20f/0x270 [ 66.430844][ T3697] do_writev+0x133/0x2f0 [ 66.435093][ T3697] ? vfs_writev+0x630/0x630 [ 66.439592][ T3697] ? lockdep_hardirqs_on+0x79/0x100 [ 66.444788][ T3697] ? _raw_spin_unlock_irq+0x2a/0x40 [ 66.449980][ T3697] ? ptrace_notify+0xfa/0x140 [ 66.454664][ T3697] do_syscall_64+0x35/0xb0 [ 66.459081][ T3697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.464974][ T3697] RIP: 0033:0x7fc6cd2b4c39 [ 66.469383][ T3697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.489010][ T3697] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3697] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.497437][ T3697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 66.505408][ T3697] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 66.513375][ T3697] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.521345][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.529395][ T3697] R13: 00000000000f4240 R14: 0000000000010165 R15: 00007ffdc49a5924 [ 66.537368][ T3697] [pid 3697] close(3) = 0 [pid 3697] close(4) = 0 [pid 3697] close(5) = -1 EBADF (Bad file descriptor) [pid 3697] close(6) = -1 EBADF (Bad file descriptor) [pid 3697] close(7) = -1 EBADF (Bad file descriptor) [pid 3697] close(8) = -1 EBADF (Bad file descriptor) [pid 3697] close(9) = -1 EBADF (Bad file descriptor) [pid 3697] close(10) = -1 EBADF (Bad file descriptor) [pid 3697] close(11) = -1 EBADF (Bad file descriptor) [pid 3697] close(12) = -1 EBADF (Bad file descriptor) [pid 3697] close(13) = -1 EBADF (Bad file descriptor) [pid 3697] close(14) = -1 EBADF (Bad file descriptor) [pid 3697] close(15) = -1 EBADF (Bad file descriptor) [pid 3697] close(16) = -1 EBADF (Bad file descriptor) [pid 3697] close(17) = -1 EBADF (Bad file descriptor) [pid 3697] close(18) = -1 EBADF (Bad file descriptor) [pid 3697] close(19) = -1 EBADF (Bad file descriptor) [pid 3697] close(20) = -1 EBADF (Bad file descriptor) [pid 3697] close(21) = -1 EBADF (Bad file descriptor) [pid 3697] close(22) = -1 EBADF (Bad file descriptor) [pid 3697] close(23) = -1 EBADF (Bad file descriptor) [pid 3697] close(24) = -1 EBADF (Bad file descriptor) [pid 3697] close(25) = -1 EBADF (Bad file descriptor) [pid 3697] close(26) = -1 EBADF (Bad file descriptor) [pid 3697] close(27) = -1 EBADF (Bad file descriptor) [pid 3697] close(28) = -1 EBADF (Bad file descriptor) [pid 3697] close(29) = -1 EBADF (Bad file descriptor) [pid 3697] exit_group(0) = ? [pid 3697] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 80 ./strace-static-x86_64: Process 3698 attached [pid 3698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3698] setpgid(0, 0) = 0 [pid 3698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3698] write(3, "1000", 4) = 4 [pid 3698] close(3) = 0 [pid 3698] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3698] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3698] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3698] write(4, "5", 1) = 1 [pid 3698] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.610347][ T3698] FAULT_INJECTION: forcing a failure. [ 66.610347][ T3698] name failslab, interval 1, probability 0, space 0, times 0 [ 66.623004][ T3698] CPU: 0 PID: 3698 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.633147][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.643195][ T3698] Call Trace: [ 66.646464][ T3698] [ 66.649389][ T3698] dump_stack_lvl+0xcd/0x134 [ 66.653969][ T3698] should_fail.cold+0x5/0xa [ 66.658459][ T3698] should_failslab+0x5/0x10 [ 66.662991][ T3698] kmem_cache_alloc_trace+0x60/0x3f0 [ 66.668267][ T3698] ? ref_tracker_alloc+0x14c/0x550 [ 66.673380][ T3698] ref_tracker_alloc+0x14c/0x550 [ 66.678305][ T3698] ? ref_tracker_free+0x6b0/0x6b0 [ 66.683313][ T3698] ? lock_release+0x720/0x720 [ 66.687979][ T3698] ? do_raw_spin_lock+0x120/0x2a0 [ 66.692993][ T3698] ? rwlock_bug.part.0+0x90/0x90 [ 66.697919][ T3698] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.703285][ T3698] linkwatch_fire_event+0x202/0x260 [ 66.709726][ T3698] netif_carrier_off+0x96/0xb0 [ 66.714484][ T3698] __tun_detach+0xfe7/0x13e0 [ 66.719077][ T3698] tun_chr_close+0xc4/0x180 [ 66.723573][ T3698] __fput+0x277/0x9d0 [ 66.727543][ T3698] ? __tun_detach+0x13e0/0x13e0 [ 66.732384][ T3698] task_work_run+0xdd/0x1a0 [ 66.736879][ T3698] ptrace_notify+0x114/0x140 [ 66.741633][ T3698] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 66.747953][ T3698] syscall_exit_to_user_mode+0x9/0x60 [ 66.753489][ T3698] do_syscall_64+0x42/0xb0 [ 66.757898][ T3698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.763784][ T3698] RIP: 0033:0x7fc6cd2767a3 [ 66.768187][ T3698] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 66.787802][ T3698] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 66.796295][ T3698] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3698] close(3) = 0 [pid 3698] close(4) = 0 [pid 3698] close(5) = -1 EBADF (Bad file descriptor) [pid 3698] close(6) = -1 EBADF (Bad file descriptor) [pid 3698] close(7) = -1 EBADF (Bad file descriptor) [pid 3698] close(8) = -1 EBADF (Bad file descriptor) [pid 3698] close(9) = -1 EBADF (Bad file descriptor) [pid 3698] close(10) = -1 EBADF (Bad file descriptor) [pid 3698] close(11) = -1 EBADF (Bad file descriptor) [pid 3698] close(12) = -1 EBADF (Bad file descriptor) [pid 3698] close(13) = -1 EBADF (Bad file descriptor) [pid 3698] close(14) = -1 EBADF (Bad file descriptor) [pid 3698] close(15) = -1 EBADF (Bad file descriptor) [pid 3698] close(16) = -1 EBADF (Bad file descriptor) [pid 3698] close(17) = -1 EBADF (Bad file descriptor) [pid 3698] close(18) = -1 EBADF (Bad file descriptor) [pid 3698] close(19) = -1 EBADF (Bad file descriptor) [pid 3698] close(20) = -1 EBADF (Bad file descriptor) [pid 3698] close(21) = -1 EBADF (Bad file descriptor) [pid 3698] close(22) = -1 EBADF (Bad file descriptor) [pid 3698] close(23) = -1 EBADF (Bad file descriptor) [pid 3698] close(24) = -1 EBADF (Bad file descriptor) [pid 3698] close(25) = -1 EBADF (Bad file descriptor) [pid 3698] close(26) = -1 EBADF (Bad file descriptor) [pid 3698] close(27) = -1 EBADF (Bad file descriptor) [pid 3698] close(28) = -1 EBADF (Bad file descriptor) [pid 3698] close(29) = -1 EBADF (Bad file descriptor) [pid 3698] exit_group(0) = ? [pid 3698] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3699 attached , child_tidptr=0x5555570bd5d0) = 81 [pid 3699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3699] setpgid(0, 0) = 0 [pid 3699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3699] write(3, "1000", 4) = 4 [pid 3699] close(3) = 0 [pid 3699] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 66.804252][ T3698] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 66.812224][ T3698] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.820286][ T3698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.828254][ T3698] R13: 00000000000f4240 R14: 0000000000010279 R15: 00007ffdc49a5924 [ 66.836226][ T3698] [pid 3699] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3699] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3699] write(4, "5", 1) = 1 [pid 3699] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.896344][ T3699] FAULT_INJECTION: forcing a failure. [ 66.896344][ T3699] name failslab, interval 1, probability 0, space 0, times 0 [ 66.909201][ T3699] CPU: 0 PID: 3699 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.919347][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.929418][ T3699] Call Trace: [ 66.932719][ T3699] [ 66.935638][ T3699] dump_stack_lvl+0xcd/0x134 [ 66.940235][ T3699] should_fail.cold+0x5/0xa [ 66.944759][ T3699] should_failslab+0x5/0x10 [ 66.949259][ T3699] kmem_cache_alloc_trace+0x60/0x3f0 [ 66.954541][ T3699] ? ref_tracker_alloc+0x14c/0x550 [ 66.959772][ T3699] ref_tracker_alloc+0x14c/0x550 [ 66.964712][ T3699] ? ref_tracker_free+0x6b0/0x6b0 [ 66.969730][ T3699] ? lock_release+0x720/0x720 [ 66.974591][ T3699] ? do_raw_spin_lock+0x120/0x2a0 [ 66.979608][ T3699] ? rwlock_bug.part.0+0x90/0x90 [ 66.984625][ T3699] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.989997][ T3699] linkwatch_fire_event+0x202/0x260 [ 66.995193][ T3699] netif_carrier_off+0x96/0xb0 [ 66.999949][ T3699] __tun_detach+0xfe7/0x13e0 [ 67.004536][ T3699] tun_chr_close+0xc4/0x180 [ 67.009028][ T3699] __fput+0x277/0x9d0 [ 67.013006][ T3699] ? __tun_detach+0x13e0/0x13e0 [ 67.017850][ T3699] task_work_run+0xdd/0x1a0 [ 67.022357][ T3699] ptrace_notify+0x114/0x140 [ 67.027206][ T3699] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.033549][ T3699] syscall_exit_to_user_mode+0x9/0x60 [ 67.038924][ T3699] do_syscall_64+0x42/0xb0 [ 67.043428][ T3699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.049602][ T3699] RIP: 0033:0x7fc6cd2767a3 [ 67.054013][ T3699] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.073613][ T3699] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.082026][ T3699] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3699] close(3) = 0 [pid 3699] close(4) = 0 [ 67.089993][ T3699] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.097955][ T3699] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.106451][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.114419][ T3699] R13: 00000000000f4240 R14: 0000000000010412 R15: 00007ffdc49a5924 [ 67.122494][ T3699] [pid 3699] close(5) = -1 EBADF (Bad file descriptor) [pid 3699] close(6) = -1 EBADF (Bad file descriptor) [pid 3699] close(7) = -1 EBADF (Bad file descriptor) [pid 3699] close(8) = -1 EBADF (Bad file descriptor) [pid 3699] close(9) = -1 EBADF (Bad file descriptor) [pid 3699] close(10) = -1 EBADF (Bad file descriptor) [pid 3699] close(11) = -1 EBADF (Bad file descriptor) [pid 3699] close(12) = -1 EBADF (Bad file descriptor) [pid 3699] close(13) = -1 EBADF (Bad file descriptor) [pid 3699] close(14) = -1 EBADF (Bad file descriptor) [pid 3699] close(15) = -1 EBADF (Bad file descriptor) [pid 3699] close(16) = -1 EBADF (Bad file descriptor) [pid 3699] close(17) = -1 EBADF (Bad file descriptor) [pid 3699] close(18) = -1 EBADF (Bad file descriptor) [pid 3699] close(19) = -1 EBADF (Bad file descriptor) [pid 3699] close(20) = -1 EBADF (Bad file descriptor) [pid 3699] close(21) = -1 EBADF (Bad file descriptor) [pid 3699] close(22) = -1 EBADF (Bad file descriptor) [pid 3699] close(23) = -1 EBADF (Bad file descriptor) [pid 3699] close(24) = -1 EBADF (Bad file descriptor) [pid 3699] close(25) = -1 EBADF (Bad file descriptor) [pid 3699] close(26) = -1 EBADF (Bad file descriptor) [pid 3699] close(27) = -1 EBADF (Bad file descriptor) [pid 3699] close(28) = -1 EBADF (Bad file descriptor) [pid 3699] close(29) = -1 EBADF (Bad file descriptor) [pid 3699] exit_group(0) = ? [pid 3699] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3700 attached , child_tidptr=0x5555570bd5d0) = 82 [pid 3700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3700] setpgid(0, 0) = 0 [pid 3700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3700] write(3, "1000", 4) = 4 [pid 3700] close(3) = 0 [pid 3700] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3700] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3700] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3700] write(4, "5", 1) = 1 [pid 3700] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.206388][ T3700] FAULT_INJECTION: forcing a failure. [ 67.206388][ T3700] name failslab, interval 1, probability 0, space 0, times 0 [ 67.220869][ T3700] CPU: 1 PID: 3700 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.231171][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.241317][ T3700] Call Trace: [ 67.244592][ T3700] [ 67.247720][ T3700] dump_stack_lvl+0xcd/0x134 [ 67.252547][ T3700] should_fail.cold+0x5/0xa [ 67.257148][ T3700] should_failslab+0x5/0x10 [ 67.261662][ T3700] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.267051][ T3700] ? ref_tracker_alloc+0x14c/0x550 [ 67.272188][ T3700] ref_tracker_alloc+0x14c/0x550 [ 67.277131][ T3700] ? ref_tracker_free+0x6b0/0x6b0 [ 67.282158][ T3700] ? lock_release+0x720/0x720 [ 67.286846][ T3700] ? do_raw_spin_lock+0x120/0x2a0 [ 67.292044][ T3700] ? rwlock_bug.part.0+0x90/0x90 [ 67.296986][ T3700] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.302389][ T3700] linkwatch_fire_event+0x202/0x260 [ 67.307706][ T3700] netif_carrier_off+0x96/0xb0 [ 67.312505][ T3700] __tun_detach+0xfe7/0x13e0 [ 67.317112][ T3700] tun_chr_close+0xc4/0x180 [ 67.321630][ T3700] __fput+0x277/0x9d0 [ 67.325613][ T3700] ? __tun_detach+0x13e0/0x13e0 [ 67.330488][ T3700] task_work_run+0xdd/0x1a0 [ 67.335019][ T3700] ptrace_notify+0x114/0x140 [ 67.339698][ T3700] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.346211][ T3700] syscall_exit_to_user_mode+0x9/0x60 [ 67.351596][ T3700] do_syscall_64+0x42/0xb0 [ 67.356013][ T3700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.361922][ T3700] RIP: 0033:0x7fc6cd2767a3 [ 67.366524][ T3700] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.386316][ T3700] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.394914][ T3700] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3700] close(3) = 0 [pid 3700] close(4) = 0 [pid 3700] close(5) = -1 EBADF (Bad file descriptor) [pid 3700] close(6) = -1 EBADF (Bad file descriptor) [pid 3700] close(7) = -1 EBADF (Bad file descriptor) [pid 3700] close(8) = -1 EBADF (Bad file descriptor) [pid 3700] close(9) = -1 EBADF (Bad file descriptor) [pid 3700] close(10) = -1 EBADF (Bad file descriptor) [pid 3700] close(11) = -1 EBADF (Bad file descriptor) [pid 3700] close(12) = -1 EBADF (Bad file descriptor) [pid 3700] close(13) = -1 EBADF (Bad file descriptor) [pid 3700] close(14) = -1 EBADF (Bad file descriptor) [pid 3700] close(15) = -1 EBADF (Bad file descriptor) [pid 3700] close(16) = -1 EBADF (Bad file descriptor) [pid 3700] close(17) = -1 EBADF (Bad file descriptor) [pid 3700] close(18) = -1 EBADF (Bad file descriptor) [pid 3700] close(19) = -1 EBADF (Bad file descriptor) [pid 3700] close(20) = -1 EBADF (Bad file descriptor) [pid 3700] close(21) = -1 EBADF (Bad file descriptor) [pid 3700] close(22) = -1 EBADF (Bad file descriptor) [pid 3700] close(23) = -1 EBADF (Bad file descriptor) [pid 3700] close(24) = -1 EBADF (Bad file descriptor) [pid 3700] close(25) = -1 EBADF (Bad file descriptor) [pid 3700] close(26) = -1 EBADF (Bad file descriptor) [pid 3700] close(27) = -1 EBADF (Bad file descriptor) [pid 3700] close(28) = -1 EBADF (Bad file descriptor) [pid 3700] close(29) = -1 EBADF (Bad file descriptor) [pid 3700] exit_group(0) = ? [pid 3700] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 83 ./strace-static-x86_64: Process 3701 attached [pid 3701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3701] setpgid(0, 0) = 0 [ 67.402892][ T3700] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.410955][ T3700] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.418941][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.426986][ T3700] R13: 00000000000f4240 R14: 0000000000010532 R15: 00007ffdc49a5924 [ 67.434951][ T3700] [pid 3701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3701] write(3, "1000", 4) = 4 [pid 3701] close(3) = 0 [pid 3701] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3701] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3701] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3701] write(4, "5", 1) = 1 [pid 3701] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.494697][ T3701] FAULT_INJECTION: forcing a failure. [ 67.494697][ T3701] name failslab, interval 1, probability 0, space 0, times 0 [ 67.507934][ T3701] CPU: 0 PID: 3701 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.518164][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.528227][ T3701] Call Trace: [ 67.532035][ T3701] [ 67.535679][ T3701] dump_stack_lvl+0xcd/0x134 [ 67.540310][ T3701] should_fail.cold+0x5/0xa [ 67.544840][ T3701] should_failslab+0x5/0x10 [ 67.549362][ T3701] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.554649][ T3701] ? ref_tracker_alloc+0x14c/0x550 [ 67.559759][ T3701] ref_tracker_alloc+0x14c/0x550 [ 67.564702][ T3701] ? ref_tracker_free+0x6b0/0x6b0 [ 67.569737][ T3701] ? lock_release+0x720/0x720 [ 67.574413][ T3701] ? do_raw_spin_lock+0x120/0x2a0 [ 67.579453][ T3701] ? rwlock_bug.part.0+0x90/0x90 [ 67.584484][ T3701] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.590052][ T3701] linkwatch_fire_event+0x202/0x260 [ 67.595261][ T3701] netif_carrier_off+0x96/0xb0 [ 67.600037][ T3701] __tun_detach+0xfe7/0x13e0 [ 67.604712][ T3701] tun_chr_close+0xc4/0x180 [ 67.609216][ T3701] __fput+0x277/0x9d0 [ 67.613190][ T3701] ? __tun_detach+0x13e0/0x13e0 [ 67.618033][ T3701] task_work_run+0xdd/0x1a0 [ 67.622532][ T3701] ptrace_notify+0x114/0x140 [ 67.627216][ T3701] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.633462][ T3701] syscall_exit_to_user_mode+0x9/0x60 [ 67.638854][ T3701] do_syscall_64+0x42/0xb0 [ 67.643286][ T3701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.649169][ T3701] RIP: 0033:0x7fc6cd2767a3 [ 67.653576][ T3701] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.673194][ T3701] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.681775][ T3701] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 67.689740][ T3701] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.697706][ T3701] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.705676][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.713652][ T3701] R13: 00000000000f4240 R14: 000000000001066a R15: 00007ffdc49a5924 [ 67.721627][ T3701] [pid 3701] close(3) = 0 [pid 3701] close(4) = 0 [pid 3701] close(5) = -1 EBADF (Bad file descriptor) [pid 3701] close(6) = -1 EBADF (Bad file descriptor) [pid 3701] close(7) = -1 EBADF (Bad file descriptor) [pid 3701] close(8) = -1 EBADF (Bad file descriptor) [pid 3701] close(9) = -1 EBADF (Bad file descriptor) [pid 3701] close(10) = -1 EBADF (Bad file descriptor) [pid 3701] close(11) = -1 EBADF (Bad file descriptor) [pid 3701] close(12) = -1 EBADF (Bad file descriptor) [pid 3701] close(13) = -1 EBADF (Bad file descriptor) [pid 3701] close(14) = -1 EBADF (Bad file descriptor) [pid 3701] close(15) = -1 EBADF (Bad file descriptor) [pid 3701] close(16) = -1 EBADF (Bad file descriptor) [pid 3701] close(17) = -1 EBADF (Bad file descriptor) [pid 3701] close(18) = -1 EBADF (Bad file descriptor) [pid 3701] close(19) = -1 EBADF (Bad file descriptor) [pid 3701] close(20) = -1 EBADF (Bad file descriptor) [pid 3701] close(21) = -1 EBADF (Bad file descriptor) [pid 3701] close(22) = -1 EBADF (Bad file descriptor) [pid 3701] close(23) = -1 EBADF (Bad file descriptor) [pid 3701] close(24) = -1 EBADF (Bad file descriptor) [pid 3701] close(25) = -1 EBADF (Bad file descriptor) [pid 3701] close(26) = -1 EBADF (Bad file descriptor) [pid 3701] close(27) = -1 EBADF (Bad file descriptor) [pid 3701] close(28) = -1 EBADF (Bad file descriptor) [pid 3701] close(29) = -1 EBADF (Bad file descriptor) [pid 3701] exit_group(0) = ? [pid 3701] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3702 attached [pid 3702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3702] setpgid(0, 0) = 0 [pid 3702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3702] write(3, "1000", 4) = 4 [pid 3702] close(3) = 0 [pid 3702] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 84 [pid 3702] <... openat resumed>) = 3 [pid 3702] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3702] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3702] write(4, "5", 1) = 1 [pid 3702] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.800549][ T3702] FAULT_INJECTION: forcing a failure. [ 67.800549][ T3702] name failslab, interval 1, probability 0, space 0, times 0 [ 67.813348][ T3702] CPU: 1 PID: 3702 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.823497][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.833549][ T3702] Call Trace: [ 67.836817][ T3702] [ 67.839732][ T3702] dump_stack_lvl+0xcd/0x134 [ 67.844316][ T3702] should_fail.cold+0x5/0xa [ 67.849086][ T3702] should_failslab+0x5/0x10 [ 67.853578][ T3702] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.858856][ T3702] ? ref_tracker_alloc+0x14c/0x550 [ 67.864046][ T3702] ref_tracker_alloc+0x14c/0x550 [ 67.868976][ T3702] ? ref_tracker_free+0x6b0/0x6b0 [ 67.874168][ T3702] ? lock_release+0x720/0x720 [ 67.878922][ T3702] ? do_raw_spin_lock+0x120/0x2a0 [ 67.883942][ T3702] ? rwlock_bug.part.0+0x90/0x90 [ 67.888866][ T3702] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.894230][ T3702] linkwatch_fire_event+0x202/0x260 [ 67.899424][ T3702] netif_carrier_off+0x96/0xb0 [ 67.904257][ T3702] __tun_detach+0xfe7/0x13e0 [ 67.908854][ T3702] tun_chr_close+0xc4/0x180 [ 67.913348][ T3702] __fput+0x277/0x9d0 [ 67.917514][ T3702] ? __tun_detach+0x13e0/0x13e0 [ 67.922371][ T3702] task_work_run+0xdd/0x1a0 [ 67.926867][ T3702] ptrace_notify+0x114/0x140 [ 67.931468][ T3702] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.937717][ T3702] syscall_exit_to_user_mode+0x9/0x60 [ 67.943098][ T3702] do_syscall_64+0x42/0xb0 [ 67.947607][ T3702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.953492][ T3702] RIP: 0033:0x7fc6cd2767a3 [ 67.957903][ T3702] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.977591][ T3702] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.986097][ T3702] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3702] close(3) = 0 [pid 3702] close(4) = 0 [pid 3702] close(5) = -1 EBADF (Bad file descriptor) [pid 3702] close(6) = -1 EBADF (Bad file descriptor) [pid 3702] close(7) = -1 EBADF (Bad file descriptor) [pid 3702] close(8) = -1 EBADF (Bad file descriptor) [pid 3702] close(9) = -1 EBADF (Bad file descriptor) [pid 3702] close(10) = -1 EBADF (Bad file descriptor) [pid 3702] close(11) = -1 EBADF (Bad file descriptor) [pid 3702] close(12) = -1 EBADF (Bad file descriptor) [pid 3702] close(13) = -1 EBADF (Bad file descriptor) [pid 3702] close(14) = -1 EBADF (Bad file descriptor) [pid 3702] close(15) = -1 EBADF (Bad file descriptor) [pid 3702] close(16) = -1 EBADF (Bad file descriptor) [pid 3702] close(17) = -1 EBADF (Bad file descriptor) [pid 3702] close(18) = -1 EBADF (Bad file descriptor) [pid 3702] close(19) = -1 EBADF (Bad file descriptor) [pid 3702] close(20) = -1 EBADF (Bad file descriptor) [pid 3702] close(21) = -1 EBADF (Bad file descriptor) [pid 3702] close(22) = -1 EBADF (Bad file descriptor) [pid 3702] close(23) = -1 EBADF (Bad file descriptor) [pid 3702] close(24) = -1 EBADF (Bad file descriptor) [pid 3702] close(25) = -1 EBADF (Bad file descriptor) [pid 3702] close(26) = -1 EBADF (Bad file descriptor) [pid 3702] close(27) = -1 EBADF (Bad file descriptor) [pid 3702] close(28) = -1 EBADF (Bad file descriptor) [ 67.994417][ T3702] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.002461][ T3702] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.010429][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.018399][ T3702] R13: 00000000000f4240 R14: 000000000001078b R15: 00007ffdc49a5924 [ 68.026368][ T3702] [pid 3702] close(29) = -1 EBADF (Bad file descriptor) [pid 3702] exit_group(0) = ? [pid 3702] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 85 ./strace-static-x86_64: Process 3703 attached [pid 3703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3703] setpgid(0, 0) = 0 [pid 3703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3703] write(3, "1000", 4) = 4 [pid 3703] close(3) = 0 [pid 3703] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3703] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3703] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3703] write(4, "5", 1) = 1 [pid 3703] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.092818][ T3703] FAULT_INJECTION: forcing a failure. [ 68.092818][ T3703] name failslab, interval 1, probability 0, space 0, times 0 [ 68.105522][ T3703] CPU: 0 PID: 3703 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.115845][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.126109][ T3703] Call Trace: [ 68.129380][ T3703] [ 68.132317][ T3703] dump_stack_lvl+0xcd/0x134 [ 68.136913][ T3703] should_fail.cold+0x5/0xa [ 68.141448][ T3703] should_failslab+0x5/0x10 [ 68.145960][ T3703] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.151261][ T3703] ? ref_tracker_alloc+0x14c/0x550 [ 68.156377][ T3703] ref_tracker_alloc+0x14c/0x550 [ 68.161312][ T3703] ? ref_tracker_free+0x6b0/0x6b0 [ 68.166331][ T3703] ? lock_release+0x720/0x720 [ 68.170999][ T3703] ? do_raw_spin_lock+0x120/0x2a0 [ 68.176014][ T3703] ? rwlock_bug.part.0+0x90/0x90 [ 68.180952][ T3703] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.186324][ T3703] linkwatch_fire_event+0x202/0x260 [ 68.191520][ T3703] netif_carrier_off+0x96/0xb0 [ 68.196273][ T3703] __tun_detach+0xfe7/0x13e0 [ 68.200860][ T3703] tun_chr_close+0xc4/0x180 [ 68.205352][ T3703] __fput+0x277/0x9d0 [ 68.209330][ T3703] ? __tun_detach+0x13e0/0x13e0 [ 68.214180][ T3703] task_work_run+0xdd/0x1a0 [ 68.218680][ T3703] ptrace_notify+0x114/0x140 [ 68.223263][ T3703] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.229506][ T3703] syscall_exit_to_user_mode+0x9/0x60 [ 68.234879][ T3703] do_syscall_64+0x42/0xb0 [ 68.239299][ T3703] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.245190][ T3703] RIP: 0033:0x7fc6cd2767a3 [ 68.249599][ T3703] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.269294][ T3703] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.277706][ T3703] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.285665][ T3703] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.293624][ T3703] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.301593][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.309567][ T3703] R13: 00000000000f4240 R14: 00000000000108be R15: 00007ffdc49a5924 [ 68.317551][ T3703] [pid 3703] close(3) = 0 [pid 3703] close(4) = 0 [pid 3703] close(5) = -1 EBADF (Bad file descriptor) [pid 3703] close(6) = -1 EBADF (Bad file descriptor) [pid 3703] close(7) = -1 EBADF (Bad file descriptor) [pid 3703] close(8) = -1 EBADF (Bad file descriptor) [pid 3703] close(9) = -1 EBADF (Bad file descriptor) [pid 3703] close(10) = -1 EBADF (Bad file descriptor) [pid 3703] close(11) = -1 EBADF (Bad file descriptor) [pid 3703] close(12) = -1 EBADF (Bad file descriptor) [pid 3703] close(13) = -1 EBADF (Bad file descriptor) [pid 3703] close(14) = -1 EBADF (Bad file descriptor) [pid 3703] close(15) = -1 EBADF (Bad file descriptor) [pid 3703] close(16) = -1 EBADF (Bad file descriptor) [pid 3703] close(17) = -1 EBADF (Bad file descriptor) [pid 3703] close(18) = -1 EBADF (Bad file descriptor) [pid 3703] close(19) = -1 EBADF (Bad file descriptor) [pid 3703] close(20) = -1 EBADF (Bad file descriptor) [pid 3703] close(21) = -1 EBADF (Bad file descriptor) [pid 3703] close(22) = -1 EBADF (Bad file descriptor) [pid 3703] close(23) = -1 EBADF (Bad file descriptor) [pid 3703] close(24) = -1 EBADF (Bad file descriptor) [pid 3703] close(25) = -1 EBADF (Bad file descriptor) [pid 3703] close(26) = -1 EBADF (Bad file descriptor) [pid 3703] close(27) = -1 EBADF (Bad file descriptor) [pid 3703] close(28) = -1 EBADF (Bad file descriptor) [pid 3703] close(29) = -1 EBADF (Bad file descriptor) [pid 3703] exit_group(0) = ? [pid 3703] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3704 attached , child_tidptr=0x5555570bd5d0) = 86 [pid 3704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3704] setpgid(0, 0) = 0 [pid 3704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3704] write(3, "1000", 4) = 4 [pid 3704] close(3) = 0 [pid 3704] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3704] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3704] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3704] write(4, "5", 1) = 1 [pid 3704] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.405402][ T3704] FAULT_INJECTION: forcing a failure. [ 68.405402][ T3704] name failslab, interval 1, probability 0, space 0, times 0 [ 68.418131][ T3704] CPU: 1 PID: 3704 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.428483][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.438548][ T3704] Call Trace: [ 68.441829][ T3704] [ 68.444747][ T3704] dump_stack_lvl+0xcd/0x134 [ 68.449330][ T3704] should_fail.cold+0x5/0xa [ 68.453833][ T3704] should_failslab+0x5/0x10 [ 68.458349][ T3704] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.463622][ T3704] ? ref_tracker_alloc+0x14c/0x550 [ 68.468811][ T3704] ref_tracker_alloc+0x14c/0x550 [ 68.473751][ T3704] ? ref_tracker_free+0x6b0/0x6b0 [ 68.478767][ T3704] ? lock_release+0x720/0x720 [ 68.483453][ T3704] ? do_raw_spin_lock+0x120/0x2a0 [ 68.488470][ T3704] ? rwlock_bug.part.0+0x90/0x90 [ 68.493415][ T3704] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.498967][ T3704] linkwatch_fire_event+0x202/0x260 [ 68.504168][ T3704] netif_carrier_off+0x96/0xb0 [ 68.508920][ T3704] __tun_detach+0xfe7/0x13e0 [ 68.513505][ T3704] tun_chr_close+0xc4/0x180 [ 68.517993][ T3704] __fput+0x277/0x9d0 [ 68.521961][ T3704] ? __tun_detach+0x13e0/0x13e0 [ 68.526798][ T3704] task_work_run+0xdd/0x1a0 [ 68.531292][ T3704] ptrace_notify+0x114/0x140 [ 68.535871][ T3704] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.542102][ T3704] syscall_exit_to_user_mode+0x9/0x60 [ 68.547462][ T3704] do_syscall_64+0x42/0xb0 [ 68.551870][ T3704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.557750][ T3704] RIP: 0033:0x7fc6cd2767a3 [ 68.562147][ T3704] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.581751][ T3704] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.590148][ T3704] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.598104][ T3704] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3704] close(3) = 0 [pid 3704] close(4) = 0 [pid 3704] close(5) = -1 EBADF (Bad file descriptor) [pid 3704] close(6) = -1 EBADF (Bad file descriptor) [pid 3704] close(7) = -1 EBADF (Bad file descriptor) [pid 3704] close(8) = -1 EBADF (Bad file descriptor) [pid 3704] close(9) = -1 EBADF (Bad file descriptor) [pid 3704] close(10) = -1 EBADF (Bad file descriptor) [pid 3704] close(11) = -1 EBADF (Bad file descriptor) [pid 3704] close(12) = -1 EBADF (Bad file descriptor) [pid 3704] close(13) = -1 EBADF (Bad file descriptor) [pid 3704] close(14) = -1 EBADF (Bad file descriptor) [pid 3704] close(15) = -1 EBADF (Bad file descriptor) [pid 3704] close(16) = -1 EBADF (Bad file descriptor) [pid 3704] close(17) = -1 EBADF (Bad file descriptor) [pid 3704] close(18) = -1 EBADF (Bad file descriptor) [ 68.606071][ T3704] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.614027][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.622169][ T3704] R13: 00000000000f4240 R14: 00000000000109df R15: 00007ffdc49a5924 [ 68.630140][ T3704] [pid 3704] close(19) = -1 EBADF (Bad file descriptor) [pid 3704] close(20) = -1 EBADF (Bad file descriptor) [pid 3704] close(21) = -1 EBADF (Bad file descriptor) [pid 3704] close(22) = -1 EBADF (Bad file descriptor) [pid 3704] close(23) = -1 EBADF (Bad file descriptor) [pid 3704] close(24) = -1 EBADF (Bad file descriptor) [pid 3704] close(25) = -1 EBADF (Bad file descriptor) [pid 3704] close(26) = -1 EBADF (Bad file descriptor) [pid 3704] close(27) = -1 EBADF (Bad file descriptor) [pid 3704] close(28) = -1 EBADF (Bad file descriptor) [pid 3704] close(29) = -1 EBADF (Bad file descriptor) [pid 3704] exit_group(0) = ? [pid 3704] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3705 attached , child_tidptr=0x5555570bd5d0) = 87 [pid 3705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3705] setpgid(0, 0) = 0 [pid 3705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3705] write(3, "1000", 4) = 4 [pid 3705] close(3) = 0 [pid 3705] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3705] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3705] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3705] write(4, "5", 1) = 1 [pid 3705] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.703272][ T3705] FAULT_INJECTION: forcing a failure. [ 68.703272][ T3705] name failslab, interval 1, probability 0, space 0, times 0 [ 68.716631][ T3705] CPU: 0 PID: 3705 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.726773][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.736907][ T3705] Call Trace: [ 68.740164][ T3705] [ 68.743072][ T3705] dump_stack_lvl+0xcd/0x134 [ 68.747667][ T3705] should_fail.cold+0x5/0xa [ 68.752152][ T3705] should_failslab+0x5/0x10 [ 68.756632][ T3705] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.761895][ T3705] ? ref_tracker_alloc+0x14c/0x550 [ 68.766984][ T3705] ref_tracker_alloc+0x14c/0x550 [ 68.772087][ T3705] ? ref_tracker_free+0x6b0/0x6b0 [ 68.777086][ T3705] ? lock_release+0x720/0x720 [ 68.781741][ T3705] ? do_raw_spin_lock+0x120/0x2a0 [ 68.786761][ T3705] ? rwlock_bug.part.0+0x90/0x90 [ 68.791677][ T3705] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.797180][ T3705] linkwatch_fire_event+0x202/0x260 [ 68.802833][ T3705] netif_carrier_off+0x96/0xb0 [ 68.807592][ T3705] __tun_detach+0xfe7/0x13e0 [ 68.812181][ T3705] tun_chr_close+0xc4/0x180 [ 68.816660][ T3705] __fput+0x277/0x9d0 [ 68.820621][ T3705] ? __tun_detach+0x13e0/0x13e0 [ 68.825459][ T3705] task_work_run+0xdd/0x1a0 [ 68.830051][ T3705] ptrace_notify+0x114/0x140 [ 68.834623][ T3705] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.840844][ T3705] syscall_exit_to_user_mode+0x9/0x60 [ 68.846204][ T3705] do_syscall_64+0x42/0xb0 [ 68.850631][ T3705] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.856504][ T3705] RIP: 0033:0x7fc6cd2767a3 [ 68.860896][ T3705] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.880584][ T3705] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.888995][ T3705] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.896949][ T3705] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.904913][ T3705] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.912860][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.921244][ T3705] R13: 00000000000f4240 R14: 0000000000010b19 R15: 00007ffdc49a5924 [ 68.929207][ T3705] [pid 3705] close(3) = 0 [pid 3705] close(4) = 0 [pid 3705] close(5) = -1 EBADF (Bad file descriptor) [pid 3705] close(6) = -1 EBADF (Bad file descriptor) [pid 3705] close(7) = -1 EBADF (Bad file descriptor) [pid 3705] close(8) = -1 EBADF (Bad file descriptor) [pid 3705] close(9) = -1 EBADF (Bad file descriptor) [pid 3705] close(10) = -1 EBADF (Bad file descriptor) [pid 3705] close(11) = -1 EBADF (Bad file descriptor) [pid 3705] close(12) = -1 EBADF (Bad file descriptor) [pid 3705] close(13) = -1 EBADF (Bad file descriptor) [pid 3705] close(14) = -1 EBADF (Bad file descriptor) [pid 3705] close(15) = -1 EBADF (Bad file descriptor) [pid 3705] close(16) = -1 EBADF (Bad file descriptor) [pid 3705] close(17) = -1 EBADF (Bad file descriptor) [pid 3705] close(18) = -1 EBADF (Bad file descriptor) [pid 3705] close(19) = -1 EBADF (Bad file descriptor) [pid 3705] close(20) = -1 EBADF (Bad file descriptor) [pid 3705] close(21) = -1 EBADF (Bad file descriptor) [pid 3705] close(22) = -1 EBADF (Bad file descriptor) [pid 3705] close(23) = -1 EBADF (Bad file descriptor) [pid 3705] close(24) = -1 EBADF (Bad file descriptor) [pid 3705] close(25) = -1 EBADF (Bad file descriptor) [pid 3705] close(26) = -1 EBADF (Bad file descriptor) [pid 3705] close(27) = -1 EBADF (Bad file descriptor) [pid 3705] close(28) = -1 EBADF (Bad file descriptor) [pid 3705] close(29) = -1 EBADF (Bad file descriptor) [pid 3705] exit_group(0) = ? [pid 3705] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3706 attached [pid 3706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3706] setpgid(0, 0) = 0 [pid 3706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3706] write(3, "1000", 4) = 4 [pid 3706] close(3) = 0 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 88 [pid 3706] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3706] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3706] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3706] write(4, "5", 1) = 1 [pid 3706] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.011734][ T3706] FAULT_INJECTION: forcing a failure. [ 69.011734][ T3706] name failslab, interval 1, probability 0, space 0, times 0 [ 69.024708][ T3706] CPU: 0 PID: 3706 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.035025][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.045062][ T3706] Call Trace: [ 69.048328][ T3706] [ 69.051246][ T3706] dump_stack_lvl+0xcd/0x134 [ 69.055844][ T3706] should_fail.cold+0x5/0xa [ 69.060342][ T3706] should_failslab+0x5/0x10 [ 69.065038][ T3706] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.070309][ T3706] ? ref_tracker_alloc+0x14c/0x550 [ 69.075588][ T3706] ref_tracker_alloc+0x14c/0x550 [ 69.080601][ T3706] ? ref_tracker_free+0x6b0/0x6b0 [ 69.085623][ T3706] ? lock_release+0x720/0x720 [ 69.090291][ T3706] ? do_raw_spin_lock+0x120/0x2a0 [ 69.095478][ T3706] ? rwlock_bug.part.0+0x90/0x90 [ 69.100402][ T3706] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.105872][ T3706] linkwatch_fire_event+0x202/0x260 [ 69.111067][ T3706] netif_carrier_off+0x96/0xb0 [ 69.115818][ T3706] __tun_detach+0xfe7/0x13e0 [ 69.120582][ T3706] tun_chr_close+0xc4/0x180 [ 69.125243][ T3706] __fput+0x277/0x9d0 [ 69.129297][ T3706] ? __tun_detach+0x13e0/0x13e0 [ 69.134136][ T3706] task_work_run+0xdd/0x1a0 [ 69.138716][ T3706] ptrace_notify+0x114/0x140 [ 69.143295][ T3706] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.149611][ T3706] syscall_exit_to_user_mode+0x9/0x60 [ 69.154968][ T3706] do_syscall_64+0x42/0xb0 [ 69.159371][ T3706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.165252][ T3706] RIP: 0033:0x7fc6cd2767a3 [ 69.169649][ T3706] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.189256][ T3706] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.197651][ T3706] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3706] close(3) = 0 [pid 3706] close(4) = 0 [pid 3706] close(5) = -1 EBADF (Bad file descriptor) [pid 3706] close(6) = -1 EBADF (Bad file descriptor) [pid 3706] close(7) = -1 EBADF (Bad file descriptor) [pid 3706] close(8) = -1 EBADF (Bad file descriptor) [pid 3706] close(9) = -1 EBADF (Bad file descriptor) [pid 3706] close(10) = -1 EBADF (Bad file descriptor) [pid 3706] close(11) = -1 EBADF (Bad file descriptor) [pid 3706] close(12) = -1 EBADF (Bad file descriptor) [pid 3706] close(13) = -1 EBADF (Bad file descriptor) [pid 3706] close(14) = -1 EBADF (Bad file descriptor) [pid 3706] close(15) = -1 EBADF (Bad file descriptor) [pid 3706] close(16) = -1 EBADF (Bad file descriptor) [pid 3706] close(17) = -1 EBADF (Bad file descriptor) [pid 3706] close(18) = -1 EBADF (Bad file descriptor) [pid 3706] close(19) = -1 EBADF (Bad file descriptor) [pid 3706] close(20) = -1 EBADF (Bad file descriptor) [pid 3706] close(21) = -1 EBADF (Bad file descriptor) [pid 3706] close(22) = -1 EBADF (Bad file descriptor) [pid 3706] close(23) = -1 EBADF (Bad file descriptor) [pid 3706] close(24) = -1 EBADF (Bad file descriptor) [pid 3706] close(25) = -1 EBADF (Bad file descriptor) [pid 3706] close(26) = -1 EBADF (Bad file descriptor) [pid 3706] close(27) = -1 EBADF (Bad file descriptor) [pid 3706] close(28) = -1 EBADF (Bad file descriptor) [pid 3706] close(29) = -1 EBADF (Bad file descriptor) [pid 3706] exit_group(0) = ? [pid 3706] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 89 ./strace-static-x86_64: Process 3707 attached [pid 3707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3707] setpgid(0, 0) = 0 [pid 3707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3707] write(3, "1000", 4) = 4 [pid 3707] close(3) = 0 [pid 3707] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 69.205884][ T3706] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.213924][ T3706] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.221876][ T3706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.229828][ T3706] R13: 00000000000f4240 R14: 0000000000010c40 R15: 00007ffdc49a5924 [ 69.237797][ T3706] [pid 3707] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3707] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3707] write(4, "5", 1) = 1 [pid 3707] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.296938][ T3707] FAULT_INJECTION: forcing a failure. [ 69.296938][ T3707] name failslab, interval 1, probability 0, space 0, times 0 [ 69.309998][ T3707] CPU: 0 PID: 3707 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.321163][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.331555][ T3707] Call Trace: [ 69.334821][ T3707] [ 69.337732][ T3707] dump_stack_lvl+0xcd/0x134 [ 69.342317][ T3707] should_fail.cold+0x5/0xa [ 69.346814][ T3707] should_failslab+0x5/0x10 [ 69.351302][ T3707] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.356585][ T3707] ? ref_tracker_alloc+0x14c/0x550 [ 69.361688][ T3707] ref_tracker_alloc+0x14c/0x550 [ 69.366782][ T3707] ? ref_tracker_free+0x6b0/0x6b0 [ 69.371804][ T3707] ? lock_release+0x720/0x720 [ 69.376470][ T3707] ? do_raw_spin_lock+0x120/0x2a0 [ 69.381479][ T3707] ? rwlock_bug.part.0+0x90/0x90 [ 69.386409][ T3707] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.392496][ T3707] linkwatch_fire_event+0x202/0x260 [ 69.397717][ T3707] netif_carrier_off+0x96/0xb0 [ 69.402474][ T3707] __tun_detach+0xfe7/0x13e0 [ 69.407062][ T3707] tun_chr_close+0xc4/0x180 [ 69.411875][ T3707] __fput+0x277/0x9d0 [ 69.415878][ T3707] ? __tun_detach+0x13e0/0x13e0 [ 69.420831][ T3707] task_work_run+0xdd/0x1a0 [ 69.425341][ T3707] ptrace_notify+0x114/0x140 [ 69.430197][ T3707] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.436623][ T3707] syscall_exit_to_user_mode+0x9/0x60 [ 69.442007][ T3707] do_syscall_64+0x42/0xb0 [ 69.446438][ T3707] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.452339][ T3707] RIP: 0033:0x7fc6cd2767a3 [ 69.457110][ T3707] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.476722][ T3707] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.485156][ T3707] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 69.493147][ T3707] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.501121][ T3707] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.509265][ T3707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.517238][ T3707] R13: 00000000000f4240 R14: 0000000000010d79 R15: 00007ffdc49a5924 [ 69.525829][ T3707] [pid 3707] close(3) = 0 [pid 3707] close(4) = 0 [pid 3707] close(5) = -1 EBADF (Bad file descriptor) [pid 3707] close(6) = -1 EBADF (Bad file descriptor) [pid 3707] close(7) = -1 EBADF (Bad file descriptor) [pid 3707] close(8) = -1 EBADF (Bad file descriptor) [pid 3707] close(9) = -1 EBADF (Bad file descriptor) [pid 3707] close(10) = -1 EBADF (Bad file descriptor) [pid 3707] close(11) = -1 EBADF (Bad file descriptor) [pid 3707] close(12) = -1 EBADF (Bad file descriptor) [pid 3707] close(13) = -1 EBADF (Bad file descriptor) [pid 3707] close(14) = -1 EBADF (Bad file descriptor) [pid 3707] close(15) = -1 EBADF (Bad file descriptor) [pid 3707] close(16) = -1 EBADF (Bad file descriptor) [pid 3707] close(17) = -1 EBADF (Bad file descriptor) [pid 3707] close(18) = -1 EBADF (Bad file descriptor) [pid 3707] close(19) = -1 EBADF (Bad file descriptor) [pid 3707] close(20) = -1 EBADF (Bad file descriptor) [pid 3707] close(21) = -1 EBADF (Bad file descriptor) [pid 3707] close(22) = -1 EBADF (Bad file descriptor) [pid 3707] close(23) = -1 EBADF (Bad file descriptor) [pid 3707] close(24) = -1 EBADF (Bad file descriptor) [pid 3707] close(25) = -1 EBADF (Bad file descriptor) [pid 3707] close(26) = -1 EBADF (Bad file descriptor) [pid 3707] close(27) = -1 EBADF (Bad file descriptor) [pid 3707] close(28) = -1 EBADF (Bad file descriptor) [pid 3707] close(29) = -1 EBADF (Bad file descriptor) [pid 3707] exit_group(0) = ? [pid 3707] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 90 ./strace-static-x86_64: Process 3708 attached [pid 3708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3708] setpgid(0, 0) = 0 [pid 3708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3708] write(3, "1000", 4) = 4 [pid 3708] close(3) = 0 [pid 3708] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3708] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3708] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3708] write(4, "5", 1) = 1 [pid 3708] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.605568][ T3708] FAULT_INJECTION: forcing a failure. [ 69.605568][ T3708] name failslab, interval 1, probability 0, space 0, times 0 [ 69.619023][ T3708] CPU: 1 PID: 3708 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.629580][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.639648][ T3708] Call Trace: [ 69.642937][ T3708] [ 69.645854][ T3708] dump_stack_lvl+0xcd/0x134 [ 69.650467][ T3708] should_fail.cold+0x5/0xa [ 69.654966][ T3708] should_failslab+0x5/0x10 [ 69.659466][ T3708] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.664760][ T3708] ? ref_tracker_alloc+0x14c/0x550 [ 69.669890][ T3708] ref_tracker_alloc+0x14c/0x550 [ 69.674848][ T3708] ? ref_tracker_free+0x6b0/0x6b0 [ 69.679862][ T3708] ? lock_release+0x720/0x720 [ 69.684536][ T3708] ? do_raw_spin_lock+0x120/0x2a0 [ 69.689574][ T3708] ? rwlock_bug.part.0+0x90/0x90 [ 69.694511][ T3708] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.699889][ T3708] linkwatch_fire_event+0x202/0x260 [ 69.705095][ T3708] netif_carrier_off+0x96/0xb0 [ 69.709861][ T3708] __tun_detach+0xfe7/0x13e0 [ 69.714470][ T3708] tun_chr_close+0xc4/0x180 [ 69.718966][ T3708] __fput+0x277/0x9d0 [ 69.722941][ T3708] ? __tun_detach+0x13e0/0x13e0 [ 69.727803][ T3708] task_work_run+0xdd/0x1a0 [ 69.732308][ T3708] ptrace_notify+0x114/0x140 [ 69.736907][ T3708] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.743166][ T3708] syscall_exit_to_user_mode+0x9/0x60 [ 69.748553][ T3708] do_syscall_64+0x42/0xb0 [ 69.752978][ T3708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.758867][ T3708] RIP: 0033:0x7fc6cd2767a3 [ 69.763275][ T3708] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.782967][ T3708] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.791381][ T3708] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3708] close(3) = 0 [pid 3708] close(4) = 0 [pid 3708] close(5) = -1 EBADF (Bad file descriptor) [pid 3708] close(6) = -1 EBADF (Bad file descriptor) [pid 3708] close(7) = -1 EBADF (Bad file descriptor) [pid 3708] close(8) = -1 EBADF (Bad file descriptor) [pid 3708] close(9) = -1 EBADF (Bad file descriptor) [pid 3708] close(10) = -1 EBADF (Bad file descriptor) [pid 3708] close(11) = -1 EBADF (Bad file descriptor) [pid 3708] close(12) = -1 EBADF (Bad file descriptor) [pid 3708] close(13) = -1 EBADF (Bad file descriptor) [pid 3708] close(14) = -1 EBADF (Bad file descriptor) [pid 3708] close(15) = -1 EBADF (Bad file descriptor) [pid 3708] close(16) = -1 EBADF (Bad file descriptor) [pid 3708] close(17) = -1 EBADF (Bad file descriptor) [pid 3708] close(18) = -1 EBADF (Bad file descriptor) [pid 3708] close(19) = -1 EBADF (Bad file descriptor) [pid 3708] close(20) = -1 EBADF (Bad file descriptor) [pid 3708] close(21) = -1 EBADF (Bad file descriptor) [pid 3708] close(22) = -1 EBADF (Bad file descriptor) [pid 3708] close(23) = -1 EBADF (Bad file descriptor) [pid 3708] close(24) = -1 EBADF (Bad file descriptor) [pid 3708] close(25) = -1 EBADF (Bad file descriptor) [pid 3708] close(26) = -1 EBADF (Bad file descriptor) [pid 3708] close(27) = -1 EBADF (Bad file descriptor) [pid 3708] close(28) = -1 EBADF (Bad file descriptor) [pid 3708] close(29) = -1 EBADF (Bad file descriptor) [pid 3708] exit_group(0) = ? [pid 3708] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3709 attached , child_tidptr=0x5555570bd5d0) = 91 [pid 3709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3709] setpgid(0, 0) = 0 [ 69.799537][ T3708] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.807519][ T3708] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.815572][ T3708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.823903][ T3708] R13: 00000000000f4240 R14: 0000000000010e98 R15: 00007ffdc49a5924 [ 69.831901][ T3708] [pid 3709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3709] write(3, "1000", 4) = 4 [pid 3709] close(3) = 0 [pid 3709] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3709] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3709] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3709] write(4, "5", 1) = 1 [pid 3709] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.897137][ T3709] FAULT_INJECTION: forcing a failure. [ 69.897137][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 69.910536][ T3709] CPU: 1 PID: 3709 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.920772][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.930823][ T3709] Call Trace: [ 69.934093][ T3709] [ 69.937014][ T3709] dump_stack_lvl+0xcd/0x134 [ 69.941623][ T3709] should_fail.cold+0x5/0xa [ 69.946136][ T3709] should_failslab+0x5/0x10 [ 69.950640][ T3709] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.955933][ T3709] ? ref_tracker_alloc+0x14c/0x550 [ 69.961132][ T3709] ref_tracker_alloc+0x14c/0x550 [ 69.966078][ T3709] ? ref_tracker_free+0x6b0/0x6b0 [ 69.971098][ T3709] ? lock_release+0x720/0x720 [ 69.975769][ T3709] ? do_raw_spin_lock+0x120/0x2a0 [ 69.980789][ T3709] ? rwlock_bug.part.0+0x90/0x90 [ 69.985724][ T3709] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.991093][ T3709] linkwatch_fire_event+0x202/0x260 [ 69.996378][ T3709] netif_carrier_off+0x96/0xb0 [ 70.001132][ T3709] __tun_detach+0xfe7/0x13e0 [ 70.005717][ T3709] tun_chr_close+0xc4/0x180 [ 70.010209][ T3709] __fput+0x277/0x9d0 [ 70.014184][ T3709] ? __tun_detach+0x13e0/0x13e0 [ 70.019035][ T3709] task_work_run+0xdd/0x1a0 [ 70.023539][ T3709] ptrace_notify+0x114/0x140 [ 70.028128][ T3709] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.034811][ T3709] syscall_exit_to_user_mode+0x9/0x60 [ 70.040187][ T3709] do_syscall_64+0x42/0xb0 [ 70.044604][ T3709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.050497][ T3709] RIP: 0033:0x7fc6cd2767a3 [ 70.054912][ T3709] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.074527][ T3709] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.082966][ T3709] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3709] close(3) = 0 [pid 3709] close(4) = 0 [pid 3709] close(5) = -1 EBADF (Bad file descriptor) [ 70.090943][ T3709] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 70.098911][ T3709] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.106875][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.115010][ T3709] R13: 00000000000f4240 R14: 0000000000010fc6 R15: 00007ffdc49a5924 [ 70.123018][ T3709] [pid 3709] close(6) = -1 EBADF (Bad file descriptor) [pid 3709] close(7) = -1 EBADF (Bad file descriptor) [pid 3709] close(8) = -1 EBADF (Bad file descriptor) [pid 3709] close(9) = -1 EBADF (Bad file descriptor) [pid 3709] close(10) = -1 EBADF (Bad file descriptor) [pid 3709] close(11) = -1 EBADF (Bad file descriptor) [pid 3709] close(12) = -1 EBADF (Bad file descriptor) [pid 3709] close(13) = -1 EBADF (Bad file descriptor) [pid 3709] close(14) = -1 EBADF (Bad file descriptor) [pid 3709] close(15) = -1 EBADF (Bad file descriptor) [pid 3709] close(16) = -1 EBADF (Bad file descriptor) [pid 3709] close(17) = -1 EBADF (Bad file descriptor) [pid 3709] close(18) = -1 EBADF (Bad file descriptor) [pid 3709] close(19) = -1 EBADF (Bad file descriptor) [pid 3709] close(20) = -1 EBADF (Bad file descriptor) [pid 3709] close(21) = -1 EBADF (Bad file descriptor) [pid 3709] close(22) = -1 EBADF (Bad file descriptor) [pid 3709] close(23) = -1 EBADF (Bad file descriptor) [pid 3709] close(24) = -1 EBADF (Bad file descriptor) [pid 3709] close(25) = -1 EBADF (Bad file descriptor) [pid 3709] close(26) = -1 EBADF (Bad file descriptor) [pid 3709] close(27) = -1 EBADF (Bad file descriptor) [pid 3709] close(28) = -1 EBADF (Bad file descriptor) [pid 3709] close(29) = -1 EBADF (Bad file descriptor) [pid 3709] exit_group(0) = ? [pid 3709] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3710 attached , child_tidptr=0x5555570bd5d0) = 92 [pid 3710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3710] setpgid(0, 0) = 0 [pid 3710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3710] write(3, "1000", 4) = 4 [pid 3710] close(3) = 0 [pid 3710] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3710] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3710] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3710] write(4, "5", 1) = 1 [pid 3710] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.209721][ T3710] FAULT_INJECTION: forcing a failure. [ 70.209721][ T3710] name failslab, interval 1, probability 0, space 0, times 0 [ 70.222628][ T3710] CPU: 1 PID: 3710 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.233139][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.243201][ T3710] Call Trace: [ 70.246491][ T3710] [ 70.249423][ T3710] dump_stack_lvl+0xcd/0x134 [ 70.254026][ T3710] should_fail.cold+0x5/0xa [ 70.258545][ T3710] should_failslab+0x5/0x10 [ 70.263053][ T3710] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.268360][ T3710] ? ref_tracker_alloc+0x14c/0x550 [ 70.273486][ T3710] ref_tracker_alloc+0x14c/0x550 [ 70.278433][ T3710] ? ref_tracker_free+0x6b0/0x6b0 [ 70.283466][ T3710] ? lock_release+0x720/0x720 [ 70.288176][ T3710] ? do_raw_spin_lock+0x120/0x2a0 [ 70.293296][ T3710] ? rwlock_bug.part.0+0x90/0x90 [ 70.298243][ T3710] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.303628][ T3710] linkwatch_fire_event+0x202/0x260 [ 70.308938][ T3710] netif_carrier_off+0x96/0xb0 [ 70.313732][ T3710] __tun_detach+0xfe7/0x13e0 [ 70.318346][ T3710] tun_chr_close+0xc4/0x180 [ 70.322885][ T3710] __fput+0x277/0x9d0 [ 70.326875][ T3710] ? __tun_detach+0x13e0/0x13e0 [ 70.331740][ T3710] task_work_run+0xdd/0x1a0 [ 70.336275][ T3710] ptrace_notify+0x114/0x140 [ 70.340886][ T3710] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.347167][ T3710] syscall_exit_to_user_mode+0x9/0x60 [ 70.352553][ T3710] do_syscall_64+0x42/0xb0 [ 70.356993][ T3710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.362895][ T3710] RIP: 0033:0x7fc6cd2767a3 [ 70.367312][ T3710] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.386917][ T3710] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.395348][ T3710] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 70.403317][ T3710] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 70.411298][ T3710] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.419284][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.427248][ T3710] R13: 00000000000f4240 R14: 00000000000110e8 R15: 00007ffdc49a5924 [ 70.435242][ T3710] [pid 3710] close(3) = 0 [pid 3710] close(4) = 0 [pid 3710] close(5) = -1 EBADF (Bad file descriptor) [pid 3710] close(6) = -1 EBADF (Bad file descriptor) [pid 3710] close(7) = -1 EBADF (Bad file descriptor) [pid 3710] close(8) = -1 EBADF (Bad file descriptor) [pid 3710] close(9) = -1 EBADF (Bad file descriptor) [pid 3710] close(10) = -1 EBADF (Bad file descriptor) [pid 3710] close(11) = -1 EBADF (Bad file descriptor) [pid 3710] close(12) = -1 EBADF (Bad file descriptor) [pid 3710] close(13) = -1 EBADF (Bad file descriptor) [pid 3710] close(14) = -1 EBADF (Bad file descriptor) [pid 3710] close(15) = -1 EBADF (Bad file descriptor) [pid 3710] close(16) = -1 EBADF (Bad file descriptor) [pid 3710] close(17) = -1 EBADF (Bad file descriptor) [pid 3710] close(18) = -1 EBADF (Bad file descriptor) [pid 3710] close(19) = -1 EBADF (Bad file descriptor) [pid 3710] close(20) = -1 EBADF (Bad file descriptor) [pid 3710] close(21) = -1 EBADF (Bad file descriptor) [pid 3710] close(22) = -1 EBADF (Bad file descriptor) [pid 3710] close(23) = -1 EBADF (Bad file descriptor) [pid 3710] close(24) = -1 EBADF (Bad file descriptor) [pid 3710] close(25) = -1 EBADF (Bad file descriptor) [pid 3710] close(26) = -1 EBADF (Bad file descriptor) [pid 3710] close(27) = -1 EBADF (Bad file descriptor) [pid 3710] close(28) = -1 EBADF (Bad file descriptor) [pid 3710] close(29) = -1 EBADF (Bad file descriptor) [pid 3710] exit_group(0) = ? [pid 3710] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 93 ./strace-static-x86_64: Process 3711 attached [pid 3711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3711] setpgid(0, 0) = 0 [pid 3711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3711] write(3, "1000", 4) = 4 [pid 3711] close(3) = 0 [pid 3711] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3711] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3711] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3711] write(4, "5", 1) = 1 [pid 3711] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.515370][ T3711] FAULT_INJECTION: forcing a failure. [ 70.515370][ T3711] name failslab, interval 1, probability 0, space 0, times 0 [ 70.528431][ T3711] CPU: 0 PID: 3711 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.538580][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.548720][ T3711] Call Trace: [ 70.551999][ T3711] [ 70.554914][ T3711] dump_stack_lvl+0xcd/0x134 [ 70.559498][ T3711] should_fail.cold+0x5/0xa [ 70.563991][ T3711] should_failslab+0x5/0x10 [ 70.568480][ T3711] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.573760][ T3711] ? ref_tracker_alloc+0x14c/0x550 [ 70.578860][ T3711] ref_tracker_alloc+0x14c/0x550 [ 70.583782][ T3711] ? ref_tracker_free+0x6b0/0x6b0 [ 70.588791][ T3711] ? lock_release+0x720/0x720 [ 70.593457][ T3711] ? do_raw_spin_lock+0x120/0x2a0 [ 70.598468][ T3711] ? rwlock_bug.part.0+0x90/0x90 [ 70.603392][ T3711] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.608754][ T3711] linkwatch_fire_event+0x202/0x260 [ 70.613944][ T3711] netif_carrier_off+0x96/0xb0 [ 70.618711][ T3711] __tun_detach+0xfe7/0x13e0 [ 70.623295][ T3711] tun_chr_close+0xc4/0x180 [ 70.627781][ T3711] __fput+0x277/0x9d0 [ 70.631749][ T3711] ? __tun_detach+0x13e0/0x13e0 [ 70.636588][ T3711] task_work_run+0xdd/0x1a0 [ 70.641078][ T3711] ptrace_notify+0x114/0x140 [ 70.645655][ T3711] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.651973][ T3711] syscall_exit_to_user_mode+0x9/0x60 [ 70.657357][ T3711] do_syscall_64+0x42/0xb0 [ 70.661868][ T3711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.667750][ T3711] RIP: 0033:0x7fc6cd2767a3 [ 70.672166][ T3711] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.691759][ T3711] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.700171][ T3711] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 70.708128][ T3711] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3711] close(3) = 0 [ 70.716084][ T3711] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.724064][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.732027][ T3711] R13: 00000000000f4240 R14: 0000000000011223 R15: 00007ffdc49a5924 [ 70.740006][ T3711] [pid 3711] close(4) = 0 [pid 3711] close(5) = -1 EBADF (Bad file descriptor) [pid 3711] close(6) = -1 EBADF (Bad file descriptor) [pid 3711] close(7) = -1 EBADF (Bad file descriptor) [pid 3711] close(8) = -1 EBADF (Bad file descriptor) [pid 3711] close(9) = -1 EBADF (Bad file descriptor) [pid 3711] close(10) = -1 EBADF (Bad file descriptor) [pid 3711] close(11) = -1 EBADF (Bad file descriptor) [pid 3711] close(12) = -1 EBADF (Bad file descriptor) [pid 3711] close(13) = -1 EBADF (Bad file descriptor) [pid 3711] close(14) = -1 EBADF (Bad file descriptor) [pid 3711] close(15) = -1 EBADF (Bad file descriptor) [pid 3711] close(16) = -1 EBADF (Bad file descriptor) [pid 3711] close(17) = -1 EBADF (Bad file descriptor) [pid 3711] close(18) = -1 EBADF (Bad file descriptor) [pid 3711] close(19) = -1 EBADF (Bad file descriptor) [pid 3711] close(20) = -1 EBADF (Bad file descriptor) [pid 3711] close(21) = -1 EBADF (Bad file descriptor) [pid 3711] close(22) = -1 EBADF (Bad file descriptor) [pid 3711] close(23) = -1 EBADF (Bad file descriptor) [pid 3711] close(24) = -1 EBADF (Bad file descriptor) [pid 3711] close(25) = -1 EBADF (Bad file descriptor) [pid 3711] close(26) = -1 EBADF (Bad file descriptor) [pid 3711] close(27) = -1 EBADF (Bad file descriptor) [pid 3711] close(28) = -1 EBADF (Bad file descriptor) [pid 3711] close(29) = -1 EBADF (Bad file descriptor) [pid 3711] exit_group(0) = ? [pid 3711] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 94 ./strace-static-x86_64: Process 3712 attached [pid 3712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3712] setpgid(0, 0) = 0 [pid 3712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3712] write(3, "1000", 4) = 4 [pid 3712] close(3) = 0 [pid 3712] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3712] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3712] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3712] write(4, "5", 1) = 1 [pid 3712] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.852754][ T3712] FAULT_INJECTION: forcing a failure. [ 70.852754][ T3712] name failslab, interval 1, probability 0, space 0, times 0 [ 70.865833][ T3712] CPU: 0 PID: 3712 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.876075][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.886216][ T3712] Call Trace: [ 70.889494][ T3712] [ 70.892417][ T3712] dump_stack_lvl+0xcd/0x134 [ 70.897016][ T3712] should_fail.cold+0x5/0xa [ 70.901519][ T3712] should_failslab+0x5/0x10 [ 70.906017][ T3712] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.911298][ T3712] ? ref_tracker_alloc+0x14c/0x550 [ 70.916413][ T3712] ref_tracker_alloc+0x14c/0x550 [ 70.921362][ T3712] ? ref_tracker_free+0x6b0/0x6b0 [ 70.926386][ T3712] ? lock_release+0x720/0x720 [ 70.931069][ T3712] ? do_raw_spin_lock+0x120/0x2a0 [ 70.936096][ T3712] ? rwlock_bug.part.0+0x90/0x90 [ 70.941036][ T3712] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.946443][ T3712] linkwatch_fire_event+0x202/0x260 [ 70.951654][ T3712] netif_carrier_off+0x96/0xb0 [ 70.956417][ T3712] __tun_detach+0xfe7/0x13e0 [ 70.961025][ T3712] tun_chr_close+0xc4/0x180 [ 70.965527][ T3712] __fput+0x277/0x9d0 [ 70.969505][ T3712] ? __tun_detach+0x13e0/0x13e0 [ 70.974467][ T3712] task_work_run+0xdd/0x1a0 [ 70.978973][ T3712] ptrace_notify+0x114/0x140 [ 70.983566][ T3712] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.989810][ T3712] syscall_exit_to_user_mode+0x9/0x60 [ 70.995200][ T3712] do_syscall_64+0x42/0xb0 [ 70.999639][ T3712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.005541][ T3712] RIP: 0033:0x7fc6cd2767a3 [ 71.009952][ T3712] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 71.029566][ T3712] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.037999][ T3712] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 71.045970][ T3712] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3712] close(3) = 0 [pid 3712] close(4) = 0 [pid 3712] close(5) = -1 EBADF (Bad file descriptor) [pid 3712] close(6) = -1 EBADF (Bad file descriptor) [pid 3712] close(7) = -1 EBADF (Bad file descriptor) [pid 3712] close(8) = -1 EBADF (Bad file descriptor) [pid 3712] close(9) = -1 EBADF (Bad file descriptor) [pid 3712] close(10) = -1 EBADF (Bad file descriptor) [pid 3712] close(11) = -1 EBADF (Bad file descriptor) [pid 3712] close(12) = -1 EBADF (Bad file descriptor) [pid 3712] close(13) = -1 EBADF (Bad file descriptor) [pid 3712] close(14) = -1 EBADF (Bad file descriptor) [pid 3712] close(15) = -1 EBADF (Bad file descriptor) [pid 3712] close(16) = -1 EBADF (Bad file descriptor) [pid 3712] close(17) = -1 EBADF (Bad file descriptor) [pid 3712] close(18) = -1 EBADF (Bad file descriptor) [pid 3712] close(19) = -1 EBADF (Bad file descriptor) [pid 3712] close(20) = -1 EBADF (Bad file descriptor) [pid 3712] close(21) = -1 EBADF (Bad file descriptor) [pid 3712] close(22) = -1 EBADF (Bad file descriptor) [pid 3712] close(23) = -1 EBADF (Bad file descriptor) [pid 3712] close(24) = -1 EBADF (Bad file descriptor) [pid 3712] close(25) = -1 EBADF (Bad file descriptor) [pid 3712] close(26) = -1 EBADF (Bad file descriptor) [pid 3712] close(27) = -1 EBADF (Bad file descriptor) [pid 3712] close(28) = -1 EBADF (Bad file descriptor) [pid 3712] close(29) = -1 EBADF (Bad file descriptor) [pid 3712] exit_group(0) = ? [pid 3712] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 95 ./strace-static-x86_64: Process 3713 attached [pid 3713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3713] setpgid(0, 0) = 0 [pid 3713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3713] write(3, "1000", 4) = 4 [pid 3713] close(3) = 0 [pid 3713] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3713] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3713] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_R