./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor839155525 <...> forked to background, child pid 3174 no interfaces have a carri[ 22.075891][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 22.089823][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. execve("./syz-executor839155525", ["./syz-executor839155525"], 0x7ffe0b83d620 /* 10 vars */) = 0 brk(NULL) = 0x5555570bd000 brk(0x5555570bdc40) = 0x5555570bdc40 arch_prctl(ARCH_SET_FS, 0x5555570bd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor839155525", 4096) = 27 brk(0x5555570dec40) = 0x5555570dec40 brk(0x5555570df000) = 0x5555570df000 mprotect(0x7fc6cd329000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 3603 ./strace-static-x86_64: Process 3603 attached [pid 3603] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3603] setsid() = 1 [pid 3603] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3603] unshare(CLONE_NEWNS) = 0 [pid 3603] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3603] unshare(CLONE_NEWIPC) = 0 [pid 3603] unshare(CLONE_NEWCGROUP) = 0 [pid 3603] unshare(CLONE_NEWUTS) = 0 [pid 3603] unshare(CLONE_SYSVSEM) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "16777216", 8) = 8 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "536870912", 9) = 9 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "8192", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3603] close(3) = 0 [pid 3603] getpid() = 1 [pid 3603] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 42.638873][ T3620] dump_stack_lvl+0xcd/0x134 [ 42.643486][ T3620] should_fail.cold+0x5/0xa [ 42.647983][ T3620] should_failslab+0x5/0x10 [ 42.652471][ T3620] kmem_cache_alloc_trace+0x60/0x3f0 [ 42.657740][ T3620] ? ref_tracker_alloc+0x14c/0x550 [ 42.662853][ T3620] ref_tracker_alloc+0x14c/0x550 [ 42.667782][ T3620] ? ref_tracker_free+0x6b0/0x6b0 [ 42.672800][ T3620] ? lock_release+0x720/0x720 [ 42.677470][ T3620] ? do_raw_spin_lock+0x120/0x2a0 [ 42.682576][ T3620] ? rwlock_bug.part.0+0x90/0x90 [ 42.687504][ T3620] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 42.692875][ T3620] linkwatch_fire_event+0x202/0x260 [ 42.698073][ T3620] netif_carrier_off+0x96/0xb0 [ 42.702835][ T3620] __tun_detach+0xfe7/0x13e0 [ 42.707427][ T3620] tun_chr_close+0xc4/0x180 [ 42.711922][ T3620] __fput+0x277/0x9d0 [ 42.715898][ T3620] ? __tun_detach+0x13e0/0x13e0 [ 42.720770][ T3620] task_work_run+0xdd/0x1a0 [ 42.725276][ T3620] ptrace_notify+0x114/0x140 [ 42.729966][ T3620] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 42.736205][ T3620] syscall_exit_to_user_mode+0x9/0x60 [ 42.741575][ T3620] do_syscall_64+0x42/0xb0 [ 42.745994][ T3620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 42.752057][ T3620] RIP: 0033:0x7fc6cd2767a3 [ 42.756482][ T3620] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 42.776088][ T3620] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 42.784501][ T3620] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 42.792472][ T3620] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 42.800448][ T3620] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 42.808429][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 42.816477][ T3620] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 42.824452][ T3620] [ 42.827472][ T3620] memory allocation failure, unreliable refcount tracker. [pid 3620] close(3) = 0 [pid 3620] close(4) = 0 [pid 3620] close(5) = -1 EBADF (Bad file descriptor) [pid 3620] close(6) = -1 EBADF (Bad file descriptor) [pid 3620] close(7) = -1 EBADF (Bad file descriptor) [pid 3620] close(8) = -1 EBADF (Bad file descriptor) [pid 3620] close(9) = -1 EBADF (Bad file descriptor) [pid 3620] close(10) = -1 EBADF (Bad file descriptor) [pid 3620] close(11) = -1 EBADF (Bad file descriptor) [pid 3620] close(12) = -1 EBADF (Bad file descriptor) [pid 3620] close(13) = -1 EBADF (Bad file descriptor) [pid 3620] close(14) = -1 EBADF (Bad file descriptor) [pid 3620] close(15) = -1 EBADF (Bad file descriptor) [pid 3620] close(16) = -1 EBADF (Bad file descriptor) [pid 3620] close(17) = -1 EBADF (Bad file descriptor) [pid 3620] close(18) = -1 EBADF (Bad file descriptor) [pid 3620] close(19) = -1 EBADF (Bad file descriptor) [pid 3620] close(20) = -1 EBADF (Bad file descriptor) [pid 3620] close(21) = -1 EBADF (Bad file descriptor) [pid 3620] close(22) = -1 EBADF (Bad file descriptor) [pid 3620] close(23) = -1 EBADF (Bad file descriptor) [pid 3620] close(24) = -1 EBADF (Bad file descriptor) [pid 3620] close(25) = -1 EBADF (Bad file descriptor) [pid 3620] close(26) = -1 EBADF (Bad file descriptor) [pid 3620] close(27) = -1 EBADF (Bad file descriptor) [pid 3620] close(28) = -1 EBADF (Bad file descriptor) [pid 3620] close(29) = -1 EBADF (Bad file descriptor) [pid 3620] exit_group(0) = ? [pid 3620] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=26} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 3 ./strace-static-x86_64: Process 3621 attached [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3621] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3621] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3621] write(4, "5", 1) = 1 [pid 3621] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 42.913363][ T3621] FAULT_INJECTION: forcing a failure. [ 42.913363][ T3621] name failslab, interval 1, probability 0, space 0, times 0 [ 42.925988][ T3621] CPU: 0 PID: 3621 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 42.936243][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.946316][ T3621] Call Trace: [ 42.949680][ T3621] [ 42.952705][ T3621] dump_stack_lvl+0xcd/0x134 [ 42.957298][ T3621] should_fail.cold+0x5/0xa [ 42.961844][ T3621] should_failslab+0x5/0x10 [ 42.966446][ T3621] kmem_cache_alloc_trace+0x60/0x3f0 [ 42.971751][ T3621] ? ref_tracker_alloc+0x14c/0x550 [ 42.976887][ T3621] ref_tracker_alloc+0x14c/0x550 [ 42.981824][ T3621] ? ref_tracker_free+0x6b0/0x6b0 [ 42.986837][ T3621] ? lock_release+0x720/0x720 [ 42.991502][ T3621] ? do_raw_spin_lock+0x120/0x2a0 [ 42.996528][ T3621] ? rwlock_bug.part.0+0x90/0x90 [ 43.001452][ T3621] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.006826][ T3621] linkwatch_fire_event+0x202/0x260 [ 43.012018][ T3621] netif_carrier_off+0x96/0xb0 [ 43.016784][ T3621] __tun_detach+0xfe7/0x13e0 [ 43.021402][ T3621] tun_chr_close+0xc4/0x180 [ 43.025938][ T3621] __fput+0x277/0x9d0 [ 43.029938][ T3621] ? __tun_detach+0x13e0/0x13e0 [ 43.034974][ T3621] task_work_run+0xdd/0x1a0 [ 43.039749][ T3621] ptrace_notify+0x114/0x140 [ 43.044568][ T3621] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.051023][ T3621] syscall_exit_to_user_mode+0x9/0x60 [ 43.056432][ T3621] do_syscall_64+0x42/0xb0 [ 43.061099][ T3621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.067012][ T3621] RIP: 0033:0x7fc6cd2767a3 [ 43.071431][ T3621] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.091405][ T3621] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.099855][ T3621] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 43.107829][ T3621] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.115885][ T3621] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.123870][ T3621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.131856][ T3621] R13: 00000000000f4240 R14: 000000000000a647 R15: 00007ffdc49a5924 [ 43.139848][ T3621] [pid 3621] close(3) = 0 [pid 3621] close(4) = 0 [pid 3621] close(5) = -1 EBADF (Bad file descriptor) [pid 3621] close(6) = -1 EBADF (Bad file descriptor) [pid 3621] close(7) = -1 EBADF (Bad file descriptor) [pid 3621] close(8) = -1 EBADF (Bad file descriptor) [pid 3621] close(9) = -1 EBADF (Bad file descriptor) [pid 3621] close(10) = -1 EBADF (Bad file descriptor) [pid 3621] close(11) = -1 EBADF (Bad file descriptor) [pid 3621] close(12) = -1 EBADF (Bad file descriptor) [pid 3621] close(13) = -1 EBADF (Bad file descriptor) [pid 3621] close(14) = -1 EBADF (Bad file descriptor) [pid 3621] close(15) = -1 EBADF (Bad file descriptor) [pid 3621] close(16) = -1 EBADF (Bad file descriptor) [pid 3621] close(17) = -1 EBADF (Bad file descriptor) [pid 3621] close(18) = -1 EBADF (Bad file descriptor) [pid 3621] close(19) = -1 EBADF (Bad file descriptor) [pid 3621] close(20) = -1 EBADF (Bad file descriptor) [pid 3621] close(21) = -1 EBADF (Bad file descriptor) [pid 3621] close(22) = -1 EBADF (Bad file descriptor) [pid 3621] close(23) = -1 EBADF (Bad file descriptor) [pid 3621] close(24) = -1 EBADF (Bad file descriptor) [pid 3621] close(25) = -1 EBADF (Bad file descriptor) [pid 3621] close(26) = -1 EBADF (Bad file descriptor) [pid 3621] close(27) = -1 EBADF (Bad file descriptor) [pid 3621] close(28) = -1 EBADF (Bad file descriptor) [pid 3621] close(29) = -1 EBADF (Bad file descriptor) [pid 3621] exit_group(0) = ? [pid 3621] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 4 ./strace-static-x86_64: Process 3622 attached [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3622] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3622] write(4, "5", 1) = 1 [pid 3622] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.218856][ T3622] FAULT_INJECTION: forcing a failure. [ 43.218856][ T3622] name failslab, interval 1, probability 0, space 0, times 0 [ 43.231563][ T3622] CPU: 1 PID: 3622 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.241707][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.251783][ T3622] Call Trace: [ 43.255067][ T3622] [ 43.258082][ T3622] dump_stack_lvl+0xcd/0x134 [ 43.262685][ T3622] should_fail.cold+0x5/0xa [ 43.267199][ T3622] should_failslab+0x5/0x10 [ 43.271705][ T3622] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.276993][ T3622] ? ref_tracker_alloc+0x14c/0x550 [ 43.282114][ T3622] ref_tracker_alloc+0x14c/0x550 [ 43.287066][ T3622] ? ref_tracker_free+0x6b0/0x6b0 [ 43.292116][ T3622] ? lock_release+0x720/0x720 [ 43.296815][ T3622] ? do_raw_spin_lock+0x120/0x2a0 [ 43.301846][ T3622] ? rwlock_bug.part.0+0x90/0x90 [ 43.306787][ T3622] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.312215][ T3622] linkwatch_fire_event+0x202/0x260 [ 43.317448][ T3622] netif_carrier_off+0x96/0xb0 [ 43.322236][ T3622] __tun_detach+0xfe7/0x13e0 [ 43.326870][ T3622] tun_chr_close+0xc4/0x180 [ 43.331395][ T3622] __fput+0x277/0x9d0 [ 43.335422][ T3622] ? __tun_detach+0x13e0/0x13e0 [ 43.340385][ T3622] task_work_run+0xdd/0x1a0 [ 43.345015][ T3622] ptrace_notify+0x114/0x140 [ 43.349619][ T3622] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.356170][ T3622] syscall_exit_to_user_mode+0x9/0x60 [ 43.361557][ T3622] do_syscall_64+0x42/0xb0 [ 43.366001][ T3622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.371907][ T3622] RIP: 0033:0x7fc6cd2767a3 [ 43.376329][ T3622] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.395950][ T3622] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.404373][ T3622] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3622] close(3) = 0 [pid 3622] close(4) = 0 [pid 3622] close(5) = -1 EBADF (Bad file descriptor) [pid 3622] close(6) = -1 EBADF (Bad file descriptor) [pid 3622] close(7) = -1 EBADF (Bad file descriptor) [pid 3622] close(8) = -1 EBADF (Bad file descriptor) [pid 3622] close(9) = -1 EBADF (Bad file descriptor) [pid 3622] close(10) = -1 EBADF (Bad file descriptor) [pid 3622] close(11) = -1 EBADF (Bad file descriptor) [pid 3622] close(12) = -1 EBADF (Bad file descriptor) [pid 3622] close(13) = -1 EBADF (Bad file descriptor) [pid 3622] close(14) = -1 EBADF (Bad file descriptor) [pid 3622] close(15) = -1 EBADF (Bad file descriptor) [pid 3622] close(16) = -1 EBADF (Bad file descriptor) [pid 3622] close(17) = -1 EBADF (Bad file descriptor) [pid 3622] close(18) = -1 EBADF (Bad file descriptor) [pid 3622] close(19) = -1 EBADF (Bad file descriptor) [pid 3622] close(20) = -1 EBADF (Bad file descriptor) [pid 3622] close(21) = -1 EBADF (Bad file descriptor) [pid 3622] close(22) = -1 EBADF (Bad file descriptor) [pid 3622] close(23) = -1 EBADF (Bad file descriptor) [pid 3622] close(24) = -1 EBADF (Bad file descriptor) [pid 3622] close(25) = -1 EBADF (Bad file descriptor) [ 43.413668][ T3622] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.421654][ T3622] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.429619][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.437577][ T3622] R13: 00000000000f4240 R14: 000000000000a787 R15: 00007ffdc49a5924 [ 43.445546][ T3622] [pid 3622] close(26) = -1 EBADF (Bad file descriptor) [pid 3622] close(27) = -1 EBADF (Bad file descriptor) [pid 3622] close(28) = -1 EBADF (Bad file descriptor) [pid 3622] close(29) = -1 EBADF (Bad file descriptor) [pid 3622] exit_group(0) = ? [pid 3622] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 5 ./strace-static-x86_64: Process 3623 attached [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3623] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3623] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3623] write(4, "5", 1) = 1 [pid 3623] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.516085][ T3623] FAULT_INJECTION: forcing a failure. [ 43.516085][ T3623] name failslab, interval 1, probability 0, space 0, times 0 [ 43.528790][ T3623] CPU: 1 PID: 3623 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.539609][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.549863][ T3623] Call Trace: [ 43.553132][ T3623] [ 43.556249][ T3623] dump_stack_lvl+0xcd/0x134 [ 43.560845][ T3623] should_fail.cold+0x5/0xa [ 43.565350][ T3623] should_failslab+0x5/0x10 [ 43.569853][ T3623] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.575139][ T3623] ? ref_tracker_alloc+0x14c/0x550 [ 43.580272][ T3623] ref_tracker_alloc+0x14c/0x550 [ 43.585219][ T3623] ? ref_tracker_free+0x6b0/0x6b0 [ 43.590243][ T3623] ? lock_release+0x720/0x720 [ 43.594921][ T3623] ? do_raw_spin_lock+0x120/0x2a0 [ 43.599948][ T3623] ? rwlock_bug.part.0+0x90/0x90 [ 43.604883][ T3623] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.610349][ T3623] linkwatch_fire_event+0x202/0x260 [ 43.615554][ T3623] netif_carrier_off+0x96/0xb0 [ 43.620315][ T3623] __tun_detach+0xfe7/0x13e0 [ 43.624906][ T3623] tun_chr_close+0xc4/0x180 [ 43.629402][ T3623] __fput+0x277/0x9d0 [ 43.633381][ T3623] ? __tun_detach+0x13e0/0x13e0 [ 43.638316][ T3623] task_work_run+0xdd/0x1a0 [ 43.642996][ T3623] ptrace_notify+0x114/0x140 [ 43.647604][ T3623] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.653859][ T3623] syscall_exit_to_user_mode+0x9/0x60 [ 43.659224][ T3623] do_syscall_64+0x42/0xb0 [ 43.663664][ T3623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.669555][ T3623] RIP: 0033:0x7fc6cd2767a3 [ 43.673968][ T3623] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.693566][ T3623] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.701978][ T3623] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3623] close(3) = 0 [pid 3623] close(4) = 0 [pid 3623] close(5) = -1 EBADF (Bad file descriptor) [pid 3623] close(6) = -1 EBADF (Bad file descriptor) [pid 3623] close(7) = -1 EBADF (Bad file descriptor) [pid 3623] close(8) = -1 EBADF (Bad file descriptor) [pid 3623] close(9) = -1 EBADF (Bad file descriptor) [pid 3623] close(10) = -1 EBADF (Bad file descriptor) [pid 3623] close(11) = -1 EBADF (Bad file descriptor) [pid 3623] close(12) = -1 EBADF (Bad file descriptor) [pid 3623] close(13) = -1 EBADF (Bad file descriptor) [pid 3623] close(14) = -1 EBADF (Bad file descriptor) [pid 3623] close(15) = -1 EBADF (Bad file descriptor) [pid 3623] close(16) = -1 EBADF (Bad file descriptor) [pid 3623] close(17) = -1 EBADF (Bad file descriptor) [pid 3623] close(18) = -1 EBADF (Bad file descriptor) [pid 3623] close(19) = -1 EBADF (Bad file descriptor) [pid 3623] close(20) = -1 EBADF (Bad file descriptor) [pid 3623] close(21) = -1 EBADF (Bad file descriptor) [ 43.709945][ T3623] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 43.717913][ T3623] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 43.725872][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.733832][ T3623] R13: 00000000000f4240 R14: 000000000000a8b4 R15: 00007ffdc49a5924 [ 43.741813][ T3623] [pid 3623] close(22) = -1 EBADF (Bad file descriptor) [pid 3623] close(23) = -1 EBADF (Bad file descriptor) [pid 3623] close(24) = -1 EBADF (Bad file descriptor) [pid 3623] close(25) = -1 EBADF (Bad file descriptor) [pid 3623] close(26) = -1 EBADF (Bad file descriptor) [pid 3623] close(27) = -1 EBADF (Bad file descriptor) [pid 3623] close(28) = -1 EBADF (Bad file descriptor) [pid 3623] close(29) = -1 EBADF (Bad file descriptor) [pid 3623] exit_group(0) = ? [pid 3623] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3624 attached , child_tidptr=0x5555570bd5d0) = 6 [pid 3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3624] setpgid(0, 0) = 0 [pid 3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3624] write(3, "1000", 4) = 4 [pid 3624] close(3) = 0 [pid 3624] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3624] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3624] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3624] write(4, "5", 1) = 1 [pid 3624] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 43.813958][ T3624] FAULT_INJECTION: forcing a failure. [ 43.813958][ T3624] name failslab, interval 1, probability 0, space 0, times 0 [ 43.826609][ T3624] CPU: 1 PID: 3624 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 43.836985][ T3624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.847045][ T3624] Call Trace: [ 43.850762][ T3624] [ 43.853696][ T3624] dump_stack_lvl+0xcd/0x134 [ 43.858280][ T3624] should_fail.cold+0x5/0xa [ 43.862781][ T3624] should_failslab+0x5/0x10 [ 43.867268][ T3624] kmem_cache_alloc_trace+0x60/0x3f0 [ 43.872540][ T3624] ? ref_tracker_alloc+0x14c/0x550 [ 43.877639][ T3624] ref_tracker_alloc+0x14c/0x550 [ 43.882565][ T3624] ? ref_tracker_free+0x6b0/0x6b0 [ 43.887660][ T3624] ? lock_release+0x720/0x720 [ 43.892328][ T3624] ? do_raw_spin_lock+0x120/0x2a0 [ 43.897361][ T3624] ? rwlock_bug.part.0+0x90/0x90 [ 43.902306][ T3624] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 43.907670][ T3624] linkwatch_fire_event+0x202/0x260 [ 43.912864][ T3624] netif_carrier_off+0x96/0xb0 [ 43.917613][ T3624] __tun_detach+0xfe7/0x13e0 [ 43.922197][ T3624] tun_chr_close+0xc4/0x180 [ 43.926683][ T3624] __fput+0x277/0x9d0 [ 43.930671][ T3624] ? __tun_detach+0x13e0/0x13e0 [ 43.935509][ T3624] task_work_run+0xdd/0x1a0 [ 43.940003][ T3624] ptrace_notify+0x114/0x140 [ 43.944584][ T3624] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 43.950813][ T3624] syscall_exit_to_user_mode+0x9/0x60 [ 43.956174][ T3624] do_syscall_64+0x42/0xb0 [ 43.960666][ T3624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.966545][ T3624] RIP: 0033:0x7fc6cd2767a3 [ 43.970943][ T3624] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 43.990535][ T3624] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 43.998935][ T3624] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 44.006890][ T3624] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 44.014846][ T3624] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.022797][ T3624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.030753][ T3624] R13: 00000000000f4240 R14: 000000000000a9dc R15: 00007ffdc49a5924 [ 44.038725][ T3624] [pid 3624] close(3) = 0 [pid 3624] close(4) = 0 [pid 3624] close(5) = -1 EBADF (Bad file descriptor) [pid 3624] close(6) = -1 EBADF (Bad file descriptor) [pid 3624] close(7) = -1 EBADF (Bad file descriptor) [pid 3624] close(8) = -1 EBADF (Bad file descriptor) [pid 3624] close(9) = -1 EBADF (Bad file descriptor) [pid 3624] close(10) = -1 EBADF (Bad file descriptor) [pid 3624] close(11) = -1 EBADF (Bad file descriptor) [pid 3624] close(12) = -1 EBADF (Bad file descriptor) [pid 3624] close(13) = -1 EBADF (Bad file descriptor) [pid 3624] close(14) = -1 EBADF (Bad file descriptor) [pid 3624] close(15) = -1 EBADF (Bad file descriptor) [pid 3624] close(16) = -1 EBADF (Bad file descriptor) [pid 3624] close(17) = -1 EBADF (Bad file descriptor) [pid 3624] close(18) = -1 EBADF (Bad file descriptor) [pid 3624] close(19) = -1 EBADF (Bad file descriptor) [pid 3624] close(20) = -1 EBADF (Bad file descriptor) [pid 3624] close(21) = -1 EBADF (Bad file descriptor) [pid 3624] close(22) = -1 EBADF (Bad file descriptor) [pid 3624] close(23) = -1 EBADF (Bad file descriptor) [pid 3624] close(24) = -1 EBADF (Bad file descriptor) [pid 3624] close(25) = -1 EBADF (Bad file descriptor) [pid 3624] close(26) = -1 EBADF (Bad file descriptor) [pid 3624] close(27) = -1 EBADF (Bad file descriptor) [pid 3624] close(28) = -1 EBADF (Bad file descriptor) [pid 3624] close(29) = -1 EBADF (Bad file descriptor) [pid 3624] exit_group(0) = ? [pid 3624] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3625 attached , child_tidptr=0x5555570bd5d0) = 7 [pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3625] setpgid(0, 0) = 0 [pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3625] write(3, "1000", 4) = 4 [pid 3625] close(3) = 0 [pid 3625] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3625] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3625] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3625] write(4, "5", 1) = 1 [ 44.121863][ T3625] FAULT_INJECTION: forcing a failure. [ 44.121863][ T3625] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.135316][ T3625] CPU: 0 PID: 3625 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.145456][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.155505][ T3625] Call Trace: [ 44.158779][ T3625] [ 44.161692][ T3625] dump_stack_lvl+0xcd/0x134 [ 44.166278][ T3625] should_fail.cold+0x5/0xa [ 44.170771][ T3625] prepare_alloc_pages+0x17b/0x570 [ 44.175962][ T3625] __alloc_pages+0x12f/0x500 [ 44.180554][ T3625] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 44.187344][ T3625] ? ___slab_alloc+0x47e/0xf20 [ 44.192320][ T3625] alloc_pages+0x1aa/0x310 [ 44.196729][ T3625] ? mark_held_locks+0x9f/0xe0 [ 44.201485][ T3625] allocate_slab+0x26c/0x3c0 [ 44.206074][ T3625] ___slab_alloc+0x8df/0xf20 [ 44.210648][ T3625] ? napi_skb_cache_get+0xeb/0x170 [ 44.215749][ T3625] ? mark_held_locks+0x9f/0xe0 [ 44.220502][ T3625] kmem_cache_alloc_bulk+0x21c/0x720 [ 44.225777][ T3625] napi_skb_cache_get+0xeb/0x170 [ 44.230721][ T3625] __alloc_skb+0x9b/0x340 [ 44.235124][ T3625] ? __lock_acquire+0xbca/0x56c0 [ 44.240055][ T3625] __napi_alloc_skb+0x70/0x310 [ 44.244856][ T3625] napi_get_frags+0x5e/0x140 [ 44.249522][ T3625] tun_get_user+0xa07/0x3b00 [ 44.254109][ T3625] ? tun_build_skb+0x1170/0x1170 [ 44.259036][ T3625] ? lock_downgrade+0x6e0/0x6e0 [ 44.263887][ T3625] ? find_held_lock+0x2d/0x110 [ 44.268643][ T3625] tun_chr_write_iter+0xdb/0x200 [ 44.273568][ T3625] do_iter_readv_writev+0x3d1/0x640 [ 44.278772][ T3625] ? new_sync_write+0x560/0x560 [ 44.283611][ T3625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 44.289837][ T3625] ? security_file_permission+0xab/0xd0 [ 44.295378][ T3625] do_iter_write+0x182/0x700 [ 44.299962][ T3625] ? import_iovec+0x10c/0x150 [ 44.304627][ T3625] vfs_writev+0x1aa/0x630 [ 44.308944][ T3625] ? vfs_iter_write+0xa0/0xa0 [ 44.313600][ T3625] ? do_raw_spin_lock+0x120/0x2a0 [ 44.318611][ T3625] ? rwlock_bug.part.0+0x90/0x90 [ 44.323555][ T3625] ? _raw_spin_lock_irq+0x41/0x50 [ 44.328581][ T3625] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 44.334809][ T3625] ? find_held_lock+0x2d/0x110 [ 44.339564][ T3625] ? ptrace_notify+0xfa/0x140 [ 44.344232][ T3625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 44.350642][ T3625] ? __fget_light+0x20f/0x270 [ 44.355396][ T3625] do_writev+0x133/0x2f0 [ 44.359626][ T3625] ? vfs_writev+0x630/0x630 [ 44.364109][ T3625] ? lockdep_hardirqs_on+0x79/0x100 [ 44.369816][ T3625] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.375091][ T3625] ? ptrace_notify+0xfa/0x140 [ 44.379760][ T3625] do_syscall_64+0x35/0xb0 [ 44.384163][ T3625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.390042][ T3625] RIP: 0033:0x7fc6cd2b4c39 [ 44.394461][ T3625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.414315][ T3625] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3625] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.422804][ T3625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 44.430772][ T3625] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 44.438764][ T3625] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.446729][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.454685][ T3625] R13: 00000000000f4240 R14: 000000000000ab06 R15: 00007ffdc49a5924 [ 44.462665][ T3625] [pid 3625] close(3) = 0 [pid 3625] close(4) = 0 [pid 3625] close(5) = -1 EBADF (Bad file descriptor) [pid 3625] close(6) = -1 EBADF (Bad file descriptor) [pid 3625] close(7) = -1 EBADF (Bad file descriptor) [pid 3625] close(8) = -1 EBADF (Bad file descriptor) [pid 3625] close(9) = -1 EBADF (Bad file descriptor) [pid 3625] close(10) = -1 EBADF (Bad file descriptor) [pid 3625] close(11) = -1 EBADF (Bad file descriptor) [pid 3625] close(12) = -1 EBADF (Bad file descriptor) [pid 3625] close(13) = -1 EBADF (Bad file descriptor) [pid 3625] close(14) = -1 EBADF (Bad file descriptor) [pid 3625] close(15) = -1 EBADF (Bad file descriptor) [pid 3625] close(16) = -1 EBADF (Bad file descriptor) [pid 3625] close(17) = -1 EBADF (Bad file descriptor) [pid 3625] close(18) = -1 EBADF (Bad file descriptor) [pid 3625] close(19) = -1 EBADF (Bad file descriptor) [pid 3625] close(20) = -1 EBADF (Bad file descriptor) [pid 3625] close(21) = -1 EBADF (Bad file descriptor) [pid 3625] close(22) = -1 EBADF (Bad file descriptor) [pid 3625] close(23) = -1 EBADF (Bad file descriptor) [pid 3625] close(24) = -1 EBADF (Bad file descriptor) [pid 3625] close(25) = -1 EBADF (Bad file descriptor) [pid 3625] close(26) = -1 EBADF (Bad file descriptor) [pid 3625] close(27) = -1 EBADF (Bad file descriptor) [pid 3625] close(28) = -1 EBADF (Bad file descriptor) [pid 3625] close(29) = -1 EBADF (Bad file descriptor) [pid 3625] exit_group(0) = ? [pid 3625] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3626 attached , child_tidptr=0x5555570bd5d0) = 8 [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3626] setpgid(0, 0) = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3626] write(3, "1000", 4) = 4 [pid 3626] close(3) = 0 [pid 3626] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3626] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3626] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3626] write(4, "5", 1) = 1 [pid 3626] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.556661][ T3626] FAULT_INJECTION: forcing a failure. [ 44.556661][ T3626] name failslab, interval 1, probability 0, space 0, times 0 [ 44.569463][ T3626] CPU: 0 PID: 3626 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.579694][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.589749][ T3626] Call Trace: [ 44.593023][ T3626] [ 44.595932][ T3626] dump_stack_lvl+0xcd/0x134 [ 44.600507][ T3626] should_fail.cold+0x5/0xa [ 44.604989][ T3626] should_failslab+0x5/0x10 [ 44.609471][ T3626] kmem_cache_alloc_trace+0x60/0x3f0 [ 44.614737][ T3626] ? ref_tracker_alloc+0x14c/0x550 [ 44.619831][ T3626] ref_tracker_alloc+0x14c/0x550 [ 44.624746][ T3626] ? ref_tracker_free+0x6b0/0x6b0 [ 44.629761][ T3626] ? lock_release+0x720/0x720 [ 44.634431][ T3626] ? do_raw_spin_lock+0x120/0x2a0 [ 44.639443][ T3626] ? rwlock_bug.part.0+0x90/0x90 [ 44.644378][ T3626] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 44.649749][ T3626] linkwatch_fire_event+0x202/0x260 [ 44.654936][ T3626] netif_carrier_off+0x96/0xb0 [ 44.659679][ T3626] __tun_detach+0xfe7/0x13e0 [ 44.664255][ T3626] tun_chr_close+0xc4/0x180 [ 44.668735][ T3626] __fput+0x277/0x9d0 [ 44.672695][ T3626] ? __tun_detach+0x13e0/0x13e0 [ 44.677528][ T3626] task_work_run+0xdd/0x1a0 [ 44.682024][ T3626] ptrace_notify+0x114/0x140 [ 44.686594][ T3626] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 44.692824][ T3626] syscall_exit_to_user_mode+0x9/0x60 [ 44.698176][ T3626] do_syscall_64+0x42/0xb0 [ 44.702572][ T3626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.708447][ T3626] RIP: 0033:0x7fc6cd2767a3 [ 44.712840][ T3626] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 44.732518][ T3626] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 44.740917][ T3626] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 44.748873][ T3626] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3626] close(3) = 0 [pid 3626] close(4) = 0 [pid 3626] close(5) = -1 EBADF (Bad file descriptor) [pid 3626] close(6) = -1 EBADF (Bad file descriptor) [pid 3626] close(7) = -1 EBADF (Bad file descriptor) [pid 3626] close(8) = -1 EBADF (Bad file descriptor) [pid 3626] close(9) = -1 EBADF (Bad file descriptor) [pid 3626] close(10) = -1 EBADF (Bad file descriptor) [pid 3626] close(11) = -1 EBADF (Bad file descriptor) [pid 3626] close(12) = -1 EBADF (Bad file descriptor) [pid 3626] close(13) = -1 EBADF (Bad file descriptor) [pid 3626] close(14) = -1 EBADF (Bad file descriptor) [pid 3626] close(15) = -1 EBADF (Bad file descriptor) [pid 3626] close(16) = -1 EBADF (Bad file descriptor) [pid 3626] close(17) = -1 EBADF (Bad file descriptor) [pid 3626] close(18) = -1 EBADF (Bad file descriptor) [pid 3626] close(19) = -1 EBADF (Bad file descriptor) [pid 3626] close(20) = -1 EBADF (Bad file descriptor) [pid 3626] close(21) = -1 EBADF (Bad file descriptor) [pid 3626] close(22) = -1 EBADF (Bad file descriptor) [ 44.756826][ T3626] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 44.764775][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.772823][ T3626] R13: 00000000000f4240 R14: 000000000000ac3f R15: 00007ffdc49a5924 [ 44.780786][ T3626] [pid 3626] close(23) = -1 EBADF (Bad file descriptor) [pid 3626] close(24) = -1 EBADF (Bad file descriptor) [pid 3626] close(25) = -1 EBADF (Bad file descriptor) [pid 3626] close(26) = -1 EBADF (Bad file descriptor) [pid 3626] close(27) = -1 EBADF (Bad file descriptor) [pid 3626] close(28) = -1 EBADF (Bad file descriptor) [pid 3626] close(29) = -1 EBADF (Bad file descriptor) [pid 3626] exit_group(0) = ? [pid 3626] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 9 ./strace-static-x86_64: Process 3627 attached [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3627] setpgid(0, 0) = 0 [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3627] write(3, "1000", 4) = 4 [pid 3627] close(3) = 0 [pid 3627] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3627] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3627] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3627] write(4, "5", 1) = 1 [pid 3627] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 44.853173][ T3627] FAULT_INJECTION: forcing a failure. [ 44.853173][ T3627] name failslab, interval 1, probability 0, space 0, times 0 [ 44.866025][ T3627] CPU: 1 PID: 3627 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 44.876184][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.886244][ T3627] Call Trace: [ 44.889521][ T3627] [ 44.892456][ T3627] dump_stack_lvl+0xcd/0x134 [ 44.897041][ T3627] should_fail.cold+0x5/0xa [ 44.901543][ T3627] should_failslab+0x5/0x10 [ 44.906036][ T3627] kmem_cache_alloc_trace+0x60/0x3f0 [ 44.911396][ T3627] ? ref_tracker_alloc+0x14c/0x550 [ 44.916497][ T3627] ref_tracker_alloc+0x14c/0x550 [ 44.921509][ T3627] ? ref_tracker_free+0x6b0/0x6b0 [ 44.926525][ T3627] ? lock_release+0x720/0x720 [ 44.931198][ T3627] ? do_raw_spin_lock+0x120/0x2a0 [ 44.936215][ T3627] ? rwlock_bug.part.0+0x90/0x90 [ 44.941142][ T3627] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 44.946508][ T3627] linkwatch_fire_event+0x202/0x260 [ 44.951706][ T3627] netif_carrier_off+0x96/0xb0 [ 44.956462][ T3627] __tun_detach+0xfe7/0x13e0 [ 44.961068][ T3627] tun_chr_close+0xc4/0x180 [ 44.965560][ T3627] __fput+0x277/0x9d0 [ 44.969531][ T3627] ? __tun_detach+0x13e0/0x13e0 [ 44.974380][ T3627] task_work_run+0xdd/0x1a0 [ 44.978886][ T3627] ptrace_notify+0x114/0x140 [ 44.983471][ T3627] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 44.989708][ T3627] syscall_exit_to_user_mode+0x9/0x60 [ 44.995075][ T3627] do_syscall_64+0x42/0xb0 [ 44.999492][ T3627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.005504][ T3627] RIP: 0033:0x7fc6cd2767a3 [ 45.010011][ T3627] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.029802][ T3627] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.038215][ T3627] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 45.046182][ T3627] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3627] close(3) = 0 [pid 3627] close(4) = 0 [pid 3627] close(5) = -1 EBADF (Bad file descriptor) [pid 3627] close(6) = -1 EBADF (Bad file descriptor) [pid 3627] close(7) = -1 EBADF (Bad file descriptor) [pid 3627] close(8) = -1 EBADF (Bad file descriptor) [pid 3627] close(9) = -1 EBADF (Bad file descriptor) [pid 3627] close(10) = -1 EBADF (Bad file descriptor) [pid 3627] close(11) = -1 EBADF (Bad file descriptor) [pid 3627] close(12) = -1 EBADF (Bad file descriptor) [pid 3627] close(13) = -1 EBADF (Bad file descriptor) [ 45.054142][ T3627] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.062131][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.070097][ T3627] R13: 00000000000f4240 R14: 000000000000adec R15: 00007ffdc49a5924 [ 45.078080][ T3627] [pid 3627] close(14) = -1 EBADF (Bad file descriptor) [pid 3627] close(15) = -1 EBADF (Bad file descriptor) [pid 3627] close(16) = -1 EBADF (Bad file descriptor) [pid 3627] close(17) = -1 EBADF (Bad file descriptor) [pid 3627] close(18) = -1 EBADF (Bad file descriptor) [pid 3627] close(19) = -1 EBADF (Bad file descriptor) [pid 3627] close(20) = -1 EBADF (Bad file descriptor) [pid 3627] close(21) = -1 EBADF (Bad file descriptor) [pid 3627] close(22) = -1 EBADF (Bad file descriptor) [pid 3627] close(23) = -1 EBADF (Bad file descriptor) [pid 3627] close(24) = -1 EBADF (Bad file descriptor) [pid 3627] close(25) = -1 EBADF (Bad file descriptor) [pid 3627] close(26) = -1 EBADF (Bad file descriptor) [pid 3627] close(27) = -1 EBADF (Bad file descriptor) [pid 3627] close(28) = -1 EBADF (Bad file descriptor) [pid 3627] close(29) = -1 EBADF (Bad file descriptor) [pid 3627] exit_group(0) = ? [pid 3627] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 10 ./strace-static-x86_64: Process 3628 attached [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3628] setpgid(0, 0) = 0 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3628] write(3, "1000", 4) = 4 [pid 3628] close(3) = 0 [pid 3628] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3628] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3628] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3628] write(4, "5", 1) = 1 [pid 3628] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.155488][ T3628] FAULT_INJECTION: forcing a failure. [ 45.155488][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 45.168336][ T3628] CPU: 1 PID: 3628 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.178476][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.188529][ T3628] Call Trace: [ 45.191789][ T3628] [ 45.194697][ T3628] dump_stack_lvl+0xcd/0x134 [ 45.199384][ T3628] should_fail.cold+0x5/0xa [ 45.203882][ T3628] should_failslab+0x5/0x10 [ 45.208368][ T3628] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.213641][ T3628] ? ref_tracker_alloc+0x14c/0x550 [ 45.218752][ T3628] ref_tracker_alloc+0x14c/0x550 [ 45.223698][ T3628] ? ref_tracker_free+0x6b0/0x6b0 [ 45.228715][ T3628] ? lock_release+0x720/0x720 [ 45.233407][ T3628] ? lockdep_hardirqs_on+0x79/0x100 [ 45.238608][ T3628] ? do_raw_spin_lock+0x120/0x2a0 [ 45.243824][ T3628] ? rwlock_bug.part.0+0x90/0x90 [ 45.248751][ T3628] ? preempt_schedule_common+0x59/0xc0 [ 45.254211][ T3628] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.259582][ T3628] linkwatch_fire_event+0x202/0x260 [ 45.264782][ T3628] netif_carrier_off+0x96/0xb0 [ 45.269539][ T3628] __tun_detach+0xfe7/0x13e0 [ 45.274122][ T3628] tun_chr_close+0xc4/0x180 [ 45.278699][ T3628] __fput+0x277/0x9d0 [ 45.282665][ T3628] ? __tun_detach+0x13e0/0x13e0 [ 45.287499][ T3628] task_work_run+0xdd/0x1a0 [ 45.292076][ T3628] ptrace_notify+0x114/0x140 [ 45.296648][ T3628] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.302876][ T3628] syscall_exit_to_user_mode+0x9/0x60 [ 45.308233][ T3628] do_syscall_64+0x42/0xb0 [ 45.312811][ T3628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.318696][ T3628] RIP: 0033:0x7fc6cd2767a3 [ 45.323101][ T3628] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.342873][ T3628] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [pid 3628] close(3) = 0 [pid 3628] close(4) = 0 [ 45.351280][ T3628] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 45.359335][ T3628] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.367293][ T3628] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.375249][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.383307][ T3628] R13: 00000000000f4240 R14: 000000000000af18 R15: 00007ffdc49a5924 [ 45.391473][ T3628] [pid 3628] close(5) = -1 EBADF (Bad file descriptor) [pid 3628] close(6) = -1 EBADF (Bad file descriptor) [pid 3628] close(7) = -1 EBADF (Bad file descriptor) [pid 3628] close(8) = -1 EBADF (Bad file descriptor) [pid 3628] close(9) = -1 EBADF (Bad file descriptor) [pid 3628] close(10) = -1 EBADF (Bad file descriptor) [pid 3628] close(11) = -1 EBADF (Bad file descriptor) [pid 3628] close(12) = -1 EBADF (Bad file descriptor) [pid 3628] close(13) = -1 EBADF (Bad file descriptor) [pid 3628] close(14) = -1 EBADF (Bad file descriptor) [pid 3628] close(15) = -1 EBADF (Bad file descriptor) [pid 3628] close(16) = -1 EBADF (Bad file descriptor) [pid 3628] close(17) = -1 EBADF (Bad file descriptor) [pid 3628] close(18) = -1 EBADF (Bad file descriptor) [pid 3628] close(19) = -1 EBADF (Bad file descriptor) [pid 3628] close(20) = -1 EBADF (Bad file descriptor) [pid 3628] close(21) = -1 EBADF (Bad file descriptor) [pid 3628] close(22) = -1 EBADF (Bad file descriptor) [pid 3628] close(23) = -1 EBADF (Bad file descriptor) [pid 3628] close(24) = -1 EBADF (Bad file descriptor) [pid 3628] close(25) = -1 EBADF (Bad file descriptor) [pid 3628] close(26) = -1 EBADF (Bad file descriptor) [pid 3628] close(27) = -1 EBADF (Bad file descriptor) [pid 3628] close(28) = -1 EBADF (Bad file descriptor) [pid 3628] close(29) = -1 EBADF (Bad file descriptor) [pid 3628] exit_group(0) = ? [pid 3628] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=25} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 11 ./strace-static-x86_64: Process 3629 attached [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3629] setpgid(0, 0) = 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3629] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3629] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3629] write(4, "5", 1) = 1 [pid 3629] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.469823][ T3629] FAULT_INJECTION: forcing a failure. [ 45.469823][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 45.482437][ T3629] CPU: 1 PID: 3629 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.492581][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.502634][ T3629] Call Trace: [ 45.505992][ T3629] [ 45.508912][ T3629] dump_stack_lvl+0xcd/0x134 [ 45.513501][ T3629] should_fail.cold+0x5/0xa [ 45.518638][ T3629] should_failslab+0x5/0x10 [ 45.523138][ T3629] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.528413][ T3629] ? ref_tracker_alloc+0x14c/0x550 [ 45.533538][ T3629] ref_tracker_alloc+0x14c/0x550 [ 45.538466][ T3629] ? ref_tracker_free+0x6b0/0x6b0 [ 45.543474][ T3629] ? lock_release+0x720/0x720 [ 45.548140][ T3629] ? do_raw_spin_lock+0x120/0x2a0 [ 45.553153][ T3629] ? rwlock_bug.part.0+0x90/0x90 [ 45.558083][ T3629] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.563615][ T3629] linkwatch_fire_event+0x202/0x260 [ 45.568809][ T3629] netif_carrier_off+0x96/0xb0 [ 45.573568][ T3629] __tun_detach+0xfe7/0x13e0 [ 45.578293][ T3629] tun_chr_close+0xc4/0x180 [ 45.582791][ T3629] __fput+0x277/0x9d0 [ 45.586762][ T3629] ? __tun_detach+0x13e0/0x13e0 [ 45.591620][ T3629] task_work_run+0xdd/0x1a0 [ 45.596223][ T3629] ptrace_notify+0x114/0x140 [ 45.600983][ T3629] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.607219][ T3629] syscall_exit_to_user_mode+0x9/0x60 [ 45.612583][ T3629] do_syscall_64+0x42/0xb0 [ 45.616999][ T3629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.622893][ T3629] RIP: 0033:0x7fc6cd2767a3 [ 45.627305][ T3629] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.646913][ T3629] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.655320][ T3629] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3629] close(3) = 0 [pid 3629] close(4) = 0 [pid 3629] close(5) = -1 EBADF (Bad file descriptor) [pid 3629] close(6) = -1 EBADF (Bad file descriptor) [pid 3629] close(7) = -1 EBADF (Bad file descriptor) [pid 3629] close(8) = -1 EBADF (Bad file descriptor) [pid 3629] close(9) = -1 EBADF (Bad file descriptor) [pid 3629] close(10) = -1 EBADF (Bad file descriptor) [pid 3629] close(11) = -1 EBADF (Bad file descriptor) [pid 3629] close(12) = -1 EBADF (Bad file descriptor) [pid 3629] close(13) = -1 EBADF (Bad file descriptor) [pid 3629] close(14) = -1 EBADF (Bad file descriptor) [pid 3629] close(15) = -1 EBADF (Bad file descriptor) [pid 3629] close(16) = -1 EBADF (Bad file descriptor) [pid 3629] close(17) = -1 EBADF (Bad file descriptor) [pid 3629] close(18) = -1 EBADF (Bad file descriptor) [pid 3629] close(19) = -1 EBADF (Bad file descriptor) [pid 3629] close(20) = -1 EBADF (Bad file descriptor) [pid 3629] close(21) = -1 EBADF (Bad file descriptor) [pid 3629] close(22) = -1 EBADF (Bad file descriptor) [pid 3629] close(23) = -1 EBADF (Bad file descriptor) [pid 3629] close(24) = -1 EBADF (Bad file descriptor) [pid 3629] close(25) = -1 EBADF (Bad file descriptor) [pid 3629] close(26) = -1 EBADF (Bad file descriptor) [pid 3629] close(27) = -1 EBADF (Bad file descriptor) [pid 3629] close(28) = -1 EBADF (Bad file descriptor) [pid 3629] close(29) = -1 EBADF (Bad file descriptor) [pid 3629] exit_group(0) = ? [pid 3629] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 12 ./strace-static-x86_64: Process 3630 attached [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3630] ioctl(3, TUNSETIFF, 0x20000000) = 0 [ 45.663282][ T3629] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.671254][ T3629] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.679313][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.687274][ T3629] R13: 00000000000f4240 R14: 000000000000b046 R15: 00007ffdc49a5924 [ 45.695352][ T3629] [pid 3630] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3630] write(4, "5", 1) = 1 [pid 3630] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 45.754023][ T3630] FAULT_INJECTION: forcing a failure. [ 45.754023][ T3630] name failslab, interval 1, probability 0, space 0, times 0 [ 45.767095][ T3630] CPU: 0 PID: 3630 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 45.777747][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.787810][ T3630] Call Trace: [ 45.791095][ T3630] [ 45.794031][ T3630] dump_stack_lvl+0xcd/0x134 [ 45.798625][ T3630] should_fail.cold+0x5/0xa [ 45.803137][ T3630] should_failslab+0x5/0x10 [ 45.807815][ T3630] kmem_cache_alloc_trace+0x60/0x3f0 [ 45.813107][ T3630] ? ref_tracker_alloc+0x14c/0x550 [ 45.818233][ T3630] ref_tracker_alloc+0x14c/0x550 [ 45.823193][ T3630] ? ref_tracker_free+0x6b0/0x6b0 [ 45.828224][ T3630] ? lock_release+0x720/0x720 [ 45.832913][ T3630] ? do_raw_spin_lock+0x120/0x2a0 [ 45.837992][ T3630] ? rwlock_bug.part.0+0x90/0x90 [ 45.842977][ T3630] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 45.848361][ T3630] linkwatch_fire_event+0x202/0x260 [ 45.853571][ T3630] netif_carrier_off+0x96/0xb0 [ 45.858348][ T3630] __tun_detach+0xfe7/0x13e0 [ 45.862966][ T3630] tun_chr_close+0xc4/0x180 [ 45.867563][ T3630] __fput+0x277/0x9d0 [ 45.871550][ T3630] ? __tun_detach+0x13e0/0x13e0 [ 45.876408][ T3630] task_work_run+0xdd/0x1a0 [ 45.880948][ T3630] ptrace_notify+0x114/0x140 [ 45.885549][ T3630] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 45.891802][ T3630] syscall_exit_to_user_mode+0x9/0x60 [ 45.897200][ T3630] do_syscall_64+0x42/0xb0 [ 45.901651][ T3630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.907549][ T3630] RIP: 0033:0x7fc6cd2767a3 [ 45.911975][ T3630] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 45.931581][ T3630] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 45.940003][ T3630] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3630] close(3) = 0 [pid 3630] close(4) = 0 [pid 3630] close(5) = -1 EBADF (Bad file descriptor) [pid 3630] close(6) = -1 EBADF (Bad file descriptor) [pid 3630] close(7) = -1 EBADF (Bad file descriptor) [pid 3630] close(8) = -1 EBADF (Bad file descriptor) [pid 3630] close(9) = -1 EBADF (Bad file descriptor) [pid 3630] close(10) = -1 EBADF (Bad file descriptor) [pid 3630] close(11) = -1 EBADF (Bad file descriptor) [pid 3630] close(12) = -1 EBADF (Bad file descriptor) [pid 3630] close(13) = -1 EBADF (Bad file descriptor) [pid 3630] close(14) = -1 EBADF (Bad file descriptor) [pid 3630] close(15) = -1 EBADF (Bad file descriptor) [pid 3630] close(16) = -1 EBADF (Bad file descriptor) [pid 3630] close(17) = -1 EBADF (Bad file descriptor) [pid 3630] close(18) = -1 EBADF (Bad file descriptor) [pid 3630] close(19) = -1 EBADF (Bad file descriptor) [pid 3630] close(20) = -1 EBADF (Bad file descriptor) [pid 3630] close(21) = -1 EBADF (Bad file descriptor) [ 45.947980][ T3630] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 45.955952][ T3630] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 45.963940][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.971930][ T3630] R13: 00000000000f4240 R14: 000000000000b17d R15: 00007ffdc49a5924 [ 45.980041][ T3630] [pid 3630] close(22) = -1 EBADF (Bad file descriptor) [pid 3630] close(23) = -1 EBADF (Bad file descriptor) [pid 3630] close(24) = -1 EBADF (Bad file descriptor) [pid 3630] close(25) = -1 EBADF (Bad file descriptor) [pid 3630] close(26) = -1 EBADF (Bad file descriptor) [pid 3630] close(27) = -1 EBADF (Bad file descriptor) [pid 3630] close(28) = -1 EBADF (Bad file descriptor) [pid 3630] close(29) = -1 EBADF (Bad file descriptor) [pid 3630] exit_group(0) = ? [pid 3630] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 13 ./strace-static-x86_64: Process 3631 attached [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3631] setpgid(0, 0) = 0 [pid 3631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1000", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3631] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3631] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3631] write(4, "5", 1) = 1 [pid 3631] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.047462][ T3631] FAULT_INJECTION: forcing a failure. [ 46.047462][ T3631] name failslab, interval 1, probability 0, space 0, times 0 [ 46.060096][ T3631] CPU: 0 PID: 3631 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.070238][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.080288][ T3631] Call Trace: [ 46.083558][ T3631] [ 46.086475][ T3631] dump_stack_lvl+0xcd/0x134 [ 46.091060][ T3631] should_fail.cold+0x5/0xa [ 46.095556][ T3631] should_failslab+0x5/0x10 [ 46.100073][ T3631] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.105375][ T3631] ? ref_tracker_alloc+0x14c/0x550 [ 46.110595][ T3631] ref_tracker_alloc+0x14c/0x550 [ 46.115534][ T3631] ? ref_tracker_free+0x6b0/0x6b0 [ 46.120554][ T3631] ? lock_release+0x720/0x720 [ 46.125230][ T3631] ? do_raw_spin_lock+0x120/0x2a0 [ 46.130253][ T3631] ? rwlock_bug.part.0+0x90/0x90 [ 46.135185][ T3631] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.140557][ T3631] linkwatch_fire_event+0x202/0x260 [ 46.145757][ T3631] netif_carrier_off+0x96/0xb0 [ 46.150603][ T3631] __tun_detach+0xfe7/0x13e0 [ 46.155192][ T3631] tun_chr_close+0xc4/0x180 [ 46.159686][ T3631] __fput+0x277/0x9d0 [ 46.163662][ T3631] ? __tun_detach+0x13e0/0x13e0 [ 46.168513][ T3631] task_work_run+0xdd/0x1a0 [ 46.173011][ T3631] ptrace_notify+0x114/0x140 [ 46.177592][ T3631] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.183829][ T3631] syscall_exit_to_user_mode+0x9/0x60 [ 46.189194][ T3631] do_syscall_64+0x42/0xb0 [ 46.193604][ T3631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.199495][ T3631] RIP: 0033:0x7fc6cd2767a3 [ 46.203906][ T3631] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.223512][ T3631] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.231925][ T3631] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 46.239898][ T3631] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3631] close(3) = 0 [pid 3631] close(4) = 0 [pid 3631] close(5) = -1 EBADF (Bad file descriptor) [pid 3631] close(6) = -1 EBADF (Bad file descriptor) [pid 3631] close(7) = -1 EBADF (Bad file descriptor) [ 46.247967][ T3631] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.255929][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.263893][ T3631] R13: 00000000000f4240 R14: 000000000000b29e R15: 00007ffdc49a5924 [ 46.271872][ T3631] [pid 3631] close(8) = -1 EBADF (Bad file descriptor) [pid 3631] close(9) = -1 EBADF (Bad file descriptor) [pid 3631] close(10) = -1 EBADF (Bad file descriptor) [pid 3631] close(11) = -1 EBADF (Bad file descriptor) [pid 3631] close(12) = -1 EBADF (Bad file descriptor) [pid 3631] close(13) = -1 EBADF (Bad file descriptor) [pid 3631] close(14) = -1 EBADF (Bad file descriptor) [pid 3631] close(15) = -1 EBADF (Bad file descriptor) [pid 3631] close(16) = -1 EBADF (Bad file descriptor) [pid 3631] close(17) = -1 EBADF (Bad file descriptor) [pid 3631] close(18) = -1 EBADF (Bad file descriptor) [pid 3631] close(19) = -1 EBADF (Bad file descriptor) [pid 3631] close(20) = -1 EBADF (Bad file descriptor) [pid 3631] close(21) = -1 EBADF (Bad file descriptor) [pid 3631] close(22) = -1 EBADF (Bad file descriptor) [pid 3631] close(23) = -1 EBADF (Bad file descriptor) [pid 3631] close(24) = -1 EBADF (Bad file descriptor) [pid 3631] close(25) = -1 EBADF (Bad file descriptor) [pid 3631] close(26) = -1 EBADF (Bad file descriptor) [pid 3631] close(27) = -1 EBADF (Bad file descriptor) [pid 3631] close(28) = -1 EBADF (Bad file descriptor) [pid 3631] close(29) = -1 EBADF (Bad file descriptor) [pid 3631] exit_group(0) = ? [pid 3631] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 14 ./strace-static-x86_64: Process 3632 attached [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3632] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3632] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3632] write(4, "5", 1) = 1 [pid 3632] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.357300][ T3632] FAULT_INJECTION: forcing a failure. [ 46.357300][ T3632] name failslab, interval 1, probability 0, space 0, times 0 [ 46.369927][ T3632] CPU: 0 PID: 3632 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.380072][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.390123][ T3632] Call Trace: [ 46.393396][ T3632] [ 46.396322][ T3632] dump_stack_lvl+0xcd/0x134 [ 46.400937][ T3632] should_fail.cold+0x5/0xa [ 46.405443][ T3632] should_failslab+0x5/0x10 [ 46.409961][ T3632] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.415247][ T3632] ? ref_tracker_alloc+0x14c/0x550 [ 46.420369][ T3632] ref_tracker_alloc+0x14c/0x550 [ 46.425317][ T3632] ? ref_tracker_free+0x6b0/0x6b0 [ 46.430346][ T3632] ? lock_release+0x720/0x720 [ 46.435055][ T3632] ? do_raw_spin_lock+0x120/0x2a0 [ 46.440108][ T3632] ? rwlock_bug.part.0+0x90/0x90 [ 46.445055][ T3632] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.450438][ T3632] linkwatch_fire_event+0x202/0x260 [ 46.455648][ T3632] netif_carrier_off+0x96/0xb0 [ 46.460503][ T3632] __tun_detach+0xfe7/0x13e0 [ 46.465114][ T3632] tun_chr_close+0xc4/0x180 [ 46.469647][ T3632] __fput+0x277/0x9d0 [ 46.473747][ T3632] ? __tun_detach+0x13e0/0x13e0 [ 46.478617][ T3632] task_work_run+0xdd/0x1a0 [ 46.483211][ T3632] ptrace_notify+0x114/0x140 [ 46.487800][ T3632] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.494047][ T3632] syscall_exit_to_user_mode+0x9/0x60 [ 46.499439][ T3632] do_syscall_64+0x42/0xb0 [ 46.503859][ T3632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.509770][ T3632] RIP: 0033:0x7fc6cd2767a3 [ 46.514179][ T3632] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.533783][ T3632] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.542280][ T3632] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 46.550257][ T3632] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3632] close(3) = 0 [pid 3632] close(4) = 0 [pid 3632] close(5) = -1 EBADF (Bad file descriptor) [pid 3632] close(6) = -1 EBADF (Bad file descriptor) [pid 3632] close(7) = -1 EBADF (Bad file descriptor) [ 46.558251][ T3632] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.566311][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.574302][ T3632] R13: 00000000000f4240 R14: 000000000000b3c7 R15: 00007ffdc49a5924 [ 46.582283][ T3632] [pid 3632] close(8) = -1 EBADF (Bad file descriptor) [pid 3632] close(9) = -1 EBADF (Bad file descriptor) [pid 3632] close(10) = -1 EBADF (Bad file descriptor) [pid 3632] close(11) = -1 EBADF (Bad file descriptor) [pid 3632] close(12) = -1 EBADF (Bad file descriptor) [pid 3632] close(13) = -1 EBADF (Bad file descriptor) [pid 3632] close(14) = -1 EBADF (Bad file descriptor) [pid 3632] close(15) = -1 EBADF (Bad file descriptor) [pid 3632] close(16) = -1 EBADF (Bad file descriptor) [pid 3632] close(17) = -1 EBADF (Bad file descriptor) [pid 3632] close(18) = -1 EBADF (Bad file descriptor) [pid 3632] close(19) = -1 EBADF (Bad file descriptor) [pid 3632] close(20) = -1 EBADF (Bad file descriptor) [pid 3632] close(21) = -1 EBADF (Bad file descriptor) [pid 3632] close(22) = -1 EBADF (Bad file descriptor) [pid 3632] close(23) = -1 EBADF (Bad file descriptor) [pid 3632] close(24) = -1 EBADF (Bad file descriptor) [pid 3632] close(25) = -1 EBADF (Bad file descriptor) [pid 3632] close(26) = -1 EBADF (Bad file descriptor) [pid 3632] close(27) = -1 EBADF (Bad file descriptor) [pid 3632] close(28) = -1 EBADF (Bad file descriptor) [pid 3632] close(29) = -1 EBADF (Bad file descriptor) [pid 3632] exit_group(0) = ? [pid 3632] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3633 attached , child_tidptr=0x5555570bd5d0) = 15 [pid 3633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3633] setpgid(0, 0) = 0 [pid 3633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3633] write(3, "1000", 4) = 4 [pid 3633] close(3) = 0 [pid 3633] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3633] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3633] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3633] write(4, "5", 1) = 1 [pid 3633] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.668875][ T3633] FAULT_INJECTION: forcing a failure. [ 46.668875][ T3633] name failslab, interval 1, probability 0, space 0, times 0 [ 46.682111][ T3633] CPU: 0 PID: 3633 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.692346][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.702404][ T3633] Call Trace: [ 46.705711][ T3633] [ 46.708636][ T3633] dump_stack_lvl+0xcd/0x134 [ 46.713232][ T3633] should_fail.cold+0x5/0xa [ 46.717745][ T3633] should_failslab+0x5/0x10 [ 46.722254][ T3633] kmem_cache_alloc_trace+0x60/0x3f0 [ 46.727537][ T3633] ? ref_tracker_alloc+0x14c/0x550 [ 46.732645][ T3633] ref_tracker_alloc+0x14c/0x550 [ 46.737575][ T3633] ? ref_tracker_free+0x6b0/0x6b0 [ 46.742678][ T3633] ? lock_release+0x720/0x720 [ 46.747352][ T3633] ? do_raw_spin_lock+0x120/0x2a0 [ 46.752370][ T3633] ? rwlock_bug.part.0+0x90/0x90 [ 46.757306][ T3633] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 46.762680][ T3633] linkwatch_fire_event+0x202/0x260 [ 46.767881][ T3633] netif_carrier_off+0x96/0xb0 [ 46.772643][ T3633] __tun_detach+0xfe7/0x13e0 [ 46.777236][ T3633] tun_chr_close+0xc4/0x180 [ 46.781729][ T3633] __fput+0x277/0x9d0 [ 46.785702][ T3633] ? __tun_detach+0x13e0/0x13e0 [ 46.790547][ T3633] task_work_run+0xdd/0x1a0 [ 46.795044][ T3633] ptrace_notify+0x114/0x140 [ 46.799632][ T3633] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 46.805872][ T3633] syscall_exit_to_user_mode+0x9/0x60 [ 46.811236][ T3633] do_syscall_64+0x42/0xb0 [ 46.815647][ T3633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.821534][ T3633] RIP: 0033:0x7fc6cd2767a3 [ 46.825937][ T3633] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 46.845626][ T3633] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.854051][ T3633] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3633] close(3) = 0 [pid 3633] close(4) = 0 [pid 3633] close(5) = -1 EBADF (Bad file descriptor) [pid 3633] close(6) = -1 EBADF (Bad file descriptor) [pid 3633] close(7) = -1 EBADF (Bad file descriptor) [pid 3633] close(8) = -1 EBADF (Bad file descriptor) [pid 3633] close(9) = -1 EBADF (Bad file descriptor) [pid 3633] close(10) = -1 EBADF (Bad file descriptor) [pid 3633] close(11) = -1 EBADF (Bad file descriptor) [pid 3633] close(12) = -1 EBADF (Bad file descriptor) [pid 3633] close(13) = -1 EBADF (Bad file descriptor) [pid 3633] close(14) = -1 EBADF (Bad file descriptor) [pid 3633] close(15) = -1 EBADF (Bad file descriptor) [pid 3633] close(16) = -1 EBADF (Bad file descriptor) [pid 3633] close(17) = -1 EBADF (Bad file descriptor) [pid 3633] close(18) = -1 EBADF (Bad file descriptor) [pid 3633] close(19) = -1 EBADF (Bad file descriptor) [pid 3633] close(20) = -1 EBADF (Bad file descriptor) [pid 3633] close(21) = -1 EBADF (Bad file descriptor) [pid 3633] close(22) = -1 EBADF (Bad file descriptor) [pid 3633] close(23) = -1 EBADF (Bad file descriptor) [pid 3633] close(24) = -1 EBADF (Bad file descriptor) [pid 3633] close(25) = -1 EBADF (Bad file descriptor) [pid 3633] close(26) = -1 EBADF (Bad file descriptor) [pid 3633] close(27) = -1 EBADF (Bad file descriptor) [pid 3633] close(28) = -1 EBADF (Bad file descriptor) [pid 3633] close(29) = -1 EBADF (Bad file descriptor) [pid 3633] exit_group(0) = ? [pid 3633] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 16 ./strace-static-x86_64: Process 3634 attached [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3634] setpgid(0, 0) = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3) = 0 [pid 3634] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 46.862013][ T3633] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 46.870065][ T3633] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 46.878382][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 46.886349][ T3633] R13: 00000000000f4240 R14: 000000000000b4f7 R15: 00007ffdc49a5924 [ 46.894339][ T3633] [pid 3634] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3634] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3634] write(4, "5", 1) = 1 [pid 3634] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 46.956057][ T3634] FAULT_INJECTION: forcing a failure. [ 46.956057][ T3634] name failslab, interval 1, probability 0, space 0, times 0 [ 46.968752][ T3634] CPU: 1 PID: 3634 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 46.978896][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.988946][ T3634] Call Trace: [ 46.992230][ T3634] [ 46.995139][ T3634] dump_stack_lvl+0xcd/0x134 [ 46.999720][ T3634] should_fail.cold+0x5/0xa [ 47.004212][ T3634] should_failslab+0x5/0x10 [ 47.008701][ T3634] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.013980][ T3634] ? ref_tracker_alloc+0x14c/0x550 [ 47.019118][ T3634] ref_tracker_alloc+0x14c/0x550 [ 47.024075][ T3634] ? ref_tracker_free+0x6b0/0x6b0 [ 47.029094][ T3634] ? lock_release+0x720/0x720 [ 47.033770][ T3634] ? do_raw_spin_lock+0x120/0x2a0 [ 47.038792][ T3634] ? rwlock_bug.part.0+0x90/0x90 [ 47.043730][ T3634] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.049106][ T3634] linkwatch_fire_event+0x202/0x260 [ 47.054307][ T3634] netif_carrier_off+0x96/0xb0 [ 47.059071][ T3634] __tun_detach+0xfe7/0x13e0 [ 47.063756][ T3634] tun_chr_close+0xc4/0x180 [ 47.068243][ T3634] __fput+0x277/0x9d0 [ 47.072212][ T3634] ? __tun_detach+0x13e0/0x13e0 [ 47.077224][ T3634] task_work_run+0xdd/0x1a0 [ 47.081717][ T3634] ptrace_notify+0x114/0x140 [ 47.086296][ T3634] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.092539][ T3634] syscall_exit_to_user_mode+0x9/0x60 [ 47.097897][ T3634] do_syscall_64+0x42/0xb0 [ 47.102302][ T3634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.108181][ T3634] RIP: 0033:0x7fc6cd2767a3 [ 47.112582][ T3634] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.132301][ T3634] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.140705][ T3634] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 47.148750][ T3634] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3634] close(3) = 0 [pid 3634] close(4) = 0 [pid 3634] close(5) = -1 EBADF (Bad file descriptor) [pid 3634] close(6) = -1 EBADF (Bad file descriptor) [pid 3634] close(7) = -1 EBADF (Bad file descriptor) [pid 3634] close(8) = -1 EBADF (Bad file descriptor) [pid 3634] close(9) = -1 EBADF (Bad file descriptor) [pid 3634] close(10) = -1 EBADF (Bad file descriptor) [pid 3634] close(11) = -1 EBADF (Bad file descriptor) [ 47.156706][ T3634] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.164845][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.172794][ T3634] R13: 00000000000f4240 R14: 000000000000b62d R15: 00007ffdc49a5924 [ 47.180762][ T3634] [pid 3634] close(12) = -1 EBADF (Bad file descriptor) [pid 3634] close(13) = -1 EBADF (Bad file descriptor) [pid 3634] close(14) = -1 EBADF (Bad file descriptor) [pid 3634] close(15) = -1 EBADF (Bad file descriptor) [pid 3634] close(16) = -1 EBADF (Bad file descriptor) [pid 3634] close(17) = -1 EBADF (Bad file descriptor) [pid 3634] close(18) = -1 EBADF (Bad file descriptor) [pid 3634] close(19) = -1 EBADF (Bad file descriptor) [pid 3634] close(20) = -1 EBADF (Bad file descriptor) [pid 3634] close(21) = -1 EBADF (Bad file descriptor) [pid 3634] close(22) = -1 EBADF (Bad file descriptor) [pid 3634] close(23) = -1 EBADF (Bad file descriptor) [pid 3634] close(24) = -1 EBADF (Bad file descriptor) [pid 3634] close(25) = -1 EBADF (Bad file descriptor) [pid 3634] close(26) = -1 EBADF (Bad file descriptor) [pid 3634] close(27) = -1 EBADF (Bad file descriptor) [pid 3634] close(28) = -1 EBADF (Bad file descriptor) [pid 3634] close(29) = -1 EBADF (Bad file descriptor) [pid 3634] exit_group(0) = ? [pid 3634] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 17 ./strace-static-x86_64: Process 3635 attached [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3635] write(3, "1000", 4) = 4 [pid 3635] close(3) = 0 [pid 3635] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3635] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3635] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3635] write(4, "5", 1) = 1 [pid 3635] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.251761][ T3635] FAULT_INJECTION: forcing a failure. [ 47.251761][ T3635] name failslab, interval 1, probability 0, space 0, times 0 [ 47.265098][ T3635] CPU: 0 PID: 3635 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.275315][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.285344][ T3635] Call Trace: [ 47.288600][ T3635] [ 47.291521][ T3635] dump_stack_lvl+0xcd/0x134 [ 47.296098][ T3635] should_fail.cold+0x5/0xa [ 47.300581][ T3635] should_failslab+0x5/0x10 [ 47.305236][ T3635] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.310528][ T3635] ? ref_tracker_alloc+0x14c/0x550 [ 47.315638][ T3635] ref_tracker_alloc+0x14c/0x550 [ 47.320564][ T3635] ? ref_tracker_free+0x6b0/0x6b0 [ 47.325571][ T3635] ? lock_release+0x720/0x720 [ 47.330247][ T3635] ? do_raw_spin_lock+0x120/0x2a0 [ 47.335268][ T3635] ? rwlock_bug.part.0+0x90/0x90 [ 47.340288][ T3635] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.345650][ T3635] linkwatch_fire_event+0x202/0x260 [ 47.350849][ T3635] netif_carrier_off+0x96/0xb0 [ 47.355595][ T3635] __tun_detach+0xfe7/0x13e0 [ 47.360291][ T3635] tun_chr_close+0xc4/0x180 [ 47.364784][ T3635] __fput+0x277/0x9d0 [ 47.368753][ T3635] ? __tun_detach+0x13e0/0x13e0 [ 47.373590][ T3635] task_work_run+0xdd/0x1a0 [ 47.378077][ T3635] ptrace_notify+0x114/0x140 [ 47.382657][ T3635] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.388887][ T3635] syscall_exit_to_user_mode+0x9/0x60 [ 47.394252][ T3635] do_syscall_64+0x42/0xb0 [ 47.398658][ T3635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.404541][ T3635] RIP: 0033:0x7fc6cd2767a3 [ 47.409126][ T3635] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.428816][ T3635] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.437234][ T3635] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 47.445187][ T3635] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 47.453148][ T3635] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.461199][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.469156][ T3635] R13: 00000000000f4240 R14: 000000000000b74c R15: 00007ffdc49a5924 [ 47.477117][ T3635] [pid 3635] close(3) = 0 [pid 3635] close(4) = 0 [pid 3635] close(5) = -1 EBADF (Bad file descriptor) [pid 3635] close(6) = -1 EBADF (Bad file descriptor) [pid 3635] close(7) = -1 EBADF (Bad file descriptor) [pid 3635] close(8) = -1 EBADF (Bad file descriptor) [pid 3635] close(9) = -1 EBADF (Bad file descriptor) [pid 3635] close(10) = -1 EBADF (Bad file descriptor) [pid 3635] close(11) = -1 EBADF (Bad file descriptor) [pid 3635] close(12) = -1 EBADF (Bad file descriptor) [pid 3635] close(13) = -1 EBADF (Bad file descriptor) [pid 3635] close(14) = -1 EBADF (Bad file descriptor) [pid 3635] close(15) = -1 EBADF (Bad file descriptor) [pid 3635] close(16) = -1 EBADF (Bad file descriptor) [pid 3635] close(17) = -1 EBADF (Bad file descriptor) [pid 3635] close(18) = -1 EBADF (Bad file descriptor) [pid 3635] close(19) = -1 EBADF (Bad file descriptor) [pid 3635] close(20) = -1 EBADF (Bad file descriptor) [pid 3635] close(21) = -1 EBADF (Bad file descriptor) [pid 3635] close(22) = -1 EBADF (Bad file descriptor) [pid 3635] close(23) = -1 EBADF (Bad file descriptor) [pid 3635] close(24) = -1 EBADF (Bad file descriptor) [pid 3635] close(25) = -1 EBADF (Bad file descriptor) [pid 3635] close(26) = -1 EBADF (Bad file descriptor) [pid 3635] close(27) = -1 EBADF (Bad file descriptor) [pid 3635] close(28) = -1 EBADF (Bad file descriptor) [pid 3635] close(29) = -1 EBADF (Bad file descriptor) [pid 3635] exit_group(0) = ? [pid 3635] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3636 attached , child_tidptr=0x5555570bd5d0) = 18 [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3636] setpgid(0, 0) = 0 [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3636] write(3, "1000", 4) = 4 [pid 3636] close(3) = 0 [pid 3636] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3636] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3636] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3636] write(4, "5", 1) = 1 [pid 3636] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.564738][ T3636] FAULT_INJECTION: forcing a failure. [ 47.564738][ T3636] name failslab, interval 1, probability 0, space 0, times 0 [ 47.577446][ T3636] CPU: 1 PID: 3636 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.587586][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.597636][ T3636] Call Trace: [ 47.600916][ T3636] [ 47.603829][ T3636] dump_stack_lvl+0xcd/0x134 [ 47.608456][ T3636] should_fail.cold+0x5/0xa [ 47.613138][ T3636] should_failslab+0x5/0x10 [ 47.617624][ T3636] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.622909][ T3636] ? ref_tracker_alloc+0x14c/0x550 [ 47.628023][ T3636] ref_tracker_alloc+0x14c/0x550 [ 47.632943][ T3636] ? ref_tracker_free+0x6b0/0x6b0 [ 47.637948][ T3636] ? lock_release+0x720/0x720 [ 47.642702][ T3636] ? do_raw_spin_lock+0x120/0x2a0 [ 47.647729][ T3636] ? rwlock_bug.part.0+0x90/0x90 [ 47.652654][ T3636] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.658039][ T3636] linkwatch_fire_event+0x202/0x260 [ 47.663261][ T3636] netif_carrier_off+0x96/0xb0 [ 47.668381][ T3636] __tun_detach+0xfe7/0x13e0 [ 47.672973][ T3636] tun_chr_close+0xc4/0x180 [ 47.677479][ T3636] __fput+0x277/0x9d0 [ 47.681465][ T3636] ? __tun_detach+0x13e0/0x13e0 [ 47.686389][ T3636] task_work_run+0xdd/0x1a0 [ 47.690889][ T3636] ptrace_notify+0x114/0x140 [ 47.695481][ T3636] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.701750][ T3636] syscall_exit_to_user_mode+0x9/0x60 [ 47.707208][ T3636] do_syscall_64+0x42/0xb0 [ 47.711626][ T3636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.717517][ T3636] RIP: 0033:0x7fc6cd2767a3 [ 47.721932][ T3636] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 47.744484][ T3636] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.753416][ T3636] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3636] close(3) = 0 [pid 3636] close(4) = 0 [pid 3636] close(5) = -1 EBADF (Bad file descriptor) [pid 3636] close(6) = -1 EBADF (Bad file descriptor) [pid 3636] close(7) = -1 EBADF (Bad file descriptor) [pid 3636] close(8) = -1 EBADF (Bad file descriptor) [pid 3636] close(9) = -1 EBADF (Bad file descriptor) [pid 3636] close(10) = -1 EBADF (Bad file descriptor) [pid 3636] close(11) = -1 EBADF (Bad file descriptor) [pid 3636] close(12) = -1 EBADF (Bad file descriptor) [pid 3636] close(13) = -1 EBADF (Bad file descriptor) [pid 3636] close(14) = -1 EBADF (Bad file descriptor) [pid 3636] close(15) = -1 EBADF (Bad file descriptor) [pid 3636] close(16) = -1 EBADF (Bad file descriptor) [pid 3636] close(17) = -1 EBADF (Bad file descriptor) [pid 3636] close(18) = -1 EBADF (Bad file descriptor) [pid 3636] close(19) = -1 EBADF (Bad file descriptor) [pid 3636] close(20) = -1 EBADF (Bad file descriptor) [pid 3636] close(21) = -1 EBADF (Bad file descriptor) [pid 3636] close(22) = -1 EBADF (Bad file descriptor) [pid 3636] close(23) = -1 EBADF (Bad file descriptor) [pid 3636] close(24) = -1 EBADF (Bad file descriptor) [pid 3636] close(25) = -1 EBADF (Bad file descriptor) [pid 3636] close(26) = -1 EBADF (Bad file descriptor) [pid 3636] close(27) = -1 EBADF (Bad file descriptor) [pid 3636] close(28) = -1 EBADF (Bad file descriptor) [pid 3636] close(29) = -1 EBADF (Bad file descriptor) [pid 3636] exit_group(0) = ? [pid 3636] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 19 ./strace-static-x86_64: Process 3637 attached [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [ 47.761378][ T3636] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 47.769332][ T3636] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 47.777287][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 47.785852][ T3636] R13: 00000000000f4240 R14: 000000000000b879 R15: 00007ffdc49a5924 [ 47.793822][ T3636] [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [pid 3637] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3637] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3637] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3637] write(4, "5", 1) = 1 [pid 3637] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 47.852640][ T3637] FAULT_INJECTION: forcing a failure. [ 47.852640][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 47.865260][ T3637] CPU: 0 PID: 3637 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 47.875407][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.885465][ T3637] Call Trace: [ 47.888736][ T3637] [ 47.891681][ T3637] dump_stack_lvl+0xcd/0x134 [ 47.896265][ T3637] should_fail.cold+0x5/0xa [ 47.900758][ T3637] should_failslab+0x5/0x10 [ 47.905266][ T3637] kmem_cache_alloc_trace+0x60/0x3f0 [ 47.910541][ T3637] ? ref_tracker_alloc+0x14c/0x550 [ 47.915643][ T3637] ref_tracker_alloc+0x14c/0x550 [ 47.920576][ T3637] ? ref_tracker_free+0x6b0/0x6b0 [ 47.925595][ T3637] ? lock_release+0x720/0x720 [ 47.930279][ T3637] ? do_raw_spin_lock+0x120/0x2a0 [ 47.935293][ T3637] ? rwlock_bug.part.0+0x90/0x90 [ 47.940227][ T3637] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 47.945615][ T3637] linkwatch_fire_event+0x202/0x260 [ 47.951020][ T3637] netif_carrier_off+0x96/0xb0 [ 47.955867][ T3637] __tun_detach+0xfe7/0x13e0 [ 47.960467][ T3637] tun_chr_close+0xc4/0x180 [ 47.964955][ T3637] __fput+0x277/0x9d0 [ 47.968945][ T3637] ? __tun_detach+0x13e0/0x13e0 [ 47.973800][ T3637] task_work_run+0xdd/0x1a0 [ 47.978301][ T3637] ptrace_notify+0x114/0x140 [ 47.982893][ T3637] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 47.989143][ T3637] syscall_exit_to_user_mode+0x9/0x60 [ 47.994501][ T3637] do_syscall_64+0x42/0xb0 [ 47.998900][ T3637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.004783][ T3637] RIP: 0033:0x7fc6cd2767a3 [ 48.009194][ T3637] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 48.028800][ T3637] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 48.037356][ T3637] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 48.045351][ T3637] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3637] close(3) = 0 [pid 3637] close(4) = 0 [pid 3637] close(5) = -1 EBADF (Bad file descriptor) [pid 3637] close(6) = -1 EBADF (Bad file descriptor) [pid 3637] close(7) = -1 EBADF (Bad file descriptor) [pid 3637] close(8) = -1 EBADF (Bad file descriptor) [pid 3637] close(9) = -1 EBADF (Bad file descriptor) [pid 3637] close(10) = -1 EBADF (Bad file descriptor) [pid 3637] close(11) = -1 EBADF (Bad file descriptor) [pid 3637] close(12) = -1 EBADF (Bad file descriptor) [pid 3637] close(13) = -1 EBADF (Bad file descriptor) [pid 3637] close(14) = -1 EBADF (Bad file descriptor) [pid 3637] close(15) = -1 EBADF (Bad file descriptor) [pid 3637] close(16) = -1 EBADF (Bad file descriptor) [pid 3637] close(17) = -1 EBADF (Bad file descriptor) [pid 3637] close(18) = -1 EBADF (Bad file descriptor) [pid 3637] close(19) = -1 EBADF (Bad file descriptor) [pid 3637] close(20) = -1 EBADF (Bad file descriptor) [pid 3637] close(21) = -1 EBADF (Bad file descriptor) [pid 3637] close(22) = -1 EBADF (Bad file descriptor) [ 48.053321][ T3637] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.061293][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.069260][ T3637] R13: 00000000000f4240 R14: 000000000000b9af R15: 00007ffdc49a5924 [ 48.077248][ T3637] [pid 3637] close(23) = -1 EBADF (Bad file descriptor) [pid 3637] close(24) = -1 EBADF (Bad file descriptor) [pid 3637] close(25) = -1 EBADF (Bad file descriptor) [pid 3637] close(26) = -1 EBADF (Bad file descriptor) [pid 3637] close(27) = -1 EBADF (Bad file descriptor) [pid 3637] close(28) = -1 EBADF (Bad file descriptor) [pid 3637] close(29) = -1 EBADF (Bad file descriptor) [pid 3637] exit_group(0) = ? [pid 3637] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 20 ./strace-static-x86_64: Process 3638 attached [pid 3638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3638] setpgid(0, 0) = 0 [pid 3638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3638] write(3, "1000", 4) = 4 [pid 3638] close(3) = 0 [pid 3638] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3638] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3638] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3638] write(4, "5", 1) = 1 [pid 3638] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.148353][ T3638] FAULT_INJECTION: forcing a failure. [ 48.148353][ T3638] name failslab, interval 1, probability 0, space 0, times 0 [ 48.161481][ T3638] CPU: 0 PID: 3638 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.171625][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.181673][ T3638] Call Trace: [ 48.184940][ T3638] [ 48.187854][ T3638] dump_stack_lvl+0xcd/0x134 [ 48.192439][ T3638] should_fail.cold+0x5/0xa [ 48.196931][ T3638] should_failslab+0x5/0x10 [ 48.201422][ T3638] kmem_cache_alloc_trace+0x60/0x3f0 [ 48.206715][ T3638] ? ref_tracker_alloc+0x14c/0x550 [ 48.211824][ T3638] ref_tracker_alloc+0x14c/0x550 [ 48.216753][ T3638] ? ref_tracker_free+0x6b0/0x6b0 [ 48.221765][ T3638] ? lock_release+0x720/0x720 [ 48.226435][ T3638] ? do_raw_spin_lock+0x120/0x2a0 [ 48.231453][ T3638] ? rwlock_bug.part.0+0x90/0x90 [ 48.236380][ T3638] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 48.241752][ T3638] linkwatch_fire_event+0x202/0x260 [ 48.247036][ T3638] netif_carrier_off+0x96/0xb0 [ 48.251792][ T3638] __tun_detach+0xfe7/0x13e0 [ 48.256477][ T3638] tun_chr_close+0xc4/0x180 [ 48.260978][ T3638] __fput+0x277/0x9d0 [ 48.264953][ T3638] ? __tun_detach+0x13e0/0x13e0 [ 48.269805][ T3638] task_work_run+0xdd/0x1a0 [ 48.274310][ T3638] ptrace_notify+0x114/0x140 [ 48.278899][ T3638] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 48.285225][ T3638] syscall_exit_to_user_mode+0x9/0x60 [ 48.290596][ T3638] do_syscall_64+0x42/0xb0 [ 48.295019][ T3638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.300908][ T3638] RIP: 0033:0x7fc6cd2767a3 [ 48.305315][ T3638] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 48.325094][ T3638] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 48.334480][ T3638] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3638] close(3) = 0 [pid 3638] close(4) = 0 [pid 3638] close(5) = -1 EBADF (Bad file descriptor) [pid 3638] close(6) = -1 EBADF (Bad file descriptor) [pid 3638] close(7) = -1 EBADF (Bad file descriptor) [ 48.342535][ T3638] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 48.350500][ T3638] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.358464][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.366431][ T3638] R13: 00000000000f4240 R14: 000000000000bacf R15: 00007ffdc49a5924 [ 48.374430][ T3638] [pid 3638] close(8) = -1 EBADF (Bad file descriptor) [pid 3638] close(9) = -1 EBADF (Bad file descriptor) [pid 3638] close(10) = -1 EBADF (Bad file descriptor) [pid 3638] close(11) = -1 EBADF (Bad file descriptor) [pid 3638] close(12) = -1 EBADF (Bad file descriptor) [pid 3638] close(13) = -1 EBADF (Bad file descriptor) [pid 3638] close(14) = -1 EBADF (Bad file descriptor) [pid 3638] close(15) = -1 EBADF (Bad file descriptor) [pid 3638] close(16) = -1 EBADF (Bad file descriptor) [pid 3638] close(17) = -1 EBADF (Bad file descriptor) [pid 3638] close(18) = -1 EBADF (Bad file descriptor) [pid 3638] close(19) = -1 EBADF (Bad file descriptor) [pid 3638] close(20) = -1 EBADF (Bad file descriptor) [pid 3638] close(21) = -1 EBADF (Bad file descriptor) [pid 3638] close(22) = -1 EBADF (Bad file descriptor) [pid 3638] close(23) = -1 EBADF (Bad file descriptor) [pid 3638] close(24) = -1 EBADF (Bad file descriptor) [pid 3638] close(25) = -1 EBADF (Bad file descriptor) [pid 3638] close(26) = -1 EBADF (Bad file descriptor) [pid 3638] close(27) = -1 EBADF (Bad file descriptor) [pid 3638] close(28) = -1 EBADF (Bad file descriptor) [pid 3638] close(29) = -1 EBADF (Bad file descriptor) [pid 3638] exit_group(0) = ? [pid 3638] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3639 attached , child_tidptr=0x5555570bd5d0) = 21 [pid 3639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3639] setpgid(0, 0) = 0 [pid 3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3639] write(3, "1000", 4) = 4 [pid 3639] close(3) = 0 [pid 3639] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3639] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3639] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3639] write(4, "5", 1) = 1 [ 48.458650][ T3639] FAULT_INJECTION: forcing a failure. [ 48.458650][ T3639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.472648][ T3639] CPU: 1 PID: 3639 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.483049][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.493258][ T3639] Call Trace: [ 48.496606][ T3639] [ 48.499971][ T3639] dump_stack_lvl+0xcd/0x134 [ 48.504562][ T3639] should_fail.cold+0x5/0xa [ 48.509152][ T3639] prepare_alloc_pages+0x17b/0x570 [ 48.514258][ T3639] __alloc_pages+0x12f/0x500 [ 48.518848][ T3639] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 48.525699][ T3639] ? ___slab_alloc+0x47e/0xf20 [ 48.530567][ T3639] alloc_pages+0x1aa/0x310 [ 48.534998][ T3639] ? mark_held_locks+0x9f/0xe0 [ 48.539758][ T3639] allocate_slab+0x26c/0x3c0 [ 48.544348][ T3639] ___slab_alloc+0x8df/0xf20 [ 48.548938][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.553904][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.558855][ T3639] __slab_alloc.constprop.0+0x4d/0xa0 [ 48.564237][ T3639] __kmalloc_node_track_caller+0x2cb/0x360 [ 48.570047][ T3639] ? __napi_alloc_skb+0x70/0x310 [ 48.574996][ T3639] __alloc_skb+0xde/0x340 [ 48.579334][ T3639] __napi_alloc_skb+0x70/0x310 [ 48.584105][ T3639] napi_get_frags+0x5e/0x140 [ 48.588695][ T3639] tun_get_user+0xa07/0x3b00 [ 48.593287][ T3639] ? tun_build_skb+0x1170/0x1170 [ 48.598237][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 48.603112][ T3639] ? find_held_lock+0x2d/0x110 [ 48.607900][ T3639] tun_chr_write_iter+0xdb/0x200 [ 48.612875][ T3639] do_iter_readv_writev+0x3d1/0x640 [ 48.618092][ T3639] ? new_sync_write+0x560/0x560 [ 48.622953][ T3639] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.629204][ T3639] ? security_file_permission+0xab/0xd0 [ 48.634785][ T3639] do_iter_write+0x182/0x700 [ 48.639385][ T3639] ? import_iovec+0x10c/0x150 [ 48.644071][ T3639] vfs_writev+0x1aa/0x630 [ 48.648407][ T3639] ? vfs_iter_write+0xa0/0xa0 [ 48.653091][ T3639] ? do_raw_spin_lock+0x120/0x2a0 [ 48.658143][ T3639] ? rwlock_bug.part.0+0x90/0x90 [ 48.663105][ T3639] ? _raw_spin_lock_irq+0x41/0x50 [ 48.668137][ T3639] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 48.674396][ T3639] ? find_held_lock+0x2d/0x110 [ 48.679184][ T3639] ? ptrace_notify+0xfa/0x140 [ 48.683867][ T3639] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.690114][ T3639] ? __fget_light+0x20f/0x270 [ 48.694798][ T3639] do_writev+0x133/0x2f0 [ 48.699052][ T3639] ? vfs_writev+0x630/0x630 [ 48.703598][ T3639] ? lockdep_hardirqs_on+0x79/0x100 [ 48.708805][ T3639] ? _raw_spin_unlock_irq+0x2a/0x40 [ 48.714009][ T3639] ? ptrace_notify+0xfa/0x140 [ 48.718698][ T3639] do_syscall_64+0x35/0xb0 [ 48.723123][ T3639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.729026][ T3639] RIP: 0033:0x7fc6cd2b4c39 [ 48.733485][ T3639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3639] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.753097][ T3639] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.761544][ T3639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 48.769685][ T3639] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 48.777655][ T3639] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 48.785629][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 48.793612][ T3639] R13: 00000000000f4240 R14: 000000000000bbf6 R15: 00007ffdc49a5924 [ 48.801605][ T3639] [pid 3639] close(3) = 0 [pid 3639] close(4) = 0 [pid 3639] close(5) = -1 EBADF (Bad file descriptor) [pid 3639] close(6) = -1 EBADF (Bad file descriptor) [pid 3639] close(7) = -1 EBADF (Bad file descriptor) [pid 3639] close(8) = -1 EBADF (Bad file descriptor) [pid 3639] close(9) = -1 EBADF (Bad file descriptor) [pid 3639] close(10) = -1 EBADF (Bad file descriptor) [pid 3639] close(11) = -1 EBADF (Bad file descriptor) [pid 3639] close(12) = -1 EBADF (Bad file descriptor) [pid 3639] close(13) = -1 EBADF (Bad file descriptor) [pid 3639] close(14) = -1 EBADF (Bad file descriptor) [pid 3639] close(15) = -1 EBADF (Bad file descriptor) [pid 3639] close(16) = -1 EBADF (Bad file descriptor) [pid 3639] close(17) = -1 EBADF (Bad file descriptor) [pid 3639] close(18) = -1 EBADF (Bad file descriptor) [pid 3639] close(19) = -1 EBADF (Bad file descriptor) [pid 3639] close(20) = -1 EBADF (Bad file descriptor) [pid 3639] close(21) = -1 EBADF (Bad file descriptor) [pid 3639] close(22) = -1 EBADF (Bad file descriptor) [pid 3639] close(23) = -1 EBADF (Bad file descriptor) [pid 3639] close(24) = -1 EBADF (Bad file descriptor) [pid 3639] close(25) = -1 EBADF (Bad file descriptor) [pid 3639] close(26) = -1 EBADF (Bad file descriptor) [pid 3639] close(27) = -1 EBADF (Bad file descriptor) [pid 3639] close(28) = -1 EBADF (Bad file descriptor) [pid 3639] close(29) = -1 EBADF (Bad file descriptor) [pid 3639] exit_group(0) = ? [pid 3639] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3640 attached , child_tidptr=0x5555570bd5d0) = 22 [pid 3640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3640] setpgid(0, 0) = 0 [pid 3640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3640] write(3, "1000", 4) = 4 [pid 3640] close(3) = 0 [pid 3640] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3640] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3640] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3640] write(4, "5", 1) = 1 [pid 3640] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 48.874970][ T3640] FAULT_INJECTION: forcing a failure. [ 48.874970][ T3640] name failslab, interval 1, probability 0, space 0, times 0 [ 48.887671][ T3640] CPU: 1 PID: 3640 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 48.897815][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.907871][ T3640] Call Trace: [ 48.911144][ T3640] [ 48.914251][ T3640] dump_stack_lvl+0xcd/0x134 [ 48.918865][ T3640] should_fail.cold+0x5/0xa [ 48.923379][ T3640] should_failslab+0x5/0x10 [ 48.927886][ T3640] kmem_cache_alloc_trace+0x60/0x3f0 [ 48.933170][ T3640] ? ref_tracker_alloc+0x14c/0x550 [ 48.938284][ T3640] ref_tracker_alloc+0x14c/0x550 [ 48.943226][ T3640] ? ref_tracker_free+0x6b0/0x6b0 [ 48.948248][ T3640] ? lock_release+0x720/0x720 [ 48.952928][ T3640] ? do_raw_spin_lock+0x120/0x2a0 [ 48.957956][ T3640] ? rwlock_bug.part.0+0x90/0x90 [ 48.962900][ T3640] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 48.968279][ T3640] linkwatch_fire_event+0x202/0x260 [ 48.973483][ T3640] netif_carrier_off+0x96/0xb0 [ 48.978274][ T3640] __tun_detach+0xfe7/0x13e0 [ 48.982875][ T3640] tun_chr_close+0xc4/0x180 [ 48.987380][ T3640] __fput+0x277/0x9d0 [ 48.991365][ T3640] ? __tun_detach+0x13e0/0x13e0 [ 48.996211][ T3640] task_work_run+0xdd/0x1a0 [ 49.000801][ T3640] ptrace_notify+0x114/0x140 [ 49.005390][ T3640] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.011635][ T3640] syscall_exit_to_user_mode+0x9/0x60 [ 49.017097][ T3640] do_syscall_64+0x42/0xb0 [ 49.021517][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.027401][ T3640] RIP: 0033:0x7fc6cd2767a3 [ 49.031812][ T3640] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.051893][ T3640] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.060325][ T3640] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3640] close(3) = 0 [ 49.068286][ T3640] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 49.076241][ T3640] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.084213][ T3640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.092182][ T3640] R13: 00000000000f4240 R14: 000000000000bd2b R15: 00007ffdc49a5924 [ 49.100156][ T3640] [pid 3640] close(4) = 0 [pid 3640] close(5) = -1 EBADF (Bad file descriptor) [pid 3640] close(6) = -1 EBADF (Bad file descriptor) [pid 3640] close(7) = -1 EBADF (Bad file descriptor) [pid 3640] close(8) = -1 EBADF (Bad file descriptor) [pid 3640] close(9) = -1 EBADF (Bad file descriptor) [pid 3640] close(10) = -1 EBADF (Bad file descriptor) [pid 3640] close(11) = -1 EBADF (Bad file descriptor) [pid 3640] close(12) = -1 EBADF (Bad file descriptor) [pid 3640] close(13) = -1 EBADF (Bad file descriptor) [pid 3640] close(14) = -1 EBADF (Bad file descriptor) [pid 3640] close(15) = -1 EBADF (Bad file descriptor) [pid 3640] close(16) = -1 EBADF (Bad file descriptor) [pid 3640] close(17) = -1 EBADF (Bad file descriptor) [pid 3640] close(18) = -1 EBADF (Bad file descriptor) [pid 3640] close(19) = -1 EBADF (Bad file descriptor) [pid 3640] close(20) = -1 EBADF (Bad file descriptor) [pid 3640] close(21) = -1 EBADF (Bad file descriptor) [pid 3640] close(22) = -1 EBADF (Bad file descriptor) [pid 3640] close(23) = -1 EBADF (Bad file descriptor) [pid 3640] close(24) = -1 EBADF (Bad file descriptor) [pid 3640] close(25) = -1 EBADF (Bad file descriptor) [pid 3640] close(26) = -1 EBADF (Bad file descriptor) [pid 3640] close(27) = -1 EBADF (Bad file descriptor) [pid 3640] close(28) = -1 EBADF (Bad file descriptor) [pid 3640] close(29) = -1 EBADF (Bad file descriptor) [pid 3640] exit_group(0) = ? [pid 3640] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 23 ./strace-static-x86_64: Process 3641 attached [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3641] setpgid(0, 0) = 0 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3641] write(3, "1000", 4) = 4 [pid 3641] close(3) = 0 [pid 3641] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3641] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3641] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3641] write(4, "5", 1) = 1 [pid 3641] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.177906][ T3641] FAULT_INJECTION: forcing a failure. [ 49.177906][ T3641] name failslab, interval 1, probability 0, space 0, times 0 [ 49.191206][ T3641] CPU: 1 PID: 3641 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.201351][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.211417][ T3641] Call Trace: [ 49.214684][ T3641] [ 49.217599][ T3641] dump_stack_lvl+0xcd/0x134 [ 49.222191][ T3641] should_fail.cold+0x5/0xa [ 49.226690][ T3641] should_failslab+0x5/0x10 [ 49.231186][ T3641] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.236458][ T3641] ? ref_tracker_alloc+0x14c/0x550 [ 49.241566][ T3641] ref_tracker_alloc+0x14c/0x550 [ 49.246492][ T3641] ? ref_tracker_free+0x6b0/0x6b0 [ 49.251508][ T3641] ? lock_release+0x720/0x720 [ 49.256183][ T3641] ? do_raw_spin_lock+0x120/0x2a0 [ 49.261205][ T3641] ? rwlock_bug.part.0+0x90/0x90 [ 49.266155][ T3641] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.271525][ T3641] linkwatch_fire_event+0x202/0x260 [ 49.276722][ T3641] netif_carrier_off+0x96/0xb0 [ 49.281477][ T3641] __tun_detach+0xfe7/0x13e0 [ 49.286068][ T3641] tun_chr_close+0xc4/0x180 [ 49.290562][ T3641] __fput+0x277/0x9d0 [ 49.294534][ T3641] ? __tun_detach+0x13e0/0x13e0 [ 49.299385][ T3641] task_work_run+0xdd/0x1a0 [ 49.303891][ T3641] ptrace_notify+0x114/0x140 [ 49.308480][ T3641] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.314719][ T3641] syscall_exit_to_user_mode+0x9/0x60 [ 49.320089][ T3641] do_syscall_64+0x42/0xb0 [ 49.324509][ T3641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.330401][ T3641] RIP: 0033:0x7fc6cd2767a3 [ 49.334806][ T3641] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.354406][ T3641] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.363078][ T3641] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.371048][ T3641] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3641] close(3) = 0 [pid 3641] close(4) = 0 [pid 3641] close(5) = -1 EBADF (Bad file descriptor) [ 49.379018][ T3641] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.386980][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.394942][ T3641] R13: 00000000000f4240 R14: 000000000000becc R15: 00007ffdc49a5924 [ 49.402932][ T3641] [pid 3641] close(6) = -1 EBADF (Bad file descriptor) [pid 3641] close(7) = -1 EBADF (Bad file descriptor) [pid 3641] close(8) = -1 EBADF (Bad file descriptor) [pid 3641] close(9) = -1 EBADF (Bad file descriptor) [pid 3641] close(10) = -1 EBADF (Bad file descriptor) [pid 3641] close(11) = -1 EBADF (Bad file descriptor) [pid 3641] close(12) = -1 EBADF (Bad file descriptor) [pid 3641] close(13) = -1 EBADF (Bad file descriptor) [pid 3641] close(14) = -1 EBADF (Bad file descriptor) [pid 3641] close(15) = -1 EBADF (Bad file descriptor) [pid 3641] close(16) = -1 EBADF (Bad file descriptor) [pid 3641] close(17) = -1 EBADF (Bad file descriptor) [pid 3641] close(18) = -1 EBADF (Bad file descriptor) [pid 3641] close(19) = -1 EBADF (Bad file descriptor) [pid 3641] close(20) = -1 EBADF (Bad file descriptor) [pid 3641] close(21) = -1 EBADF (Bad file descriptor) [pid 3641] close(22) = -1 EBADF (Bad file descriptor) [pid 3641] close(23) = -1 EBADF (Bad file descriptor) [pid 3641] close(24) = -1 EBADF (Bad file descriptor) [pid 3641] close(25) = -1 EBADF (Bad file descriptor) [pid 3641] close(26) = -1 EBADF (Bad file descriptor) [pid 3641] close(27) = -1 EBADF (Bad file descriptor) [pid 3641] close(28) = -1 EBADF (Bad file descriptor) [pid 3641] close(29) = -1 EBADF (Bad file descriptor) [pid 3641] exit_group(0) = ? [pid 3641] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 24 ./strace-static-x86_64: Process 3642 attached [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3642] setpgid(0, 0) = 0 [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3642] write(3, "1000", 4) = 4 [pid 3642] close(3) = 0 [pid 3642] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3642] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3642] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3642] write(4, "5", 1) = 1 [pid 3642] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.483519][ T3642] FAULT_INJECTION: forcing a failure. [ 49.483519][ T3642] name failslab, interval 1, probability 0, space 0, times 0 [ 49.496752][ T3642] CPU: 0 PID: 3642 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.507075][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.517110][ T3642] Call Trace: [ 49.520366][ T3642] [ 49.523274][ T3642] dump_stack_lvl+0xcd/0x134 [ 49.527935][ T3642] should_fail.cold+0x5/0xa [ 49.532418][ T3642] should_failslab+0x5/0x10 [ 49.536908][ T3642] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.542188][ T3642] ? ref_tracker_alloc+0x14c/0x550 [ 49.547281][ T3642] ref_tracker_alloc+0x14c/0x550 [ 49.552196][ T3642] ? ref_tracker_free+0x6b0/0x6b0 [ 49.557196][ T3642] ? lock_release+0x720/0x720 [ 49.561851][ T3642] ? do_raw_spin_lock+0x120/0x2a0 [ 49.566852][ T3642] ? rwlock_bug.part.0+0x90/0x90 [ 49.571770][ T3642] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.577216][ T3642] linkwatch_fire_event+0x202/0x260 [ 49.582405][ T3642] netif_carrier_off+0x96/0xb0 [ 49.587153][ T3642] __tun_detach+0xfe7/0x13e0 [ 49.591741][ T3642] tun_chr_close+0xc4/0x180 [ 49.596223][ T3642] __fput+0x277/0x9d0 [ 49.600185][ T3642] ? __tun_detach+0x13e0/0x13e0 [ 49.605026][ T3642] task_work_run+0xdd/0x1a0 [ 49.609521][ T3642] ptrace_notify+0x114/0x140 [ 49.614094][ T3642] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.620319][ T3642] syscall_exit_to_user_mode+0x9/0x60 [ 49.625673][ T3642] do_syscall_64+0x42/0xb0 [ 49.630071][ T3642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.635952][ T3642] RIP: 0033:0x7fc6cd2767a3 [ 49.640391][ T3642] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.660082][ T3642] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.668476][ T3642] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.676429][ T3642] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3642] close(3) = 0 [pid 3642] close(4) = 0 [pid 3642] close(5) = -1 EBADF (Bad file descriptor) [pid 3642] close(6) = -1 EBADF (Bad file descriptor) [pid 3642] close(7) = -1 EBADF (Bad file descriptor) [pid 3642] close(8) = -1 EBADF (Bad file descriptor) [pid 3642] close(9) = -1 EBADF (Bad file descriptor) [pid 3642] close(10) = -1 EBADF (Bad file descriptor) [pid 3642] close(11) = -1 EBADF (Bad file descriptor) [pid 3642] close(12) = -1 EBADF (Bad file descriptor) [pid 3642] close(13) = -1 EBADF (Bad file descriptor) [pid 3642] close(14) = -1 EBADF (Bad file descriptor) [pid 3642] close(15) = -1 EBADF (Bad file descriptor) [pid 3642] close(16) = -1 EBADF (Bad file descriptor) [pid 3642] close(17) = -1 EBADF (Bad file descriptor) [ 49.684384][ T3642] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.692445][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.700399][ T3642] R13: 00000000000f4240 R14: 000000000000bffd R15: 00007ffdc49a5924 [ 49.708363][ T3642] [pid 3642] close(18) = -1 EBADF (Bad file descriptor) [pid 3642] close(19) = -1 EBADF (Bad file descriptor) [pid 3642] close(20) = -1 EBADF (Bad file descriptor) [pid 3642] close(21) = -1 EBADF (Bad file descriptor) [pid 3642] close(22) = -1 EBADF (Bad file descriptor) [pid 3642] close(23) = -1 EBADF (Bad file descriptor) [pid 3642] close(24) = -1 EBADF (Bad file descriptor) [pid 3642] close(25) = -1 EBADF (Bad file descriptor) [pid 3642] close(26) = -1 EBADF (Bad file descriptor) [pid 3642] close(27) = -1 EBADF (Bad file descriptor) [pid 3642] close(28) = -1 EBADF (Bad file descriptor) [pid 3642] close(29) = -1 EBADF (Bad file descriptor) [pid 3642] exit_group(0) = ? [pid 3642] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 25 ./strace-static-x86_64: Process 3643 attached [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3643] setpgid(0, 0) = 0 [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3643] write(3, "1000", 4) = 4 [pid 3643] close(3) = 0 [pid 3643] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3643] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3643] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3643] write(4, "5", 1) = 1 [pid 3643] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 49.780013][ T3643] FAULT_INJECTION: forcing a failure. [ 49.780013][ T3643] name failslab, interval 1, probability 0, space 0, times 0 [ 49.792804][ T3643] CPU: 0 PID: 3643 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 49.803046][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.813198][ T3643] Call Trace: [ 49.816470][ T3643] [ 49.819471][ T3643] dump_stack_lvl+0xcd/0x134 [ 49.824057][ T3643] should_fail.cold+0x5/0xa [ 49.828576][ T3643] should_failslab+0x5/0x10 [ 49.833066][ T3643] kmem_cache_alloc_trace+0x60/0x3f0 [ 49.838341][ T3643] ? ref_tracker_alloc+0x14c/0x550 [ 49.843463][ T3643] ref_tracker_alloc+0x14c/0x550 [ 49.848408][ T3643] ? ref_tracker_free+0x6b0/0x6b0 [ 49.853513][ T3643] ? lock_release+0x720/0x720 [ 49.858187][ T3643] ? do_raw_spin_lock+0x120/0x2a0 [ 49.863222][ T3643] ? rwlock_bug.part.0+0x90/0x90 [ 49.868152][ T3643] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 49.873520][ T3643] linkwatch_fire_event+0x202/0x260 [ 49.878713][ T3643] netif_carrier_off+0x96/0xb0 [ 49.883471][ T3643] __tun_detach+0xfe7/0x13e0 [ 49.888068][ T3643] tun_chr_close+0xc4/0x180 [ 49.892648][ T3643] __fput+0x277/0x9d0 [ 49.896618][ T3643] ? __tun_detach+0x13e0/0x13e0 [ 49.901458][ T3643] task_work_run+0xdd/0x1a0 [ 49.905957][ T3643] ptrace_notify+0x114/0x140 [ 49.910540][ T3643] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 49.916863][ T3643] syscall_exit_to_user_mode+0x9/0x60 [ 49.922248][ T3643] do_syscall_64+0x42/0xb0 [ 49.926680][ T3643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.932565][ T3643] RIP: 0033:0x7fc6cd2767a3 [ 49.936969][ T3643] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 49.956565][ T3643] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.964969][ T3643] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 49.972932][ T3643] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3643] close(3) = 0 [pid 3643] close(4) = 0 [pid 3643] close(5) = -1 EBADF (Bad file descriptor) [pid 3643] close(6) = -1 EBADF (Bad file descriptor) [pid 3643] close(7) = -1 EBADF (Bad file descriptor) [pid 3643] close(8) = -1 EBADF (Bad file descriptor) [pid 3643] close(9) = -1 EBADF (Bad file descriptor) [pid 3643] close(10) = -1 EBADF (Bad file descriptor) [pid 3643] close(11) = -1 EBADF (Bad file descriptor) [ 49.980901][ T3643] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 49.988957][ T3643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 49.996927][ T3643] R13: 00000000000f4240 R14: 000000000000c12f R15: 00007ffdc49a5924 [ 50.005023][ T3643] [pid 3643] close(12) = -1 EBADF (Bad file descriptor) [pid 3643] close(13) = -1 EBADF (Bad file descriptor) [pid 3643] close(14) = -1 EBADF (Bad file descriptor) [pid 3643] close(15) = -1 EBADF (Bad file descriptor) [pid 3643] close(16) = -1 EBADF (Bad file descriptor) [pid 3643] close(17) = -1 EBADF (Bad file descriptor) [pid 3643] close(18) = -1 EBADF (Bad file descriptor) [pid 3643] close(19) = -1 EBADF (Bad file descriptor) [pid 3643] close(20) = -1 EBADF (Bad file descriptor) [pid 3643] close(21) = -1 EBADF (Bad file descriptor) [pid 3643] close(22) = -1 EBADF (Bad file descriptor) [pid 3643] close(23) = -1 EBADF (Bad file descriptor) [pid 3643] close(24) = -1 EBADF (Bad file descriptor) [pid 3643] close(25) = -1 EBADF (Bad file descriptor) [pid 3643] close(26) = -1 EBADF (Bad file descriptor) [pid 3643] close(27) = -1 EBADF (Bad file descriptor) [pid 3643] close(28) = -1 EBADF (Bad file descriptor) [pid 3643] close(29) = -1 EBADF (Bad file descriptor) [pid 3643] exit_group(0) = ? [pid 3643] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3644 attached , child_tidptr=0x5555570bd5d0) = 26 [pid 3644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3644] setpgid(0, 0) = 0 [pid 3644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3644] write(3, "1000", 4) = 4 [pid 3644] close(3) = 0 [pid 3644] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3644] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3644] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3644] write(4, "5", 1) = 1 [pid 3644] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.081800][ T3644] FAULT_INJECTION: forcing a failure. [ 50.081800][ T3644] name failslab, interval 1, probability 0, space 0, times 0 [ 50.094589][ T3644] CPU: 1 PID: 3644 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.104733][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.114886][ T3644] Call Trace: [ 50.118163][ T3644] [ 50.121086][ T3644] dump_stack_lvl+0xcd/0x134 [ 50.125682][ T3644] should_fail.cold+0x5/0xa [ 50.130612][ T3644] should_failslab+0x5/0x10 [ 50.135116][ T3644] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.140715][ T3644] ? ref_tracker_alloc+0x14c/0x550 [ 50.145824][ T3644] ref_tracker_alloc+0x14c/0x550 [ 50.150759][ T3644] ? ref_tracker_free+0x6b0/0x6b0 [ 50.155781][ T3644] ? lock_release+0x720/0x720 [ 50.160544][ T3644] ? do_raw_spin_lock+0x120/0x2a0 [ 50.165567][ T3644] ? rwlock_bug.part.0+0x90/0x90 [ 50.170497][ T3644] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.175870][ T3644] linkwatch_fire_event+0x202/0x260 [ 50.181092][ T3644] netif_carrier_off+0x96/0xb0 [ 50.185870][ T3644] __tun_detach+0xfe7/0x13e0 [ 50.190465][ T3644] tun_chr_close+0xc4/0x180 [ 50.194964][ T3644] __fput+0x277/0x9d0 [ 50.199024][ T3644] ? __tun_detach+0x13e0/0x13e0 [ 50.203862][ T3644] task_work_run+0xdd/0x1a0 [ 50.208451][ T3644] ptrace_notify+0x114/0x140 [ 50.213076][ T3644] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.219318][ T3644] syscall_exit_to_user_mode+0x9/0x60 [ 50.224684][ T3644] do_syscall_64+0x42/0xb0 [ 50.229098][ T3644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.235001][ T3644] RIP: 0033:0x7fc6cd2767a3 [ 50.239587][ T3644] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.259208][ T3644] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.267614][ T3644] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3644] close(3) = 0 [pid 3644] close(4) = 0 [pid 3644] close(5) = -1 EBADF (Bad file descriptor) [pid 3644] close(6) = -1 EBADF (Bad file descriptor) [pid 3644] close(7) = -1 EBADF (Bad file descriptor) [pid 3644] close(8) = -1 EBADF (Bad file descriptor) [pid 3644] close(9) = -1 EBADF (Bad file descriptor) [pid 3644] close(10) = -1 EBADF (Bad file descriptor) [pid 3644] close(11) = -1 EBADF (Bad file descriptor) [pid 3644] close(12) = -1 EBADF (Bad file descriptor) [pid 3644] close(13) = -1 EBADF (Bad file descriptor) [pid 3644] close(14) = -1 EBADF (Bad file descriptor) [pid 3644] close(15) = -1 EBADF (Bad file descriptor) [pid 3644] close(16) = -1 EBADF (Bad file descriptor) [ 50.275577][ T3644] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.283544][ T3644] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.291509][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.299479][ T3644] R13: 00000000000f4240 R14: 000000000000c25b R15: 00007ffdc49a5924 [ 50.307465][ T3644] [pid 3644] close(17) = -1 EBADF (Bad file descriptor) [pid 3644] close(18) = -1 EBADF (Bad file descriptor) [pid 3644] close(19) = -1 EBADF (Bad file descriptor) [pid 3644] close(20) = -1 EBADF (Bad file descriptor) [pid 3644] close(21) = -1 EBADF (Bad file descriptor) [pid 3644] close(22) = -1 EBADF (Bad file descriptor) [pid 3644] close(23) = -1 EBADF (Bad file descriptor) [pid 3644] close(24) = -1 EBADF (Bad file descriptor) [pid 3644] close(25) = -1 EBADF (Bad file descriptor) [pid 3644] close(26) = -1 EBADF (Bad file descriptor) [pid 3644] close(27) = -1 EBADF (Bad file descriptor) [pid 3644] close(28) = -1 EBADF (Bad file descriptor) [pid 3644] close(29) = -1 EBADF (Bad file descriptor) [pid 3644] exit_group(0) = ? [pid 3644] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 27 ./strace-static-x86_64: Process 3645 attached [pid 3645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3645] setpgid(0, 0) = 0 [pid 3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3645] write(3, "1000", 4) = 4 [pid 3645] close(3) = 0 [pid 3645] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3645] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3645] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3645] write(4, "5", 1) = 1 [pid 3645] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.380359][ T3645] FAULT_INJECTION: forcing a failure. [ 50.380359][ T3645] name failslab, interval 1, probability 0, space 0, times 0 [ 50.393358][ T3645] CPU: 1 PID: 3645 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.403875][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.413926][ T3645] Call Trace: [ 50.417202][ T3645] [ 50.420123][ T3645] dump_stack_lvl+0xcd/0x134 [ 50.424712][ T3645] should_fail.cold+0x5/0xa [ 50.429210][ T3645] should_failslab+0x5/0x10 [ 50.433701][ T3645] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.438971][ T3645] ? ref_tracker_alloc+0x14c/0x550 [ 50.444073][ T3645] ref_tracker_alloc+0x14c/0x550 [ 50.449291][ T3645] ? ref_tracker_free+0x6b0/0x6b0 [ 50.454303][ T3645] ? lock_release+0x720/0x720 [ 50.458970][ T3645] ? do_raw_spin_lock+0x120/0x2a0 [ 50.463981][ T3645] ? rwlock_bug.part.0+0x90/0x90 [ 50.468910][ T3645] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.474279][ T3645] linkwatch_fire_event+0x202/0x260 [ 50.479471][ T3645] netif_carrier_off+0x96/0xb0 [ 50.484221][ T3645] __tun_detach+0xfe7/0x13e0 [ 50.488803][ T3645] tun_chr_close+0xc4/0x180 [ 50.493296][ T3645] __fput+0x277/0x9d0 [ 50.497266][ T3645] ? __tun_detach+0x13e0/0x13e0 [ 50.502104][ T3645] task_work_run+0xdd/0x1a0 [ 50.506599][ T3645] ptrace_notify+0x114/0x140 [ 50.511266][ T3645] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.517503][ T3645] syscall_exit_to_user_mode+0x9/0x60 [ 50.522974][ T3645] do_syscall_64+0x42/0xb0 [ 50.527436][ T3645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.533325][ T3645] RIP: 0033:0x7fc6cd2767a3 [ 50.537727][ T3645] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.557418][ T3645] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.565846][ T3645] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3645] close(3) = 0 [pid 3645] close(4) = 0 [pid 3645] close(5) = -1 EBADF (Bad file descriptor) [pid 3645] close(6) = -1 EBADF (Bad file descriptor) [pid 3645] close(7) = -1 EBADF (Bad file descriptor) [pid 3645] close(8) = -1 EBADF (Bad file descriptor) [pid 3645] close(9) = -1 EBADF (Bad file descriptor) [pid 3645] close(10) = -1 EBADF (Bad file descriptor) [pid 3645] close(11) = -1 EBADF (Bad file descriptor) [ 50.573903][ T3645] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.581869][ T3645] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.589831][ T3645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.597790][ T3645] R13: 00000000000f4240 R14: 000000000000c383 R15: 00007ffdc49a5924 [ 50.605762][ T3645] [pid 3645] close(12) = -1 EBADF (Bad file descriptor) [pid 3645] close(13) = -1 EBADF (Bad file descriptor) [pid 3645] close(14) = -1 EBADF (Bad file descriptor) [pid 3645] close(15) = -1 EBADF (Bad file descriptor) [pid 3645] close(16) = -1 EBADF (Bad file descriptor) [pid 3645] close(17) = -1 EBADF (Bad file descriptor) [pid 3645] close(18) = -1 EBADF (Bad file descriptor) [pid 3645] close(19) = -1 EBADF (Bad file descriptor) [pid 3645] close(20) = -1 EBADF (Bad file descriptor) [pid 3645] close(21) = -1 EBADF (Bad file descriptor) [pid 3645] close(22) = -1 EBADF (Bad file descriptor) [pid 3645] close(23) = -1 EBADF (Bad file descriptor) [pid 3645] close(24) = -1 EBADF (Bad file descriptor) [pid 3645] close(25) = -1 EBADF (Bad file descriptor) [pid 3645] close(26) = -1 EBADF (Bad file descriptor) [pid 3645] close(27) = -1 EBADF (Bad file descriptor) [pid 3645] close(28) = -1 EBADF (Bad file descriptor) [pid 3645] close(29) = -1 EBADF (Bad file descriptor) [pid 3645] exit_group(0) = ? [pid 3645] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 28 ./strace-static-x86_64: Process 3646 attached [pid 3646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3646] setpgid(0, 0) = 0 [pid 3646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3646] write(3, "1000", 4) = 4 [pid 3646] close(3) = 0 [pid 3646] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3646] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3646] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3646] write(4, "5", 1) = 1 [pid 3646] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.677632][ T3646] FAULT_INJECTION: forcing a failure. [ 50.677632][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 50.690886][ T3646] CPU: 0 PID: 3646 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.701364][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.711395][ T3646] Call Trace: [ 50.714652][ T3646] [ 50.717582][ T3646] dump_stack_lvl+0xcd/0x134 [ 50.722161][ T3646] should_fail.cold+0x5/0xa [ 50.726657][ T3646] should_failslab+0x5/0x10 [ 50.731345][ T3646] kmem_cache_alloc_trace+0x60/0x3f0 [ 50.736616][ T3646] ? ref_tracker_alloc+0x14c/0x550 [ 50.741718][ T3646] ref_tracker_alloc+0x14c/0x550 [ 50.746640][ T3646] ? ref_tracker_free+0x6b0/0x6b0 [ 50.751649][ T3646] ? lock_release+0x720/0x720 [ 50.756405][ T3646] ? do_raw_spin_lock+0x120/0x2a0 [ 50.761433][ T3646] ? rwlock_bug.part.0+0x90/0x90 [ 50.766365][ T3646] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 50.771732][ T3646] linkwatch_fire_event+0x202/0x260 [ 50.776929][ T3646] netif_carrier_off+0x96/0xb0 [ 50.781680][ T3646] __tun_detach+0xfe7/0x13e0 [ 50.786264][ T3646] tun_chr_close+0xc4/0x180 [ 50.790751][ T3646] __fput+0x277/0x9d0 [ 50.794717][ T3646] ? __tun_detach+0x13e0/0x13e0 [ 50.799571][ T3646] task_work_run+0xdd/0x1a0 [ 50.804064][ T3646] ptrace_notify+0x114/0x140 [ 50.808640][ T3646] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 50.814869][ T3646] syscall_exit_to_user_mode+0x9/0x60 [ 50.820231][ T3646] do_syscall_64+0x42/0xb0 [ 50.824903][ T3646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.830970][ T3646] RIP: 0033:0x7fc6cd2767a3 [ 50.835376][ T3646] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 50.855061][ T3646] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.863474][ T3646] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3646] close(3) = 0 [pid 3646] close(4) = 0 [pid 3646] close(5) = -1 EBADF (Bad file descriptor) [pid 3646] close(6) = -1 EBADF (Bad file descriptor) [pid 3646] close(7) = -1 EBADF (Bad file descriptor) [pid 3646] close(8) = -1 EBADF (Bad file descriptor) [ 50.871438][ T3646] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 50.879407][ T3646] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 50.887366][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.895407][ T3646] R13: 00000000000f4240 R14: 000000000000c4af R15: 00007ffdc49a5924 [ 50.903377][ T3646] [pid 3646] close(9) = -1 EBADF (Bad file descriptor) [pid 3646] close(10) = -1 EBADF (Bad file descriptor) [pid 3646] close(11) = -1 EBADF (Bad file descriptor) [pid 3646] close(12) = -1 EBADF (Bad file descriptor) [pid 3646] close(13) = -1 EBADF (Bad file descriptor) [pid 3646] close(14) = -1 EBADF (Bad file descriptor) [pid 3646] close(15) = -1 EBADF (Bad file descriptor) [pid 3646] close(16) = -1 EBADF (Bad file descriptor) [pid 3646] close(17) = -1 EBADF (Bad file descriptor) [pid 3646] close(18) = -1 EBADF (Bad file descriptor) [pid 3646] close(19) = -1 EBADF (Bad file descriptor) [pid 3646] close(20) = -1 EBADF (Bad file descriptor) [pid 3646] close(21) = -1 EBADF (Bad file descriptor) [pid 3646] close(22) = -1 EBADF (Bad file descriptor) [pid 3646] close(23) = -1 EBADF (Bad file descriptor) [pid 3646] close(24) = -1 EBADF (Bad file descriptor) [pid 3646] close(25) = -1 EBADF (Bad file descriptor) [pid 3646] close(26) = -1 EBADF (Bad file descriptor) [pid 3646] close(27) = -1 EBADF (Bad file descriptor) [pid 3646] close(28) = -1 EBADF (Bad file descriptor) [pid 3646] close(29) = -1 EBADF (Bad file descriptor) [pid 3646] exit_group(0) = ? [pid 3646] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 29 ./strace-static-x86_64: Process 3647 attached [pid 3647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3647] setpgid(0, 0) = 0 [pid 3647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3647] write(3, "1000", 4) = 4 [pid 3647] close(3) = 0 [pid 3647] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3647] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3647] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3647] write(4, "5", 1) = 1 [pid 3647] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 50.974563][ T3647] FAULT_INJECTION: forcing a failure. [ 50.974563][ T3647] name failslab, interval 1, probability 0, space 0, times 0 [ 50.988634][ T3647] CPU: 0 PID: 3647 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 50.999516][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.009562][ T3647] Call Trace: [ 51.012843][ T3647] [ 51.015771][ T3647] dump_stack_lvl+0xcd/0x134 [ 51.020358][ T3647] should_fail.cold+0x5/0xa [ 51.024856][ T3647] should_failslab+0x5/0x10 [ 51.029346][ T3647] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.034622][ T3647] ? ref_tracker_alloc+0x14c/0x550 [ 51.039817][ T3647] ref_tracker_alloc+0x14c/0x550 [ 51.044942][ T3647] ? ref_tracker_free+0x6b0/0x6b0 [ 51.049969][ T3647] ? lock_release+0x720/0x720 [ 51.054900][ T3647] ? do_raw_spin_lock+0x120/0x2a0 [ 51.059923][ T3647] ? rwlock_bug.part.0+0x90/0x90 [ 51.064937][ T3647] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.070301][ T3647] linkwatch_fire_event+0x202/0x260 [ 51.075495][ T3647] netif_carrier_off+0x96/0xb0 [ 51.080246][ T3647] __tun_detach+0xfe7/0x13e0 [ 51.084832][ T3647] tun_chr_close+0xc4/0x180 [ 51.089320][ T3647] __fput+0x277/0x9d0 [ 51.093286][ T3647] ? __tun_detach+0x13e0/0x13e0 [ 51.098296][ T3647] task_work_run+0xdd/0x1a0 [ 51.102789][ T3647] ptrace_notify+0x114/0x140 [ 51.107454][ T3647] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.114206][ T3647] syscall_exit_to_user_mode+0x9/0x60 [ 51.119568][ T3647] do_syscall_64+0x42/0xb0 [ 51.123976][ T3647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.129860][ T3647] RIP: 0033:0x7fc6cd2767a3 [ 51.134266][ T3647] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.153865][ T3647] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.162263][ T3647] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3647] close(3) = 0 [pid 3647] close(4) = 0 [pid 3647] close(5) = -1 EBADF (Bad file descriptor) [pid 3647] close(6) = -1 EBADF (Bad file descriptor) [pid 3647] close(7) = -1 EBADF (Bad file descriptor) [pid 3647] close(8) = -1 EBADF (Bad file descriptor) [pid 3647] close(9) = -1 EBADF (Bad file descriptor) [pid 3647] close(10) = -1 EBADF (Bad file descriptor) [pid 3647] close(11) = -1 EBADF (Bad file descriptor) [pid 3647] close(12) = -1 EBADF (Bad file descriptor) [pid 3647] close(13) = -1 EBADF (Bad file descriptor) [pid 3647] close(14) = -1 EBADF (Bad file descriptor) [pid 3647] close(15) = -1 EBADF (Bad file descriptor) [pid 3647] close(16) = -1 EBADF (Bad file descriptor) [pid 3647] close(17) = -1 EBADF (Bad file descriptor) [pid 3647] close(18) = -1 EBADF (Bad file descriptor) [pid 3647] close(19) = -1 EBADF (Bad file descriptor) [pid 3647] close(20) = -1 EBADF (Bad file descriptor) [pid 3647] close(21) = -1 EBADF (Bad file descriptor) [pid 3647] close(22) = -1 EBADF (Bad file descriptor) [pid 3647] close(23) = -1 EBADF (Bad file descriptor) [pid 3647] close(24) = -1 EBADF (Bad file descriptor) [ 51.170218][ T3647] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 51.178175][ T3647] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.186127][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.194163][ T3647] R13: 00000000000f4240 R14: 000000000000c5dd R15: 00007ffdc49a5924 [ 51.202132][ T3647] [pid 3647] close(25) = -1 EBADF (Bad file descriptor) [pid 3647] close(26) = -1 EBADF (Bad file descriptor) [pid 3647] close(27) = -1 EBADF (Bad file descriptor) [pid 3647] close(28) = -1 EBADF (Bad file descriptor) [pid 3647] close(29) = -1 EBADF (Bad file descriptor) [pid 3647] exit_group(0) = ? [pid 3647] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 30 ./strace-static-x86_64: Process 3648 attached [pid 3648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3648] setpgid(0, 0) = 0 [pid 3648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3648] write(3, "1000", 4) = 4 [pid 3648] close(3) = 0 [pid 3648] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3648] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3648] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3648] write(4, "5", 1) = 1 [pid 3648] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.268931][ T3648] FAULT_INJECTION: forcing a failure. [ 51.268931][ T3648] name failslab, interval 1, probability 0, space 0, times 0 [ 51.281719][ T3648] CPU: 1 PID: 3648 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.291867][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.301914][ T3648] Call Trace: [ 51.305172][ T3648] [ 51.308086][ T3648] dump_stack_lvl+0xcd/0x134 [ 51.312677][ T3648] should_fail.cold+0x5/0xa [ 51.317195][ T3648] should_failslab+0x5/0x10 [ 51.321689][ T3648] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.326968][ T3648] ? ref_tracker_alloc+0x14c/0x550 [ 51.332162][ T3648] ref_tracker_alloc+0x14c/0x550 [ 51.337108][ T3648] ? ref_tracker_free+0x6b0/0x6b0 [ 51.342128][ T3648] ? lock_release+0x720/0x720 [ 51.346807][ T3648] ? do_raw_spin_lock+0x120/0x2a0 [ 51.351816][ T3648] ? rwlock_bug.part.0+0x90/0x90 [ 51.356736][ T3648] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.362100][ T3648] linkwatch_fire_event+0x202/0x260 [ 51.367287][ T3648] netif_carrier_off+0x96/0xb0 [ 51.372033][ T3648] __tun_detach+0xfe7/0x13e0 [ 51.376612][ T3648] tun_chr_close+0xc4/0x180 [ 51.381111][ T3648] __fput+0x277/0x9d0 [ 51.385073][ T3648] ? __tun_detach+0x13e0/0x13e0 [ 51.389906][ T3648] task_work_run+0xdd/0x1a0 [ 51.394567][ T3648] ptrace_notify+0x114/0x140 [ 51.399142][ T3648] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.405378][ T3648] syscall_exit_to_user_mode+0x9/0x60 [ 51.410865][ T3648] do_syscall_64+0x42/0xb0 [ 51.415299][ T3648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.421180][ T3648] RIP: 0033:0x7fc6cd2767a3 [ 51.425581][ T3648] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.445180][ T3648] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.453573][ T3648] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 51.461538][ T3648] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3648] close(3) = 0 [pid 3648] close(4) = 0 [pid 3648] close(5) = -1 EBADF (Bad file descriptor) [pid 3648] close(6) = -1 EBADF (Bad file descriptor) [pid 3648] close(7) = -1 EBADF (Bad file descriptor) [pid 3648] close(8) = -1 EBADF (Bad file descriptor) [pid 3648] close(9) = -1 EBADF (Bad file descriptor) [pid 3648] close(10) = -1 EBADF (Bad file descriptor) [ 51.469490][ T3648] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.477778][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.485824][ T3648] R13: 00000000000f4240 R14: 000000000000c701 R15: 00007ffdc49a5924 [ 51.493786][ T3648] [pid 3648] close(11) = -1 EBADF (Bad file descriptor) [pid 3648] close(12) = -1 EBADF (Bad file descriptor) [pid 3648] close(13) = -1 EBADF (Bad file descriptor) [pid 3648] close(14) = -1 EBADF (Bad file descriptor) [pid 3648] close(15) = -1 EBADF (Bad file descriptor) [pid 3648] close(16) = -1 EBADF (Bad file descriptor) [pid 3648] close(17) = -1 EBADF (Bad file descriptor) [pid 3648] close(18) = -1 EBADF (Bad file descriptor) [pid 3648] close(19) = -1 EBADF (Bad file descriptor) [pid 3648] close(20) = -1 EBADF (Bad file descriptor) [pid 3648] close(21) = -1 EBADF (Bad file descriptor) [pid 3648] close(22) = -1 EBADF (Bad file descriptor) [pid 3648] close(23) = -1 EBADF (Bad file descriptor) [pid 3648] close(24) = -1 EBADF (Bad file descriptor) [pid 3648] close(25) = -1 EBADF (Bad file descriptor) [pid 3648] close(26) = -1 EBADF (Bad file descriptor) [pid 3648] close(27) = -1 EBADF (Bad file descriptor) [pid 3648] close(28) = -1 EBADF (Bad file descriptor) [pid 3648] close(29) = -1 EBADF (Bad file descriptor) [pid 3648] exit_group(0) = ? [pid 3648] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 31 ./strace-static-x86_64: Process 3649 attached [pid 3649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3649] setpgid(0, 0) = 0 [pid 3649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3649] write(3, "1000", 4) = 4 [pid 3649] close(3) = 0 [pid 3649] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3649] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3649] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3649] write(4, "5", 1) = 1 [pid 3649] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.572600][ T3649] FAULT_INJECTION: forcing a failure. [ 51.572600][ T3649] name failslab, interval 1, probability 0, space 0, times 0 [ 51.585208][ T3649] CPU: 0 PID: 3649 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.595354][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.605409][ T3649] Call Trace: [ 51.608704][ T3649] [ 51.611632][ T3649] dump_stack_lvl+0xcd/0x134 [ 51.616225][ T3649] should_fail.cold+0x5/0xa [ 51.620734][ T3649] should_failslab+0x5/0x10 [ 51.625243][ T3649] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.630546][ T3649] ? ref_tracker_alloc+0x14c/0x550 [ 51.635663][ T3649] ref_tracker_alloc+0x14c/0x550 [ 51.640607][ T3649] ? ref_tracker_free+0x6b0/0x6b0 [ 51.645642][ T3649] ? lock_release+0x720/0x720 [ 51.650469][ T3649] ? do_raw_spin_lock+0x120/0x2a0 [ 51.655503][ T3649] ? rwlock_bug.part.0+0x90/0x90 [ 51.660462][ T3649] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.665866][ T3649] linkwatch_fire_event+0x202/0x260 [ 51.671091][ T3649] netif_carrier_off+0x96/0xb0 [ 51.675872][ T3649] __tun_detach+0xfe7/0x13e0 [ 51.680500][ T3649] tun_chr_close+0xc4/0x180 [ 51.685032][ T3649] __fput+0x277/0x9d0 [ 51.689016][ T3649] ? __tun_detach+0x13e0/0x13e0 [ 51.693885][ T3649] task_work_run+0xdd/0x1a0 [ 51.698397][ T3649] ptrace_notify+0x114/0x140 [ 51.703013][ T3649] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 51.709431][ T3649] syscall_exit_to_user_mode+0x9/0x60 [ 51.714811][ T3649] do_syscall_64+0x42/0xb0 [ 51.719227][ T3649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.725225][ T3649] RIP: 0033:0x7fc6cd2767a3 [ 51.729640][ T3649] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 51.749249][ T3649] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 51.757697][ T3649] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 51.765667][ T3649] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3649] close(3) = 0 [pid 3649] close(4) = 0 [pid 3649] close(5) = -1 EBADF (Bad file descriptor) [pid 3649] close(6) = -1 EBADF (Bad file descriptor) [pid 3649] close(7) = -1 EBADF (Bad file descriptor) [pid 3649] close(8) = -1 EBADF (Bad file descriptor) [pid 3649] close(9) = -1 EBADF (Bad file descriptor) [pid 3649] close(10) = -1 EBADF (Bad file descriptor) [pid 3649] close(11) = -1 EBADF (Bad file descriptor) [pid 3649] close(12) = -1 EBADF (Bad file descriptor) [pid 3649] close(13) = -1 EBADF (Bad file descriptor) [pid 3649] close(14) = -1 EBADF (Bad file descriptor) [pid 3649] close(15) = -1 EBADF (Bad file descriptor) [pid 3649] close(16) = -1 EBADF (Bad file descriptor) [pid 3649] close(17) = -1 EBADF (Bad file descriptor) [pid 3649] close(18) = -1 EBADF (Bad file descriptor) [pid 3649] close(19) = -1 EBADF (Bad file descriptor) [pid 3649] close(20) = -1 EBADF (Bad file descriptor) [pid 3649] close(21) = -1 EBADF (Bad file descriptor) [pid 3649] close(22) = -1 EBADF (Bad file descriptor) [pid 3649] close(23) = -1 EBADF (Bad file descriptor) [pid 3649] close(24) = -1 EBADF (Bad file descriptor) [pid 3649] close(25) = -1 EBADF (Bad file descriptor) [pid 3649] close(26) = -1 EBADF (Bad file descriptor) [pid 3649] close(27) = -1 EBADF (Bad file descriptor) [pid 3649] close(28) = -1 EBADF (Bad file descriptor) [pid 3649] close(29) = -1 EBADF (Bad file descriptor) [pid 3649] exit_group(0) = ? [pid 3649] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 51.773629][ T3649] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 51.781682][ T3649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.789655][ T3649] R13: 00000000000f4240 R14: 000000000000c82b R15: 00007ffdc49a5924 [ 51.797640][ T3649] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3650 attached , child_tidptr=0x5555570bd5d0) = 32 [pid 3650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3650] setpgid(0, 0) = 0 [pid 3650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3650] write(3, "1000", 4) = 4 [pid 3650] close(3) = 0 [pid 3650] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3650] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3650] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3650] write(4, "5", 1) = 1 [pid 3650] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 51.863174][ T3650] FAULT_INJECTION: forcing a failure. [ 51.863174][ T3650] name failslab, interval 1, probability 0, space 0, times 0 [ 51.876135][ T3650] CPU: 0 PID: 3650 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 51.886483][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.896538][ T3650] Call Trace: [ 51.899832][ T3650] [ 51.902759][ T3650] dump_stack_lvl+0xcd/0x134 [ 51.907646][ T3650] should_fail.cold+0x5/0xa [ 51.912185][ T3650] should_failslab+0x5/0x10 [ 51.916710][ T3650] kmem_cache_alloc_trace+0x60/0x3f0 [ 51.922013][ T3650] ? ref_tracker_alloc+0x14c/0x550 [ 51.927142][ T3650] ref_tracker_alloc+0x14c/0x550 [ 51.932099][ T3650] ? ref_tracker_free+0x6b0/0x6b0 [ 51.937120][ T3650] ? lock_release+0x720/0x720 [ 51.941811][ T3650] ? do_raw_spin_lock+0x120/0x2a0 [ 51.946847][ T3650] ? rwlock_bug.part.0+0x90/0x90 [ 51.951788][ T3650] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 51.957179][ T3650] linkwatch_fire_event+0x202/0x260 [ 51.962384][ T3650] netif_carrier_off+0x96/0xb0 [ 51.967165][ T3650] __tun_detach+0xfe7/0x13e0 [ 51.971765][ T3650] tun_chr_close+0xc4/0x180 [ 51.976267][ T3650] __fput+0x277/0x9d0 [ 51.980245][ T3650] ? __tun_detach+0x13e0/0x13e0 [ 51.985093][ T3650] task_work_run+0xdd/0x1a0 [ 51.989601][ T3650] ptrace_notify+0x114/0x140 [ 51.994212][ T3650] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.000462][ T3650] syscall_exit_to_user_mode+0x9/0x60 [ 52.005837][ T3650] do_syscall_64+0x42/0xb0 [ 52.010262][ T3650] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.016162][ T3650] RIP: 0033:0x7fc6cd2767a3 [ 52.020589][ T3650] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.040213][ T3650] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.048662][ T3650] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 52.056650][ T3650] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.064617][ T3650] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.072605][ T3650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.080589][ T3650] R13: 00000000000f4240 R14: 000000000000c955 R15: 00007ffdc49a5924 [ 52.088570][ T3650] [pid 3650] close(3) = 0 [pid 3650] close(4) = 0 [pid 3650] close(5) = -1 EBADF (Bad file descriptor) [pid 3650] close(6) = -1 EBADF (Bad file descriptor) [pid 3650] close(7) = -1 EBADF (Bad file descriptor) [pid 3650] close(8) = -1 EBADF (Bad file descriptor) [pid 3650] close(9) = -1 EBADF (Bad file descriptor) [pid 3650] close(10) = -1 EBADF (Bad file descriptor) [pid 3650] close(11) = -1 EBADF (Bad file descriptor) [pid 3650] close(12) = -1 EBADF (Bad file descriptor) [pid 3650] close(13) = -1 EBADF (Bad file descriptor) [pid 3650] close(14) = -1 EBADF (Bad file descriptor) [pid 3650] close(15) = -1 EBADF (Bad file descriptor) [pid 3650] close(16) = -1 EBADF (Bad file descriptor) [pid 3650] close(17) = -1 EBADF (Bad file descriptor) [pid 3650] close(18) = -1 EBADF (Bad file descriptor) [pid 3650] close(19) = -1 EBADF (Bad file descriptor) [pid 3650] close(20) = -1 EBADF (Bad file descriptor) [pid 3650] close(21) = -1 EBADF (Bad file descriptor) [pid 3650] close(22) = -1 EBADF (Bad file descriptor) [pid 3650] close(23) = -1 EBADF (Bad file descriptor) [pid 3650] close(24) = -1 EBADF (Bad file descriptor) [pid 3650] close(25) = -1 EBADF (Bad file descriptor) [pid 3650] close(26) = -1 EBADF (Bad file descriptor) [pid 3650] close(27) = -1 EBADF (Bad file descriptor) [pid 3650] close(28) = -1 EBADF (Bad file descriptor) [pid 3650] close(29) = -1 EBADF (Bad file descriptor) [pid 3650] exit_group(0) = ? [pid 3650] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 33 ./strace-static-x86_64: Process 3651 attached [pid 3651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3651] setpgid(0, 0) = 0 [pid 3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3651] write(3, "1000", 4) = 4 [pid 3651] close(3) = 0 [pid 3651] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3651] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3651] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3651] write(4, "5", 1) = 1 [pid 3651] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 52.164574][ T3651] FAULT_INJECTION: forcing a failure. [ 52.164574][ T3651] name failslab, interval 1, probability 0, space 0, times 0 [ 52.177292][ T3651] CPU: 1 PID: 3651 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.187449][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.197497][ T3651] Call Trace: [ 52.200783][ T3651] [ 52.203692][ T3651] dump_stack_lvl+0xcd/0x134 [ 52.208275][ T3651] should_fail.cold+0x5/0xa [ 52.212772][ T3651] should_failslab+0x5/0x10 [ 52.217264][ T3651] kmem_cache_alloc_trace+0x60/0x3f0 [ 52.222537][ T3651] ? ref_tracker_alloc+0x14c/0x550 [ 52.227639][ T3651] ref_tracker_alloc+0x14c/0x550 [ 52.232575][ T3651] ? ref_tracker_free+0x6b0/0x6b0 [ 52.237609][ T3651] ? lock_release+0x720/0x720 [ 52.242273][ T3651] ? do_raw_spin_lock+0x120/0x2a0 [ 52.247563][ T3651] ? rwlock_bug.part.0+0x90/0x90 [ 52.252495][ T3651] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 52.257879][ T3651] linkwatch_fire_event+0x202/0x260 [ 52.263088][ T3651] netif_carrier_off+0x96/0xb0 [ 52.267845][ T3651] __tun_detach+0xfe7/0x13e0 [ 52.272431][ T3651] tun_chr_close+0xc4/0x180 [ 52.276920][ T3651] __fput+0x277/0x9d0 [ 52.280979][ T3651] ? __tun_detach+0x13e0/0x13e0 [ 52.285809][ T3651] task_work_run+0xdd/0x1a0 [ 52.290300][ T3651] ptrace_notify+0x114/0x140 [ 52.294880][ T3651] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.301136][ T3651] syscall_exit_to_user_mode+0x9/0x60 [ 52.306503][ T3651] do_syscall_64+0x42/0xb0 [ 52.310997][ T3651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.316899][ T3651] RIP: 0033:0x7fc6cd2767a3 [ 52.321324][ T3651] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.340925][ T3651] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.349467][ T3651] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 52.357520][ T3651] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.365497][ T3651] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.373476][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.381433][ T3651] R13: 00000000000f4240 R14: 000000000000ca7b R15: 00007ffdc49a5924 [ 52.389399][ T3651] [pid 3651] close(3) = 0 [pid 3651] close(4) = 0 [pid 3651] close(5) = -1 EBADF (Bad file descriptor) [pid 3651] close(6) = -1 EBADF (Bad file descriptor) [pid 3651] close(7) = -1 EBADF (Bad file descriptor) [pid 3651] close(8) = -1 EBADF (Bad file descriptor) [pid 3651] close(9) = -1 EBADF (Bad file descriptor) [pid 3651] close(10) = -1 EBADF (Bad file descriptor) [pid 3651] close(11) = -1 EBADF (Bad file descriptor) [pid 3651] close(12) = -1 EBADF (Bad file descriptor) [pid 3651] close(13) = -1 EBADF (Bad file descriptor) [pid 3651] close(14) = -1 EBADF (Bad file descriptor) [pid 3651] close(15) = -1 EBADF (Bad file descriptor) [pid 3651] close(16) = -1 EBADF (Bad file descriptor) [pid 3651] close(17) = -1 EBADF (Bad file descriptor) [pid 3651] close(18) = -1 EBADF (Bad file descriptor) [pid 3651] close(19) = -1 EBADF (Bad file descriptor) [pid 3651] close(20) = -1 EBADF (Bad file descriptor) [pid 3651] close(21) = -1 EBADF (Bad file descriptor) [pid 3651] close(22) = -1 EBADF (Bad file descriptor) [pid 3651] close(23) = -1 EBADF (Bad file descriptor) [pid 3651] close(24) = -1 EBADF (Bad file descriptor) [pid 3651] close(25) = -1 EBADF (Bad file descriptor) [pid 3651] close(26) = -1 EBADF (Bad file descriptor) [pid 3651] close(27) = -1 EBADF (Bad file descriptor) [pid 3651] close(28) = -1 EBADF (Bad file descriptor) [pid 3651] close(29) = -1 EBADF (Bad file descriptor) [pid 3651] exit_group(0) = ? [pid 3651] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3652 attached , child_tidptr=0x5555570bd5d0) = 34 [pid 3652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3652] setpgid(0, 0) = 0 [pid 3652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3652] write(3, "1000", 4) = 4 [pid 3652] close(3) = 0 [pid 3652] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3652] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3652] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3652] write(4, "5", 1) = 1 [pid 3652] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 52.476206][ T3652] FAULT_INJECTION: forcing a failure. [ 52.476206][ T3652] name failslab, interval 1, probability 0, space 0, times 0 [ 52.489077][ T3652] CPU: 1 PID: 3652 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.499731][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.509784][ T3652] Call Trace: [ 52.513045][ T3652] [ 52.515959][ T3652] dump_stack_lvl+0xcd/0x134 [ 52.520549][ T3652] should_fail.cold+0x5/0xa [ 52.525049][ T3652] should_failslab+0x5/0x10 [ 52.529646][ T3652] kmem_cache_alloc_trace+0x60/0x3f0 [ 52.534924][ T3652] ? ref_tracker_alloc+0x14c/0x550 [ 52.540050][ T3652] ref_tracker_alloc+0x14c/0x550 [ 52.544987][ T3652] ? ref_tracker_free+0x6b0/0x6b0 [ 52.550092][ T3652] ? lock_release+0x720/0x720 [ 52.554761][ T3652] ? do_raw_spin_lock+0x120/0x2a0 [ 52.559798][ T3652] ? rwlock_bug.part.0+0x90/0x90 [ 52.564737][ T3652] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 52.570109][ T3652] linkwatch_fire_event+0x202/0x260 [ 52.575327][ T3652] netif_carrier_off+0x96/0xb0 [ 52.580095][ T3652] __tun_detach+0xfe7/0x13e0 [ 52.584682][ T3652] tun_chr_close+0xc4/0x180 [ 52.589190][ T3652] __fput+0x277/0x9d0 [ 52.593161][ T3652] ? __tun_detach+0x13e0/0x13e0 [ 52.598004][ T3652] task_work_run+0xdd/0x1a0 [ 52.602503][ T3652] ptrace_notify+0x114/0x140 [ 52.607257][ T3652] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 52.613496][ T3652] syscall_exit_to_user_mode+0x9/0x60 [ 52.618861][ T3652] do_syscall_64+0x42/0xb0 [ 52.623274][ T3652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.629179][ T3652] RIP: 0033:0x7fc6cd2767a3 [ 52.633588][ T3652] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 52.653193][ T3652] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.661609][ T3652] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3652] close(3) = 0 [pid 3652] close(4) = 0 [ 52.669571][ T3652] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 52.677812][ T3652] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 52.685771][ T3652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.693731][ T3652] R13: 00000000000f4240 R14: 000000000000cba6 R15: 00007ffdc49a5924 [ 52.701799][ T3652] [pid 3652] close(5) = -1 EBADF (Bad file descriptor) [pid 3652] close(6) = -1 EBADF (Bad file descriptor) [pid 3652] close(7) = -1 EBADF (Bad file descriptor) [pid 3652] close(8) = -1 EBADF (Bad file descriptor) [pid 3652] close(9) = -1 EBADF (Bad file descriptor) [pid 3652] close(10) = -1 EBADF (Bad file descriptor) [pid 3652] close(11) = -1 EBADF (Bad file descriptor) [pid 3652] close(12) = -1 EBADF (Bad file descriptor) [pid 3652] close(13) = -1 EBADF (Bad file descriptor) [pid 3652] close(14) = -1 EBADF (Bad file descriptor) [pid 3652] close(15) = -1 EBADF (Bad file descriptor) [pid 3652] close(16) = -1 EBADF (Bad file descriptor) [pid 3652] close(17) = -1 EBADF (Bad file descriptor) [pid 3652] close(18) = -1 EBADF (Bad file descriptor) [pid 3652] close(19) = -1 EBADF (Bad file descriptor) [pid 3652] close(20) = -1 EBADF (Bad file descriptor) [pid 3652] close(21) = -1 EBADF (Bad file descriptor) [pid 3652] close(22) = -1 EBADF (Bad file descriptor) [pid 3652] close(23) = -1 EBADF (Bad file descriptor) [pid 3652] close(24) = -1 EBADF (Bad file descriptor) [pid 3652] close(25) = -1 EBADF (Bad file descriptor) [pid 3652] close(26) = -1 EBADF (Bad file descriptor) [pid 3652] close(27) = -1 EBADF (Bad file descriptor) [pid 3652] close(28) = -1 EBADF (Bad file descriptor) [pid 3652] close(29) = -1 EBADF (Bad file descriptor) [pid 3652] exit_group(0) = ? [pid 3652] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 35 ./strace-static-x86_64: Process 3653 attached [pid 3653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3653] setpgid(0, 0) = 0 [pid 3653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3653] write(3, "1000", 4) = 4 [pid 3653] close(3) = 0 [pid 3653] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3653] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3653] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3653] write(4, "5", 1) = 1 [ 52.783307][ T3653] FAULT_INJECTION: forcing a failure. [ 52.783307][ T3653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.796577][ T3653] CPU: 0 PID: 3653 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 52.806994][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.818260][ T3653] Call Trace: [ 52.821543][ T3653] [ 52.824498][ T3653] dump_stack_lvl+0xcd/0x134 [ 52.829094][ T3653] should_fail.cold+0x5/0xa [ 52.833607][ T3653] prepare_alloc_pages+0x17b/0x570 [ 52.838739][ T3653] __alloc_pages+0x12f/0x500 [ 52.843374][ T3653] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 52.850241][ T3653] ? ___slab_alloc+0x47e/0xf20 [ 52.855005][ T3653] alloc_pages+0x1aa/0x310 [ 52.859508][ T3653] ? mark_held_locks+0x9f/0xe0 [ 52.864276][ T3653] allocate_slab+0x26c/0x3c0 [ 52.868858][ T3653] ___slab_alloc+0x8df/0xf20 [ 52.873437][ T3653] ? napi_skb_cache_get+0xeb/0x170 [ 52.878549][ T3653] ? mark_held_locks+0x9f/0xe0 [ 52.883317][ T3653] kmem_cache_alloc_bulk+0x21c/0x720 [ 52.888606][ T3653] napi_skb_cache_get+0xeb/0x170 [ 52.893547][ T3653] __alloc_skb+0x9b/0x340 [ 52.897871][ T3653] ? __lock_acquire+0xbca/0x56c0 [ 52.902809][ T3653] __napi_alloc_skb+0x70/0x310 [ 52.907575][ T3653] napi_get_frags+0x5e/0x140 [ 52.912165][ T3653] tun_get_user+0xa07/0x3b00 [ 52.916763][ T3653] ? tun_build_skb+0x1170/0x1170 [ 52.921698][ T3653] ? lock_downgrade+0x6e0/0x6e0 [ 52.926540][ T3653] ? find_held_lock+0x2d/0x110 [ 52.931305][ T3653] tun_chr_write_iter+0xdb/0x200 [ 52.936352][ T3653] do_iter_readv_writev+0x3d1/0x640 [ 52.941547][ T3653] ? new_sync_write+0x560/0x560 [ 52.946391][ T3653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.952625][ T3653] ? security_file_permission+0xab/0xd0 [ 52.958178][ T3653] do_iter_write+0x182/0x700 [ 52.962768][ T3653] ? import_iovec+0x10c/0x150 [ 52.967438][ T3653] vfs_writev+0x1aa/0x630 [ 52.971754][ T3653] ? vfs_iter_write+0xa0/0xa0 [ 52.976416][ T3653] ? do_raw_spin_lock+0x120/0x2a0 [ 52.981433][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 52.986466][ T3653] ? _raw_spin_lock_irq+0x41/0x50 [ 52.991480][ T3653] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 52.997888][ T3653] ? find_held_lock+0x2d/0x110 [ 53.002648][ T3653] ? ptrace_notify+0xfa/0x140 [ 53.007326][ T3653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.013735][ T3653] ? __fget_light+0x20f/0x270 [ 53.018409][ T3653] do_writev+0x133/0x2f0 [ 53.022654][ T3653] ? vfs_writev+0x630/0x630 [ 53.027146][ T3653] ? lockdep_hardirqs_on+0x79/0x100 [ 53.032338][ T3653] ? _raw_spin_unlock_irq+0x2a/0x40 [ 53.037530][ T3653] ? ptrace_notify+0xfa/0x140 [ 53.042226][ T3653] do_syscall_64+0x35/0xb0 [ 53.046644][ T3653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.052538][ T3653] RIP: 0033:0x7fc6cd2b4c39 [ 53.056940][ T3653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3653] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.076667][ T3653] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 53.085161][ T3653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 53.093210][ T3653] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.101874][ T3653] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.109943][ T3653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.117904][ T3653] R13: 00000000000f4240 R14: 000000000000ccdc R15: 00007ffdc49a5924 [ 53.125874][ T3653] [pid 3653] close(3) = 0 [pid 3653] close(4) = 0 [pid 3653] close(5) = -1 EBADF (Bad file descriptor) [pid 3653] close(6) = -1 EBADF (Bad file descriptor) [pid 3653] close(7) = -1 EBADF (Bad file descriptor) [pid 3653] close(8) = -1 EBADF (Bad file descriptor) [pid 3653] close(9) = -1 EBADF (Bad file descriptor) [pid 3653] close(10) = -1 EBADF (Bad file descriptor) [pid 3653] close(11) = -1 EBADF (Bad file descriptor) [pid 3653] close(12) = -1 EBADF (Bad file descriptor) [pid 3653] close(13) = -1 EBADF (Bad file descriptor) [pid 3653] close(14) = -1 EBADF (Bad file descriptor) [pid 3653] close(15) = -1 EBADF (Bad file descriptor) [pid 3653] close(16) = -1 EBADF (Bad file descriptor) [pid 3653] close(17) = -1 EBADF (Bad file descriptor) [pid 3653] close(18) = -1 EBADF (Bad file descriptor) [pid 3653] close(19) = -1 EBADF (Bad file descriptor) [pid 3653] close(20) = -1 EBADF (Bad file descriptor) [pid 3653] close(21) = -1 EBADF (Bad file descriptor) [pid 3653] close(22) = -1 EBADF (Bad file descriptor) [pid 3653] close(23) = -1 EBADF (Bad file descriptor) [pid 3653] close(24) = -1 EBADF (Bad file descriptor) [pid 3653] close(25) = -1 EBADF (Bad file descriptor) [pid 3653] close(26) = -1 EBADF (Bad file descriptor) [pid 3653] close(27) = -1 EBADF (Bad file descriptor) [pid 3653] close(28) = -1 EBADF (Bad file descriptor) [pid 3653] close(29) = -1 EBADF (Bad file descriptor) [pid 3653] exit_group(0) = ? [pid 3653] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 36 ./strace-static-x86_64: Process 3654 attached [pid 3654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3654] setpgid(0, 0) = 0 [pid 3654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3654] write(3, "1000", 4) = 4 [pid 3654] close(3) = 0 [pid 3654] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3654] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3654] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3654] write(4, "5", 1) = 1 [pid 3654] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.204218][ T3654] FAULT_INJECTION: forcing a failure. [ 53.204218][ T3654] name failslab, interval 1, probability 0, space 0, times 0 [ 53.216827][ T3654] CPU: 1 PID: 3654 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.227168][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.237211][ T3654] Call Trace: [ 53.240485][ T3654] [ 53.243406][ T3654] dump_stack_lvl+0xcd/0x134 [ 53.248017][ T3654] should_fail.cold+0x5/0xa [ 53.252520][ T3654] should_failslab+0x5/0x10 [ 53.257024][ T3654] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.262407][ T3654] ? ref_tracker_alloc+0x14c/0x550 [ 53.267512][ T3654] ref_tracker_alloc+0x14c/0x550 [ 53.272444][ T3654] ? ref_tracker_free+0x6b0/0x6b0 [ 53.277635][ T3654] ? lock_release+0x720/0x720 [ 53.282304][ T3654] ? do_raw_spin_lock+0x120/0x2a0 [ 53.287325][ T3654] ? rwlock_bug.part.0+0x90/0x90 [ 53.292435][ T3654] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.297835][ T3654] linkwatch_fire_event+0x202/0x260 [ 53.303051][ T3654] netif_carrier_off+0x96/0xb0 [ 53.307810][ T3654] __tun_detach+0xfe7/0x13e0 [ 53.312405][ T3654] tun_chr_close+0xc4/0x180 [ 53.316898][ T3654] __fput+0x277/0x9d0 [ 53.320871][ T3654] ? __tun_detach+0x13e0/0x13e0 [ 53.325716][ T3654] task_work_run+0xdd/0x1a0 [ 53.330218][ T3654] ptrace_notify+0x114/0x140 [ 53.334992][ T3654] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.341241][ T3654] syscall_exit_to_user_mode+0x9/0x60 [ 53.346632][ T3654] do_syscall_64+0x42/0xb0 [ 53.351044][ T3654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.356936][ T3654] RIP: 0033:0x7fc6cd2767a3 [ 53.361344][ T3654] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 53.381227][ T3654] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 53.389732][ T3654] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 53.398080][ T3654] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.406066][ T3654] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.414029][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.422337][ T3654] R13: 00000000000f4240 R14: 000000000000ce13 R15: 00007ffdc49a5924 [ 53.430326][ T3654] [pid 3654] close(3) = 0 [pid 3654] close(4) = 0 [pid 3654] close(5) = -1 EBADF (Bad file descriptor) [pid 3654] close(6) = -1 EBADF (Bad file descriptor) [pid 3654] close(7) = -1 EBADF (Bad file descriptor) [pid 3654] close(8) = -1 EBADF (Bad file descriptor) [pid 3654] close(9) = -1 EBADF (Bad file descriptor) [pid 3654] close(10) = -1 EBADF (Bad file descriptor) [pid 3654] close(11) = -1 EBADF (Bad file descriptor) [pid 3654] close(12) = -1 EBADF (Bad file descriptor) [pid 3654] close(13) = -1 EBADF (Bad file descriptor) [pid 3654] close(14) = -1 EBADF (Bad file descriptor) [pid 3654] close(15) = -1 EBADF (Bad file descriptor) [pid 3654] close(16) = -1 EBADF (Bad file descriptor) [pid 3654] close(17) = -1 EBADF (Bad file descriptor) [pid 3654] close(18) = -1 EBADF (Bad file descriptor) [pid 3654] close(19) = -1 EBADF (Bad file descriptor) [pid 3654] close(20) = -1 EBADF (Bad file descriptor) [pid 3654] close(21) = -1 EBADF (Bad file descriptor) [pid 3654] close(22) = -1 EBADF (Bad file descriptor) [pid 3654] close(23) = -1 EBADF (Bad file descriptor) [pid 3654] close(24) = -1 EBADF (Bad file descriptor) [pid 3654] close(25) = -1 EBADF (Bad file descriptor) [pid 3654] close(26) = -1 EBADF (Bad file descriptor) [pid 3654] close(27) = -1 EBADF (Bad file descriptor) [pid 3654] close(28) = -1 EBADF (Bad file descriptor) [pid 3654] close(29) = -1 EBADF (Bad file descriptor) [pid 3654] exit_group(0) = ? [pid 3654] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3655 attached , child_tidptr=0x5555570bd5d0) = 37 [pid 3655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3655] setpgid(0, 0) = 0 [pid 3655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3655] write(3, "1000", 4) = 4 [pid 3655] close(3) = 0 [pid 3655] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3655] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3655] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3655] write(4, "5", 1) = 1 [pid 3655] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.518067][ T3655] FAULT_INJECTION: forcing a failure. [ 53.518067][ T3655] name failslab, interval 1, probability 0, space 0, times 0 [ 53.531294][ T3655] CPU: 1 PID: 3655 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.541449][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.551522][ T3655] Call Trace: [ 53.554802][ T3655] [ 53.557723][ T3655] dump_stack_lvl+0xcd/0x134 [ 53.562320][ T3655] should_fail.cold+0x5/0xa [ 53.566822][ T3655] should_failslab+0x5/0x10 [ 53.571324][ T3655] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.576773][ T3655] ? ref_tracker_alloc+0x14c/0x550 [ 53.581880][ T3655] ref_tracker_alloc+0x14c/0x550 [ 53.586828][ T3655] ? ref_tracker_free+0x6b0/0x6b0 [ 53.591844][ T3655] ? lock_release+0x720/0x720 [ 53.596527][ T3655] ? do_raw_spin_lock+0x120/0x2a0 [ 53.601566][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 53.606682][ T3655] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.612079][ T3655] linkwatch_fire_event+0x202/0x260 [ 53.617288][ T3655] netif_carrier_off+0x96/0xb0 [ 53.622056][ T3655] __tun_detach+0xfe7/0x13e0 [ 53.626651][ T3655] tun_chr_close+0xc4/0x180 [ 53.631230][ T3655] __fput+0x277/0x9d0 [ 53.635198][ T3655] ? __tun_detach+0x13e0/0x13e0 [ 53.640038][ T3655] task_work_run+0xdd/0x1a0 [ 53.644536][ T3655] ptrace_notify+0x114/0x140 [ 53.649130][ T3655] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.655370][ T3655] syscall_exit_to_user_mode+0x9/0x60 [ 53.660784][ T3655] do_syscall_64+0x42/0xb0 [ 53.665201][ T3655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.671098][ T3655] RIP: 0033:0x7fc6cd2767a3 [ 53.675508][ T3655] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 53.695117][ T3655] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 53.703531][ T3655] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3655] close(3) = 0 [pid 3655] close(4) = 0 [pid 3655] close(5) = -1 EBADF (Bad file descriptor) [pid 3655] close(6) = -1 EBADF (Bad file descriptor) [pid 3655] close(7) = -1 EBADF (Bad file descriptor) [pid 3655] close(8) = -1 EBADF (Bad file descriptor) [ 53.711777][ T3655] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 53.719741][ T3655] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 53.727703][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.735660][ T3655] R13: 00000000000f4240 R14: 000000000000cfb5 R15: 00007ffdc49a5924 [ 53.743637][ T3655] [pid 3655] close(9) = -1 EBADF (Bad file descriptor) [pid 3655] close(10) = -1 EBADF (Bad file descriptor) [pid 3655] close(11) = -1 EBADF (Bad file descriptor) [pid 3655] close(12) = -1 EBADF (Bad file descriptor) [pid 3655] close(13) = -1 EBADF (Bad file descriptor) [pid 3655] close(14) = -1 EBADF (Bad file descriptor) [pid 3655] close(15) = -1 EBADF (Bad file descriptor) [pid 3655] close(16) = -1 EBADF (Bad file descriptor) [pid 3655] close(17) = -1 EBADF (Bad file descriptor) [pid 3655] close(18) = -1 EBADF (Bad file descriptor) [pid 3655] close(19) = -1 EBADF (Bad file descriptor) [pid 3655] close(20) = -1 EBADF (Bad file descriptor) [pid 3655] close(21) = -1 EBADF (Bad file descriptor) [pid 3655] close(22) = -1 EBADF (Bad file descriptor) [pid 3655] close(23) = -1 EBADF (Bad file descriptor) [pid 3655] close(24) = -1 EBADF (Bad file descriptor) [pid 3655] close(25) = -1 EBADF (Bad file descriptor) [pid 3655] close(26) = -1 EBADF (Bad file descriptor) [pid 3655] close(27) = -1 EBADF (Bad file descriptor) [pid 3655] close(28) = -1 EBADF (Bad file descriptor) [pid 3655] close(29) = -1 EBADF (Bad file descriptor) [pid 3655] exit_group(0) = ? [pid 3655] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3656 attached , child_tidptr=0x5555570bd5d0) = 38 [pid 3656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3656] setpgid(0, 0) = 0 [pid 3656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3656] write(3, "1000", 4) = 4 [pid 3656] close(3) = 0 [pid 3656] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3656] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3656] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3656] write(4, "5", 1) = 1 [pid 3656] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 53.828256][ T3656] FAULT_INJECTION: forcing a failure. [ 53.828256][ T3656] name failslab, interval 1, probability 0, space 0, times 0 [ 53.841742][ T3656] CPU: 0 PID: 3656 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 53.852146][ T3656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.862291][ T3656] Call Trace: [ 53.865563][ T3656] [ 53.868593][ T3656] dump_stack_lvl+0xcd/0x134 [ 53.873184][ T3656] should_fail.cold+0x5/0xa [ 53.877683][ T3656] should_failslab+0x5/0x10 [ 53.882181][ T3656] kmem_cache_alloc_trace+0x60/0x3f0 [ 53.887453][ T3656] ? ref_tracker_alloc+0x14c/0x550 [ 53.892563][ T3656] ref_tracker_alloc+0x14c/0x550 [ 53.897494][ T3656] ? ref_tracker_free+0x6b0/0x6b0 [ 53.902539][ T3656] ? lock_release+0x720/0x720 [ 53.907306][ T3656] ? do_raw_spin_lock+0x120/0x2a0 [ 53.912331][ T3656] ? rwlock_bug.part.0+0x90/0x90 [ 53.917267][ T3656] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 53.922647][ T3656] linkwatch_fire_event+0x202/0x260 [ 53.927872][ T3656] netif_carrier_off+0x96/0xb0 [ 53.932632][ T3656] __tun_detach+0xfe7/0x13e0 [ 53.937222][ T3656] tun_chr_close+0xc4/0x180 [ 53.941721][ T3656] __fput+0x277/0x9d0 [ 53.945693][ T3656] ? __tun_detach+0x13e0/0x13e0 [ 53.950849][ T3656] task_work_run+0xdd/0x1a0 [ 53.955452][ T3656] ptrace_notify+0x114/0x140 [ 53.960071][ T3656] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 53.966488][ T3656] syscall_exit_to_user_mode+0x9/0x60 [ 53.971939][ T3656] do_syscall_64+0x42/0xb0 [ 53.976352][ T3656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.982256][ T3656] RIP: 0033:0x7fc6cd2767a3 [ 53.986661][ T3656] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.006257][ T3656] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.014744][ T3656] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3656] close(3) = 0 [pid 3656] close(4) = 0 [pid 3656] close(5) = -1 EBADF (Bad file descriptor) [pid 3656] close(6) = -1 EBADF (Bad file descriptor) [pid 3656] close(7) = -1 EBADF (Bad file descriptor) [pid 3656] close(8) = -1 EBADF (Bad file descriptor) [pid 3656] close(9) = -1 EBADF (Bad file descriptor) [pid 3656] close(10) = -1 EBADF (Bad file descriptor) [pid 3656] close(11) = -1 EBADF (Bad file descriptor) [pid 3656] close(12) = -1 EBADF (Bad file descriptor) [pid 3656] close(13) = -1 EBADF (Bad file descriptor) [pid 3656] close(14) = -1 EBADF (Bad file descriptor) [pid 3656] close(15) = -1 EBADF (Bad file descriptor) [pid 3656] close(16) = -1 EBADF (Bad file descriptor) [pid 3656] close(17) = -1 EBADF (Bad file descriptor) [pid 3656] close(18) = -1 EBADF (Bad file descriptor) [pid 3656] close(19) = -1 EBADF (Bad file descriptor) [pid 3656] close(20) = -1 EBADF (Bad file descriptor) [pid 3656] close(21) = -1 EBADF (Bad file descriptor) [pid 3656] close(22) = -1 EBADF (Bad file descriptor) [pid 3656] close(23) = -1 EBADF (Bad file descriptor) [pid 3656] close(24) = -1 EBADF (Bad file descriptor) [pid 3656] close(25) = -1 EBADF (Bad file descriptor) [ 54.022704][ T3656] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.031120][ T3656] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.039101][ T3656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.047061][ T3656] R13: 00000000000f4240 R14: 000000000000d0ed R15: 00007ffdc49a5924 [ 54.055113][ T3656] [pid 3656] close(26) = -1 EBADF (Bad file descriptor) [pid 3656] close(27) = -1 EBADF (Bad file descriptor) [pid 3656] close(28) = -1 EBADF (Bad file descriptor) [pid 3656] close(29) = -1 EBADF (Bad file descriptor) [pid 3656] exit_group(0) = ? [pid 3656] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3657 attached , child_tidptr=0x5555570bd5d0) = 39 [pid 3657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3657] setpgid(0, 0) = 0 [pid 3657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3657] write(3, "1000", 4) = 4 [pid 3657] close(3) = 0 [pid 3657] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3657] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3657] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3657] write(4, "5", 1) = 1 [pid 3657] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.120965][ T3657] FAULT_INJECTION: forcing a failure. [ 54.120965][ T3657] name failslab, interval 1, probability 0, space 0, times 0 [ 54.133866][ T3657] CPU: 0 PID: 3657 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.143992][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.154233][ T3657] Call Trace: [ 54.157486][ T3657] [ 54.160393][ T3657] dump_stack_lvl+0xcd/0x134 [ 54.164967][ T3657] should_fail.cold+0x5/0xa [ 54.169450][ T3657] should_failslab+0x5/0x10 [ 54.173939][ T3657] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.179217][ T3657] ? ref_tracker_alloc+0x14c/0x550 [ 54.184335][ T3657] ref_tracker_alloc+0x14c/0x550 [ 54.189255][ T3657] ? ref_tracker_free+0x6b0/0x6b0 [ 54.194261][ T3657] ? lock_release+0x720/0x720 [ 54.198943][ T3657] ? do_raw_spin_lock+0x120/0x2a0 [ 54.203956][ T3657] ? rwlock_bug.part.0+0x90/0x90 [ 54.208895][ T3657] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.214266][ T3657] linkwatch_fire_event+0x202/0x260 [ 54.219458][ T3657] netif_carrier_off+0x96/0xb0 [ 54.224210][ T3657] __tun_detach+0xfe7/0x13e0 [ 54.228811][ T3657] tun_chr_close+0xc4/0x180 [ 54.233319][ T3657] __fput+0x277/0x9d0 [ 54.237296][ T3657] ? __tun_detach+0x13e0/0x13e0 [ 54.242146][ T3657] task_work_run+0xdd/0x1a0 [ 54.246641][ T3657] ptrace_notify+0x114/0x140 [ 54.251311][ T3657] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.257545][ T3657] syscall_exit_to_user_mode+0x9/0x60 [ 54.262904][ T3657] do_syscall_64+0x42/0xb0 [ 54.267319][ T3657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.273202][ T3657] RIP: 0033:0x7fc6cd2767a3 [ 54.277602][ T3657] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.297205][ T3657] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.305610][ T3657] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 54.313569][ T3657] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3657] close(3) = 0 [pid 3657] close(4) = 0 [pid 3657] close(5) = -1 EBADF (Bad file descriptor) [pid 3657] close(6) = -1 EBADF (Bad file descriptor) [pid 3657] close(7) = -1 EBADF (Bad file descriptor) [pid 3657] close(8) = -1 EBADF (Bad file descriptor) [pid 3657] close(9) = -1 EBADF (Bad file descriptor) [pid 3657] close(10) = -1 EBADF (Bad file descriptor) [pid 3657] close(11) = -1 EBADF (Bad file descriptor) [pid 3657] close(12) = -1 EBADF (Bad file descriptor) [pid 3657] close(13) = -1 EBADF (Bad file descriptor) [pid 3657] close(14) = -1 EBADF (Bad file descriptor) [pid 3657] close(15) = -1 EBADF (Bad file descriptor) [pid 3657] close(16) = -1 EBADF (Bad file descriptor) [pid 3657] close(17) = -1 EBADF (Bad file descriptor) [pid 3657] close(18) = -1 EBADF (Bad file descriptor) [pid 3657] close(19) = -1 EBADF (Bad file descriptor) [pid 3657] close(20) = -1 EBADF (Bad file descriptor) [pid 3657] close(21) = -1 EBADF (Bad file descriptor) [pid 3657] close(22) = -1 EBADF (Bad file descriptor) [pid 3657] close(23) = -1 EBADF (Bad file descriptor) [pid 3657] close(24) = -1 EBADF (Bad file descriptor) [pid 3657] close(25) = -1 EBADF (Bad file descriptor) [pid 3657] close(26) = -1 EBADF (Bad file descriptor) [pid 3657] close(27) = -1 EBADF (Bad file descriptor) [pid 3657] close(28) = -1 EBADF (Bad file descriptor) [pid 3657] close(29) = -1 EBADF (Bad file descriptor) [pid 3657] exit_group(0) = ? [pid 3657] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 40 ./strace-static-x86_64: Process 3658 attached [pid 3658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3658] setpgid(0, 0) = 0 [pid 3658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3658] write(3, "1000", 4) = 4 [pid 3658] close(3) = 0 [pid 3658] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 54.321527][ T3657] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.329503][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.337475][ T3657] R13: 00000000000f4240 R14: 000000000000d228 R15: 00007ffdc49a5924 [ 54.345447][ T3657] [pid 3658] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3658] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3658] write(4, "5", 1) = 1 [pid 3658] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.407990][ T3658] FAULT_INJECTION: forcing a failure. [ 54.407990][ T3658] name failslab, interval 1, probability 0, space 0, times 0 [ 54.421565][ T3658] CPU: 0 PID: 3658 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.432153][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.442206][ T3658] Call Trace: [ 54.445655][ T3658] [ 54.448573][ T3658] dump_stack_lvl+0xcd/0x134 [ 54.453158][ T3658] should_fail.cold+0x5/0xa [ 54.457661][ T3658] should_failslab+0x5/0x10 [ 54.462177][ T3658] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.467585][ T3658] ? ref_tracker_alloc+0x14c/0x550 [ 54.472730][ T3658] ref_tracker_alloc+0x14c/0x550 [ 54.477686][ T3658] ? ref_tracker_free+0x6b0/0x6b0 [ 54.482796][ T3658] ? lock_release+0x720/0x720 [ 54.487472][ T3658] ? do_raw_spin_lock+0x120/0x2a0 [ 54.492497][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 54.497530][ T3658] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.502909][ T3658] linkwatch_fire_event+0x202/0x260 [ 54.508138][ T3658] netif_carrier_off+0x96/0xb0 [ 54.512899][ T3658] __tun_detach+0xfe7/0x13e0 [ 54.517493][ T3658] tun_chr_close+0xc4/0x180 [ 54.521994][ T3658] __fput+0x277/0x9d0 [ 54.525969][ T3658] ? __tun_detach+0x13e0/0x13e0 [ 54.530816][ T3658] task_work_run+0xdd/0x1a0 [ 54.535317][ T3658] ptrace_notify+0x114/0x140 [ 54.539926][ T3658] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.546277][ T3658] syscall_exit_to_user_mode+0x9/0x60 [ 54.551647][ T3658] do_syscall_64+0x42/0xb0 [ 54.556058][ T3658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.561945][ T3658] RIP: 0033:0x7fc6cd2767a3 [ 54.566350][ T3658] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.585949][ T3658] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.594360][ T3658] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3658] close(3) = 0 [pid 3658] close(4) = 0 [pid 3658] close(5) = -1 EBADF (Bad file descriptor) [pid 3658] close(6) = -1 EBADF (Bad file descriptor) [pid 3658] close(7) = -1 EBADF (Bad file descriptor) [pid 3658] close(8) = -1 EBADF (Bad file descriptor) [pid 3658] close(9) = -1 EBADF (Bad file descriptor) [pid 3658] close(10) = -1 EBADF (Bad file descriptor) [pid 3658] close(11) = -1 EBADF (Bad file descriptor) [pid 3658] close(12) = -1 EBADF (Bad file descriptor) [pid 3658] close(13) = -1 EBADF (Bad file descriptor) [pid 3658] close(14) = -1 EBADF (Bad file descriptor) [pid 3658] close(15) = -1 EBADF (Bad file descriptor) [pid 3658] close(16) = -1 EBADF (Bad file descriptor) [pid 3658] close(17) = -1 EBADF (Bad file descriptor) [pid 3658] close(18) = -1 EBADF (Bad file descriptor) [pid 3658] close(19) = -1 EBADF (Bad file descriptor) [pid 3658] close(20) = -1 EBADF (Bad file descriptor) [pid 3658] close(21) = -1 EBADF (Bad file descriptor) [ 54.602327][ T3658] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.610293][ T3658] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.618435][ T3658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.626418][ T3658] R13: 00000000000f4240 R14: 000000000000d34c R15: 00007ffdc49a5924 [ 54.634399][ T3658] [pid 3658] close(22) = -1 EBADF (Bad file descriptor) [pid 3658] close(23) = -1 EBADF (Bad file descriptor) [pid 3658] close(24) = -1 EBADF (Bad file descriptor) [pid 3658] close(25) = -1 EBADF (Bad file descriptor) [pid 3658] close(26) = -1 EBADF (Bad file descriptor) [pid 3658] close(27) = -1 EBADF (Bad file descriptor) [pid 3658] close(28) = -1 EBADF (Bad file descriptor) [pid 3658] close(29) = -1 EBADF (Bad file descriptor) [pid 3658] exit_group(0) = ? [pid 3658] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3659 attached , child_tidptr=0x5555570bd5d0) = 41 [pid 3659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3659] setpgid(0, 0) = 0 [pid 3659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3659] write(3, "1000", 4) = 4 [pid 3659] close(3) = 0 [pid 3659] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3659] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3659] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3659] write(4, "5", 1) = 1 [pid 3659] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.709290][ T3659] FAULT_INJECTION: forcing a failure. [ 54.709290][ T3659] name failslab, interval 1, probability 0, space 0, times 0 [ 54.721926][ T3659] CPU: 0 PID: 3659 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 54.732072][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.742123][ T3659] Call Trace: [ 54.745400][ T3659] [ 54.748333][ T3659] dump_stack_lvl+0xcd/0x134 [ 54.753052][ T3659] should_fail.cold+0x5/0xa [ 54.757565][ T3659] should_failslab+0x5/0x10 [ 54.762085][ T3659] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.767377][ T3659] ? ref_tracker_alloc+0x14c/0x550 [ 54.772512][ T3659] ref_tracker_alloc+0x14c/0x550 [ 54.777561][ T3659] ? ref_tracker_free+0x6b0/0x6b0 [ 54.782601][ T3659] ? lock_release+0x720/0x720 [ 54.787284][ T3659] ? do_raw_spin_lock+0x120/0x2a0 [ 54.792418][ T3659] ? rwlock_bug.part.0+0x90/0x90 [ 54.797470][ T3659] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 54.802932][ T3659] linkwatch_fire_event+0x202/0x260 [ 54.808222][ T3659] netif_carrier_off+0x96/0xb0 [ 54.813002][ T3659] __tun_detach+0xfe7/0x13e0 [ 54.817622][ T3659] tun_chr_close+0xc4/0x180 [ 54.822134][ T3659] __fput+0x277/0x9d0 [ 54.826116][ T3659] ? __tun_detach+0x13e0/0x13e0 [ 54.830979][ T3659] task_work_run+0xdd/0x1a0 [ 54.835494][ T3659] ptrace_notify+0x114/0x140 [ 54.840082][ T3659] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 54.846331][ T3659] syscall_exit_to_user_mode+0x9/0x60 [ 54.851717][ T3659] do_syscall_64+0x42/0xb0 [ 54.856141][ T3659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.862042][ T3659] RIP: 0033:0x7fc6cd2767a3 [ 54.866627][ T3659] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 54.886231][ T3659] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 54.894644][ T3659] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3659] close(3) = 0 [pid 3659] close(4) = 0 [pid 3659] close(5) = -1 EBADF (Bad file descriptor) [pid 3659] close(6) = -1 EBADF (Bad file descriptor) [pid 3659] close(7) = -1 EBADF (Bad file descriptor) [pid 3659] close(8) = -1 EBADF (Bad file descriptor) [pid 3659] close(9) = -1 EBADF (Bad file descriptor) [pid 3659] close(10) = -1 EBADF (Bad file descriptor) [pid 3659] close(11) = -1 EBADF (Bad file descriptor) [pid 3659] close(12) = -1 EBADF (Bad file descriptor) [pid 3659] close(13) = -1 EBADF (Bad file descriptor) [pid 3659] close(14) = -1 EBADF (Bad file descriptor) [pid 3659] close(15) = -1 EBADF (Bad file descriptor) [pid 3659] close(16) = -1 EBADF (Bad file descriptor) [pid 3659] close(17) = -1 EBADF (Bad file descriptor) [pid 3659] close(18) = -1 EBADF (Bad file descriptor) [pid 3659] close(19) = -1 EBADF (Bad file descriptor) [pid 3659] close(20) = -1 EBADF (Bad file descriptor) [pid 3659] close(21) = -1 EBADF (Bad file descriptor) [pid 3659] close(22) = -1 EBADF (Bad file descriptor) [pid 3659] close(23) = -1 EBADF (Bad file descriptor) [pid 3659] close(24) = -1 EBADF (Bad file descriptor) [pid 3659] close(25) = -1 EBADF (Bad file descriptor) [pid 3659] close(26) = -1 EBADF (Bad file descriptor) [pid 3659] close(27) = -1 EBADF (Bad file descriptor) [pid 3659] close(28) = -1 EBADF (Bad file descriptor) [pid 3659] close(29) = -1 EBADF (Bad file descriptor) [pid 3659] exit_group(0) = ? [pid 3659] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3660 attached , child_tidptr=0x5555570bd5d0) = 42 [pid 3660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3660] setpgid(0, 0) = 0 [pid 3660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3660] write(3, "1000", 4) = 4 [pid 3660] close(3) = 0 [pid 3660] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3660] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3660] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3660] write(4, "5", 1) = 1 [ 54.902699][ T3659] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 54.910666][ T3659] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 54.918636][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 54.926622][ T3659] R13: 00000000000f4240 R14: 000000000000d468 R15: 00007ffdc49a5924 [ 54.934688][ T3659] [pid 3660] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 54.992476][ T3660] FAULT_INJECTION: forcing a failure. [ 54.992476][ T3660] name failslab, interval 1, probability 0, space 0, times 0 [ 55.005077][ T3660] CPU: 0 PID: 3660 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.015219][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.025271][ T3660] Call Trace: [ 55.028558][ T3660] [ 55.031480][ T3660] dump_stack_lvl+0xcd/0x134 [ 55.036080][ T3660] should_fail.cold+0x5/0xa [ 55.040606][ T3660] should_failslab+0x5/0x10 [ 55.045119][ T3660] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.050442][ T3660] ? ref_tracker_alloc+0x14c/0x550 [ 55.055583][ T3660] ref_tracker_alloc+0x14c/0x550 [ 55.060746][ T3660] ? ref_tracker_free+0x6b0/0x6b0 [ 55.065869][ T3660] ? lock_release+0x720/0x720 [ 55.070550][ T3660] ? do_raw_spin_lock+0x120/0x2a0 [ 55.075559][ T3660] ? rwlock_bug.part.0+0x90/0x90 [ 55.080499][ T3660] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.085938][ T3660] linkwatch_fire_event+0x202/0x260 [ 55.091131][ T3660] netif_carrier_off+0x96/0xb0 [ 55.095976][ T3660] __tun_detach+0xfe7/0x13e0 [ 55.100577][ T3660] tun_chr_close+0xc4/0x180 [ 55.105069][ T3660] __fput+0x277/0x9d0 [ 55.109054][ T3660] ? __tun_detach+0x13e0/0x13e0 [ 55.113893][ T3660] task_work_run+0xdd/0x1a0 [ 55.118387][ T3660] ptrace_notify+0x114/0x140 [ 55.122979][ T3660] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.129462][ T3660] syscall_exit_to_user_mode+0x9/0x60 [ 55.134816][ T3660] do_syscall_64+0x42/0xb0 [ 55.139215][ T3660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.145090][ T3660] RIP: 0033:0x7fc6cd2767a3 [ 55.149491][ T3660] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.169154][ T3660] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.177655][ T3660] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 55.186511][ T3660] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.194471][ T3660] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.202447][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.210496][ T3660] R13: 00000000000f4240 R14: 000000000000d595 R15: 00007ffdc49a5924 [ 55.218481][ T3660] [pid 3660] close(3) = 0 [pid 3660] close(4) = 0 [pid 3660] close(5) = -1 EBADF (Bad file descriptor) [pid 3660] close(6) = -1 EBADF (Bad file descriptor) [pid 3660] close(7) = -1 EBADF (Bad file descriptor) [pid 3660] close(8) = -1 EBADF (Bad file descriptor) [pid 3660] close(9) = -1 EBADF (Bad file descriptor) [pid 3660] close(10) = -1 EBADF (Bad file descriptor) [pid 3660] close(11) = -1 EBADF (Bad file descriptor) [pid 3660] close(12) = -1 EBADF (Bad file descriptor) [pid 3660] close(13) = -1 EBADF (Bad file descriptor) [pid 3660] close(14) = -1 EBADF (Bad file descriptor) [pid 3660] close(15) = -1 EBADF (Bad file descriptor) [pid 3660] close(16) = -1 EBADF (Bad file descriptor) [pid 3660] close(17) = -1 EBADF (Bad file descriptor) [pid 3660] close(18) = -1 EBADF (Bad file descriptor) [pid 3660] close(19) = -1 EBADF (Bad file descriptor) [pid 3660] close(20) = -1 EBADF (Bad file descriptor) [pid 3660] close(21) = -1 EBADF (Bad file descriptor) [pid 3660] close(22) = -1 EBADF (Bad file descriptor) [pid 3660] close(23) = -1 EBADF (Bad file descriptor) [pid 3660] close(24) = -1 EBADF (Bad file descriptor) [pid 3660] close(25) = -1 EBADF (Bad file descriptor) [pid 3660] close(26) = -1 EBADF (Bad file descriptor) [pid 3660] close(27) = -1 EBADF (Bad file descriptor) [pid 3660] close(28) = -1 EBADF (Bad file descriptor) [pid 3660] close(29) = -1 EBADF (Bad file descriptor) [pid 3660] exit_group(0) = ? [pid 3660] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3661 attached [pid 3661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3661] setpgid(0, 0) = 0 [pid 3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3661] write(3, "1000", 4) = 4 [pid 3661] close(3 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 43 [pid 3661] <... close resumed>) = 0 [pid 3661] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3661] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3661] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3661] write(4, "5", 1) = 1 [pid 3661] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.297798][ T3661] FAULT_INJECTION: forcing a failure. [ 55.297798][ T3661] name failslab, interval 1, probability 0, space 0, times 0 [ 55.310571][ T3661] CPU: 1 PID: 3661 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.320715][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.330768][ T3661] Call Trace: [ 55.334050][ T3661] [ 55.336979][ T3661] dump_stack_lvl+0xcd/0x134 [ 55.341587][ T3661] should_fail.cold+0x5/0xa [ 55.346096][ T3661] should_failslab+0x5/0x10 [ 55.350612][ T3661] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.355896][ T3661] ? ref_tracker_alloc+0x14c/0x550 [ 55.361012][ T3661] ref_tracker_alloc+0x14c/0x550 [ 55.365950][ T3661] ? ref_tracker_free+0x6b0/0x6b0 [ 55.370987][ T3661] ? lock_release+0x720/0x720 [ 55.375664][ T3661] ? do_raw_spin_lock+0x120/0x2a0 [ 55.380693][ T3661] ? rwlock_bug.part.0+0x90/0x90 [ 55.385737][ T3661] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.391113][ T3661] linkwatch_fire_event+0x202/0x260 [ 55.396319][ T3661] netif_carrier_off+0x96/0xb0 [ 55.401104][ T3661] __tun_detach+0xfe7/0x13e0 [ 55.405803][ T3661] tun_chr_close+0xc4/0x180 [ 55.410317][ T3661] __fput+0x277/0x9d0 [ 55.414295][ T3661] ? __tun_detach+0x13e0/0x13e0 [ 55.419249][ T3661] task_work_run+0xdd/0x1a0 [ 55.423779][ T3661] ptrace_notify+0x114/0x140 [ 55.428377][ T3661] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.434634][ T3661] syscall_exit_to_user_mode+0x9/0x60 [ 55.440127][ T3661] do_syscall_64+0x42/0xb0 [ 55.444754][ T3661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.451775][ T3661] RIP: 0033:0x7fc6cd2767a3 [ 55.456190][ T3661] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.476000][ T3661] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.484508][ T3661] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3661] close(3) = 0 [pid 3661] close(4) = 0 [pid 3661] close(5) = -1 EBADF (Bad file descriptor) [pid 3661] close(6) = -1 EBADF (Bad file descriptor) [pid 3661] close(7) = -1 EBADF (Bad file descriptor) [pid 3661] close(8) = -1 EBADF (Bad file descriptor) [pid 3661] close(9) = -1 EBADF (Bad file descriptor) [pid 3661] close(10) = -1 EBADF (Bad file descriptor) [pid 3661] close(11) = -1 EBADF (Bad file descriptor) [pid 3661] close(12) = -1 EBADF (Bad file descriptor) [pid 3661] close(13) = -1 EBADF (Bad file descriptor) [pid 3661] close(14) = -1 EBADF (Bad file descriptor) [pid 3661] close(15) = -1 EBADF (Bad file descriptor) [pid 3661] close(16) = -1 EBADF (Bad file descriptor) [pid 3661] close(17) = -1 EBADF (Bad file descriptor) [pid 3661] close(18) = -1 EBADF (Bad file descriptor) [pid 3661] close(19) = -1 EBADF (Bad file descriptor) [pid 3661] close(20) = -1 EBADF (Bad file descriptor) [pid 3661] close(21) = -1 EBADF (Bad file descriptor) [pid 3661] close(22) = -1 EBADF (Bad file descriptor) [pid 3661] close(23) = -1 EBADF (Bad file descriptor) [pid 3661] close(24) = -1 EBADF (Bad file descriptor) [pid 3661] close(25) = -1 EBADF (Bad file descriptor) [pid 3661] close(26) = -1 EBADF (Bad file descriptor) [pid 3661] close(27) = -1 EBADF (Bad file descriptor) [pid 3661] close(28) = -1 EBADF (Bad file descriptor) [pid 3661] close(29) = -1 EBADF (Bad file descriptor) [pid 3661] exit_group(0) = ? [pid 3661] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 44 ./strace-static-x86_64: Process 3662 attached [pid 3662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3662] setpgid(0, 0) = 0 [pid 3662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3662] write(3, "1000", 4) = 4 [pid 3662] close(3) = 0 [pid 3662] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 55.492508][ T3661] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.500468][ T3661] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.508928][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.516912][ T3661] R13: 00000000000f4240 R14: 000000000000d6b1 R15: 00007ffdc49a5924 [ 55.524894][ T3661] [pid 3662] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3662] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3662] write(4, "5", 1) = 1 [pid 3662] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.582588][ T3662] FAULT_INJECTION: forcing a failure. [ 55.582588][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 55.595443][ T3662] CPU: 0 PID: 3662 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.605868][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.615920][ T3662] Call Trace: [ 55.619192][ T3662] [ 55.622117][ T3662] dump_stack_lvl+0xcd/0x134 [ 55.626726][ T3662] should_fail.cold+0x5/0xa [ 55.631245][ T3662] should_failslab+0x5/0x10 [ 55.635772][ T3662] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.641083][ T3662] ? ref_tracker_alloc+0x14c/0x550 [ 55.646205][ T3662] ref_tracker_alloc+0x14c/0x550 [ 55.651249][ T3662] ? ref_tracker_free+0x6b0/0x6b0 [ 55.656298][ T3662] ? lock_release+0x720/0x720 [ 55.660982][ T3662] ? do_raw_spin_lock+0x120/0x2a0 [ 55.666014][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 55.671045][ T3662] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.676470][ T3662] linkwatch_fire_event+0x202/0x260 [ 55.681680][ T3662] netif_carrier_off+0x96/0xb0 [ 55.686457][ T3662] __tun_detach+0xfe7/0x13e0 [ 55.691074][ T3662] tun_chr_close+0xc4/0x180 [ 55.695585][ T3662] __fput+0x277/0x9d0 [ 55.699584][ T3662] ? __tun_detach+0x13e0/0x13e0 [ 55.704455][ T3662] task_work_run+0xdd/0x1a0 [ 55.708956][ T3662] ptrace_notify+0x114/0x140 [ 55.713538][ T3662] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 55.719950][ T3662] syscall_exit_to_user_mode+0x9/0x60 [ 55.725318][ T3662] do_syscall_64+0x42/0xb0 [ 55.729812][ T3662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.735708][ T3662] RIP: 0033:0x7fc6cd2767a3 [ 55.740138][ T3662] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 55.759748][ T3662] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 55.768176][ T3662] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 55.776145][ T3662] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 55.784115][ T3662] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 55.792090][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 55.800158][ T3662] R13: 00000000000f4240 R14: 000000000000d7e7 R15: 00007ffdc49a5924 [ 55.808139][ T3662] [pid 3662] close(3) = 0 [pid 3662] close(4) = 0 [pid 3662] close(5) = -1 EBADF (Bad file descriptor) [pid 3662] close(6) = -1 EBADF (Bad file descriptor) [pid 3662] close(7) = -1 EBADF (Bad file descriptor) [pid 3662] close(8) = -1 EBADF (Bad file descriptor) [pid 3662] close(9) = -1 EBADF (Bad file descriptor) [pid 3662] close(10) = -1 EBADF (Bad file descriptor) [pid 3662] close(11) = -1 EBADF (Bad file descriptor) [pid 3662] close(12) = -1 EBADF (Bad file descriptor) [pid 3662] close(13) = -1 EBADF (Bad file descriptor) [pid 3662] close(14) = -1 EBADF (Bad file descriptor) [pid 3662] close(15) = -1 EBADF (Bad file descriptor) [pid 3662] close(16) = -1 EBADF (Bad file descriptor) [pid 3662] close(17) = -1 EBADF (Bad file descriptor) [pid 3662] close(18) = -1 EBADF (Bad file descriptor) [pid 3662] close(19) = -1 EBADF (Bad file descriptor) [pid 3662] close(20) = -1 EBADF (Bad file descriptor) [pid 3662] close(21) = -1 EBADF (Bad file descriptor) [pid 3662] close(22) = -1 EBADF (Bad file descriptor) [pid 3662] close(23) = -1 EBADF (Bad file descriptor) [pid 3662] close(24) = -1 EBADF (Bad file descriptor) [pid 3662] close(25) = -1 EBADF (Bad file descriptor) [pid 3662] close(26) = -1 EBADF (Bad file descriptor) [pid 3662] close(27) = -1 EBADF (Bad file descriptor) [pid 3662] close(28) = -1 EBADF (Bad file descriptor) [pid 3662] close(29) = -1 EBADF (Bad file descriptor) [pid 3662] exit_group(0) = ? [pid 3662] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 45 ./strace-static-x86_64: Process 3663 attached [pid 3663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3663] setpgid(0, 0) = 0 [pid 3663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3663] write(3, "1000", 4) = 4 [pid 3663] close(3) = 0 [pid 3663] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3663] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3663] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3663] write(4, "5", 1) = 1 [pid 3663] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 55.895781][ T3663] FAULT_INJECTION: forcing a failure. [ 55.895781][ T3663] name failslab, interval 1, probability 0, space 0, times 0 [ 55.908599][ T3663] CPU: 0 PID: 3663 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 55.918747][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.928886][ T3663] Call Trace: [ 55.932170][ T3663] [ 55.935215][ T3663] dump_stack_lvl+0xcd/0x134 [ 55.939827][ T3663] should_fail.cold+0x5/0xa [ 55.944362][ T3663] should_failslab+0x5/0x10 [ 55.948872][ T3663] kmem_cache_alloc_trace+0x60/0x3f0 [ 55.955033][ T3663] ? ref_tracker_alloc+0x14c/0x550 [ 55.960156][ T3663] ref_tracker_alloc+0x14c/0x550 [ 55.965104][ T3663] ? ref_tracker_free+0x6b0/0x6b0 [ 55.970120][ T3663] ? lock_release+0x720/0x720 [ 55.974798][ T3663] ? do_raw_spin_lock+0x120/0x2a0 [ 55.979827][ T3663] ? rwlock_bug.part.0+0x90/0x90 [ 55.984768][ T3663] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 55.990148][ T3663] linkwatch_fire_event+0x202/0x260 [ 55.995360][ T3663] netif_carrier_off+0x96/0xb0 [ 56.000121][ T3663] __tun_detach+0xfe7/0x13e0 [ 56.004717][ T3663] tun_chr_close+0xc4/0x180 [ 56.009229][ T3663] __fput+0x277/0x9d0 [ 56.013252][ T3663] ? __tun_detach+0x13e0/0x13e0 [ 56.018194][ T3663] task_work_run+0xdd/0x1a0 [ 56.022702][ T3663] ptrace_notify+0x114/0x140 [ 56.027283][ T3663] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.033517][ T3663] syscall_exit_to_user_mode+0x9/0x60 [ 56.038967][ T3663] do_syscall_64+0x42/0xb0 [ 56.043378][ T3663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.049261][ T3663] RIP: 0033:0x7fc6cd2767a3 [ 56.053665][ T3663] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.073265][ T3663] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.081764][ T3663] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3663] close(3) = 0 [pid 3663] close(4) = 0 [pid 3663] close(5) = -1 EBADF (Bad file descriptor) [pid 3663] close(6) = -1 EBADF (Bad file descriptor) [pid 3663] close(7) = -1 EBADF (Bad file descriptor) [pid 3663] close(8) = -1 EBADF (Bad file descriptor) [pid 3663] close(9) = -1 EBADF (Bad file descriptor) [pid 3663] close(10) = -1 EBADF (Bad file descriptor) [pid 3663] close(11) = -1 EBADF (Bad file descriptor) [pid 3663] close(12) = -1 EBADF (Bad file descriptor) [pid 3663] close(13) = -1 EBADF (Bad file descriptor) [pid 3663] close(14) = -1 EBADF (Bad file descriptor) [pid 3663] close(15) = -1 EBADF (Bad file descriptor) [pid 3663] close(16) = -1 EBADF (Bad file descriptor) [pid 3663] close(17) = -1 EBADF (Bad file descriptor) [pid 3663] close(18) = -1 EBADF (Bad file descriptor) [pid 3663] close(19) = -1 EBADF (Bad file descriptor) [pid 3663] close(20) = -1 EBADF (Bad file descriptor) [pid 3663] close(21) = -1 EBADF (Bad file descriptor) [pid 3663] close(22) = -1 EBADF (Bad file descriptor) [pid 3663] close(23) = -1 EBADF (Bad file descriptor) [pid 3663] close(24) = -1 EBADF (Bad file descriptor) [pid 3663] close(25) = -1 EBADF (Bad file descriptor) [pid 3663] close(26) = -1 EBADF (Bad file descriptor) [pid 3663] close(27) = -1 EBADF (Bad file descriptor) [pid 3663] close(28) = -1 EBADF (Bad file descriptor) [pid 3663] close(29) = -1 EBADF (Bad file descriptor) [pid 3663] exit_group(0) = ? [pid 3663] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [ 56.089729][ T3663] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.097688][ T3663] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.105649][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.113609][ T3663] R13: 00000000000f4240 R14: 000000000000d8ff R15: 00007ffdc49a5924 [ 56.121585][ T3663] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 46 ./strace-static-x86_64: Process 3664 attached [pid 3664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3664] setpgid(0, 0) = 0 [pid 3664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3664] write(3, "1000", 4) = 4 [pid 3664] close(3) = 0 [pid 3664] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3664] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3664] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3664] write(4, "5", 1) = 1 [pid 3664] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.187940][ T3664] FAULT_INJECTION: forcing a failure. [ 56.187940][ T3664] name failslab, interval 1, probability 0, space 0, times 0 [ 56.200787][ T3664] CPU: 1 PID: 3664 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.211162][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.221210][ T3664] Call Trace: [ 56.224477][ T3664] [ 56.227391][ T3664] dump_stack_lvl+0xcd/0x134 [ 56.231977][ T3664] should_fail.cold+0x5/0xa [ 56.236474][ T3664] should_failslab+0x5/0x10 [ 56.240972][ T3664] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.246245][ T3664] ? ref_tracker_alloc+0x14c/0x550 [ 56.251372][ T3664] ref_tracker_alloc+0x14c/0x550 [ 56.256304][ T3664] ? ref_tracker_free+0x6b0/0x6b0 [ 56.261323][ T3664] ? lock_release+0x720/0x720 [ 56.265993][ T3664] ? do_raw_spin_lock+0x120/0x2a0 [ 56.271009][ T3664] ? rwlock_bug.part.0+0x90/0x90 [ 56.276110][ T3664] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.281566][ T3664] linkwatch_fire_event+0x202/0x260 [ 56.286757][ T3664] netif_carrier_off+0x96/0xb0 [ 56.291508][ T3664] __tun_detach+0xfe7/0x13e0 [ 56.296092][ T3664] tun_chr_close+0xc4/0x180 [ 56.300580][ T3664] __fput+0x277/0x9d0 [ 56.304547][ T3664] ? __tun_detach+0x13e0/0x13e0 [ 56.309396][ T3664] task_work_run+0xdd/0x1a0 [ 56.313989][ T3664] ptrace_notify+0x114/0x140 [ 56.318580][ T3664] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.324828][ T3664] syscall_exit_to_user_mode+0x9/0x60 [ 56.330201][ T3664] do_syscall_64+0x42/0xb0 [ 56.334645][ T3664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.340537][ T3664] RIP: 0033:0x7fc6cd2767a3 [ 56.344947][ T3664] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.364547][ T3664] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.372964][ T3664] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 56.380937][ T3664] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3664] close(3) = 0 [pid 3664] close(4) = 0 [pid 3664] close(5) = -1 EBADF (Bad file descriptor) [pid 3664] close(6) = -1 EBADF (Bad file descriptor) [pid 3664] close(7) = -1 EBADF (Bad file descriptor) [pid 3664] close(8) = -1 EBADF (Bad file descriptor) [pid 3664] close(9) = -1 EBADF (Bad file descriptor) [pid 3664] close(10) = -1 EBADF (Bad file descriptor) [pid 3664] close(11) = -1 EBADF (Bad file descriptor) [pid 3664] close(12) = -1 EBADF (Bad file descriptor) [pid 3664] close(13) = -1 EBADF (Bad file descriptor) [pid 3664] close(14) = -1 EBADF (Bad file descriptor) [ 56.388907][ T3664] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.396962][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.404937][ T3664] R13: 00000000000f4240 R14: 000000000000da3a R15: 00007ffdc49a5924 [ 56.412925][ T3664] [pid 3664] close(15) = -1 EBADF (Bad file descriptor) [pid 3664] close(16) = -1 EBADF (Bad file descriptor) [pid 3664] close(17) = -1 EBADF (Bad file descriptor) [pid 3664] close(18) = -1 EBADF (Bad file descriptor) [pid 3664] close(19) = -1 EBADF (Bad file descriptor) [pid 3664] close(20) = -1 EBADF (Bad file descriptor) [pid 3664] close(21) = -1 EBADF (Bad file descriptor) [pid 3664] close(22) = -1 EBADF (Bad file descriptor) [pid 3664] close(23) = -1 EBADF (Bad file descriptor) [pid 3664] close(24) = -1 EBADF (Bad file descriptor) [pid 3664] close(25) = -1 EBADF (Bad file descriptor) [pid 3664] close(26) = -1 EBADF (Bad file descriptor) [pid 3664] close(27) = -1 EBADF (Bad file descriptor) [pid 3664] close(28) = -1 EBADF (Bad file descriptor) [pid 3664] close(29) = -1 EBADF (Bad file descriptor) [pid 3664] exit_group(0) = ? [pid 3664] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3665 attached , child_tidptr=0x5555570bd5d0) = 47 [pid 3665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3665] setpgid(0, 0) = 0 [pid 3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3665] write(3, "1000", 4) = 4 [pid 3665] close(3) = 0 [pid 3665] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3665] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3665] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3665] write(4, "5", 1) = 1 [pid 3665] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.493717][ T3665] FAULT_INJECTION: forcing a failure. [ 56.493717][ T3665] name failslab, interval 1, probability 0, space 0, times 0 [ 56.506338][ T3665] CPU: 1 PID: 3665 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.516795][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.527061][ T3665] Call Trace: [ 56.530337][ T3665] [ 56.533253][ T3665] dump_stack_lvl+0xcd/0x134 [ 56.537843][ T3665] should_fail.cold+0x5/0xa [ 56.542347][ T3665] should_failslab+0x5/0x10 [ 56.546840][ T3665] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.552288][ T3665] ? ref_tracker_alloc+0x14c/0x550 [ 56.557436][ T3665] ref_tracker_alloc+0x14c/0x550 [ 56.562386][ T3665] ? ref_tracker_free+0x6b0/0x6b0 [ 56.567402][ T3665] ? lock_release+0x720/0x720 [ 56.572074][ T3665] ? do_raw_spin_lock+0x120/0x2a0 [ 56.577092][ T3665] ? rwlock_bug.part.0+0x90/0x90 [ 56.582111][ T3665] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.587499][ T3665] linkwatch_fire_event+0x202/0x260 [ 56.592693][ T3665] netif_carrier_off+0x96/0xb0 [ 56.597446][ T3665] __tun_detach+0xfe7/0x13e0 [ 56.602035][ T3665] tun_chr_close+0xc4/0x180 [ 56.606527][ T3665] __fput+0x277/0x9d0 [ 56.610497][ T3665] ? __tun_detach+0x13e0/0x13e0 [ 56.615342][ T3665] task_work_run+0xdd/0x1a0 [ 56.619850][ T3665] ptrace_notify+0x114/0x140 [ 56.624444][ T3665] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.630683][ T3665] syscall_exit_to_user_mode+0x9/0x60 [ 56.636140][ T3665] do_syscall_64+0x42/0xb0 [ 56.640548][ T3665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.646447][ T3665] RIP: 0033:0x7fc6cd2767a3 [ 56.650854][ T3665] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.670465][ T3665] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.678874][ T3665] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 56.686833][ T3665] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.694787][ T3665] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 56.702744][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 56.710710][ T3665] R13: 00000000000f4240 R14: 000000000000db5d R15: 00007ffdc49a5924 [ 56.718691][ T3665] [pid 3665] close(3) = 0 [pid 3665] close(4) = 0 [pid 3665] close(5) = -1 EBADF (Bad file descriptor) [pid 3665] close(6) = -1 EBADF (Bad file descriptor) [pid 3665] close(7) = -1 EBADF (Bad file descriptor) [pid 3665] close(8) = -1 EBADF (Bad file descriptor) [pid 3665] close(9) = -1 EBADF (Bad file descriptor) [pid 3665] close(10) = -1 EBADF (Bad file descriptor) [pid 3665] close(11) = -1 EBADF (Bad file descriptor) [pid 3665] close(12) = -1 EBADF (Bad file descriptor) [pid 3665] close(13) = -1 EBADF (Bad file descriptor) [pid 3665] close(14) = -1 EBADF (Bad file descriptor) [pid 3665] close(15) = -1 EBADF (Bad file descriptor) [pid 3665] close(16) = -1 EBADF (Bad file descriptor) [pid 3665] close(17) = -1 EBADF (Bad file descriptor) [pid 3665] close(18) = -1 EBADF (Bad file descriptor) [pid 3665] close(19) = -1 EBADF (Bad file descriptor) [pid 3665] close(20) = -1 EBADF (Bad file descriptor) [pid 3665] close(21) = -1 EBADF (Bad file descriptor) [pid 3665] close(22) = -1 EBADF (Bad file descriptor) [pid 3665] close(23) = -1 EBADF (Bad file descriptor) [pid 3665] close(24) = -1 EBADF (Bad file descriptor) [pid 3665] close(25) = -1 EBADF (Bad file descriptor) [pid 3665] close(26) = -1 EBADF (Bad file descriptor) [pid 3665] close(27) = -1 EBADF (Bad file descriptor) [pid 3665] close(28) = -1 EBADF (Bad file descriptor) [pid 3665] close(29) = -1 EBADF (Bad file descriptor) [pid 3665] exit_group(0) = ? [pid 3665] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 48 ./strace-static-x86_64: Process 3666 attached [pid 3666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3666] setpgid(0, 0) = 0 [pid 3666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3666] write(3, "1000", 4) = 4 [pid 3666] close(3) = 0 [pid 3666] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3666] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3666] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3666] write(4, "5", 1) = 1 [pid 3666] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 56.795029][ T3666] FAULT_INJECTION: forcing a failure. [ 56.795029][ T3666] name failslab, interval 1, probability 0, space 0, times 0 [ 56.807727][ T3666] CPU: 1 PID: 3666 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 56.817964][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.828237][ T3666] Call Trace: [ 56.831516][ T3666] [ 56.834684][ T3666] dump_stack_lvl+0xcd/0x134 [ 56.839284][ T3666] should_fail.cold+0x5/0xa [ 56.843926][ T3666] should_failslab+0x5/0x10 [ 56.848542][ T3666] kmem_cache_alloc_trace+0x60/0x3f0 [ 56.854132][ T3666] ? ref_tracker_alloc+0x14c/0x550 [ 56.859255][ T3666] ref_tracker_alloc+0x14c/0x550 [ 56.864205][ T3666] ? ref_tracker_free+0x6b0/0x6b0 [ 56.869231][ T3666] ? lock_release+0x720/0x720 [ 56.874002][ T3666] ? do_raw_spin_lock+0x120/0x2a0 [ 56.879034][ T3666] ? rwlock_bug.part.0+0x90/0x90 [ 56.883976][ T3666] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 56.889362][ T3666] linkwatch_fire_event+0x202/0x260 [ 56.894580][ T3666] netif_carrier_off+0x96/0xb0 [ 56.899375][ T3666] __tun_detach+0xfe7/0x13e0 [ 56.903976][ T3666] tun_chr_close+0xc4/0x180 [ 56.908482][ T3666] __fput+0x277/0x9d0 [ 56.912905][ T3666] ? __tun_detach+0x13e0/0x13e0 [ 56.917769][ T3666] task_work_run+0xdd/0x1a0 [ 56.922292][ T3666] ptrace_notify+0x114/0x140 [ 56.926893][ T3666] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 56.933156][ T3666] syscall_exit_to_user_mode+0x9/0x60 [ 56.938643][ T3666] do_syscall_64+0x42/0xb0 [ 56.943089][ T3666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.949000][ T3666] RIP: 0033:0x7fc6cd2767a3 [ 56.953414][ T3666] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 56.973715][ T3666] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.982297][ T3666] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3666] close(3) = 0 [pid 3666] close(4) = 0 [pid 3666] close(5) = -1 EBADF (Bad file descriptor) [pid 3666] close(6) = -1 EBADF (Bad file descriptor) [pid 3666] close(7) = -1 EBADF (Bad file descriptor) [pid 3666] close(8) = -1 EBADF (Bad file descriptor) [pid 3666] close(9) = -1 EBADF (Bad file descriptor) [pid 3666] close(10) = -1 EBADF (Bad file descriptor) [pid 3666] close(11) = -1 EBADF (Bad file descriptor) [pid 3666] close(12) = -1 EBADF (Bad file descriptor) [pid 3666] close(13) = -1 EBADF (Bad file descriptor) [pid 3666] close(14) = -1 EBADF (Bad file descriptor) [pid 3666] close(15) = -1 EBADF (Bad file descriptor) [pid 3666] close(16) = -1 EBADF (Bad file descriptor) [pid 3666] close(17) = -1 EBADF (Bad file descriptor) [pid 3666] close(18) = -1 EBADF (Bad file descriptor) [pid 3666] close(19) = -1 EBADF (Bad file descriptor) [pid 3666] close(20) = -1 EBADF (Bad file descriptor) [pid 3666] close(21) = -1 EBADF (Bad file descriptor) [pid 3666] close(22) = -1 EBADF (Bad file descriptor) [pid 3666] close(23) = -1 EBADF (Bad file descriptor) [pid 3666] close(24) = -1 EBADF (Bad file descriptor) [pid 3666] close(25) = -1 EBADF (Bad file descriptor) [pid 3666] close(26) = -1 EBADF (Bad file descriptor) [pid 3666] close(27) = -1 EBADF (Bad file descriptor) [pid 3666] close(28) = -1 EBADF (Bad file descriptor) [pid 3666] close(29) = -1 EBADF (Bad file descriptor) [pid 3666] exit_group(0) = ? [pid 3666] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 49 ./strace-static-x86_64: Process 3667 attached [pid 3667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3667] setpgid(0, 0) = 0 [ 56.990366][ T3666] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 56.998334][ T3666] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.006311][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.014290][ T3666] R13: 00000000000f4240 R14: 000000000000dc8d R15: 00007ffdc49a5924 [ 57.022373][ T3666] [pid 3667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3667] write(3, "1000", 4) = 4 [pid 3667] close(3) = 0 [pid 3667] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3667] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3667] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3667] write(4, "5", 1) = 1 [pid 3667] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.085090][ T3667] FAULT_INJECTION: forcing a failure. [ 57.085090][ T3667] name failslab, interval 1, probability 0, space 0, times 0 [ 57.098205][ T3667] CPU: 0 PID: 3667 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.108349][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.118398][ T3667] Call Trace: [ 57.121665][ T3667] [ 57.124575][ T3667] dump_stack_lvl+0xcd/0x134 [ 57.129164][ T3667] should_fail.cold+0x5/0xa [ 57.133665][ T3667] should_failslab+0x5/0x10 [ 57.138248][ T3667] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.143742][ T3667] ? ref_tracker_alloc+0x14c/0x550 [ 57.148855][ T3667] ref_tracker_alloc+0x14c/0x550 [ 57.153985][ T3667] ? ref_tracker_free+0x6b0/0x6b0 [ 57.159000][ T3667] ? lock_release+0x720/0x720 [ 57.163670][ T3667] ? do_raw_spin_lock+0x120/0x2a0 [ 57.168694][ T3667] ? rwlock_bug.part.0+0x90/0x90 [ 57.173620][ T3667] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.178982][ T3667] linkwatch_fire_event+0x202/0x260 [ 57.184179][ T3667] netif_carrier_off+0x96/0xb0 [ 57.188949][ T3667] __tun_detach+0xfe7/0x13e0 [ 57.193532][ T3667] tun_chr_close+0xc4/0x180 [ 57.198013][ T3667] __fput+0x277/0x9d0 [ 57.201972][ T3667] ? __tun_detach+0x13e0/0x13e0 [ 57.206800][ T3667] task_work_run+0xdd/0x1a0 [ 57.211374][ T3667] ptrace_notify+0x114/0x140 [ 57.215952][ T3667] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.222176][ T3667] syscall_exit_to_user_mode+0x9/0x60 [ 57.227533][ T3667] do_syscall_64+0x42/0xb0 [ 57.231940][ T3667] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.237820][ T3667] RIP: 0033:0x7fc6cd2767a3 [ 57.242227][ T3667] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.261827][ T3667] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.270231][ T3667] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.278185][ T3667] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 57.286146][ T3667] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.294124][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.302084][ T3667] R13: 00000000000f4240 R14: 000000000000ddbc R15: 00007ffdc49a5924 [ 57.310055][ T3667] [pid 3667] close(3) = 0 [pid 3667] close(4) = 0 [pid 3667] close(5) = -1 EBADF (Bad file descriptor) [pid 3667] close(6) = -1 EBADF (Bad file descriptor) [pid 3667] close(7) = -1 EBADF (Bad file descriptor) [pid 3667] close(8) = -1 EBADF (Bad file descriptor) [pid 3667] close(9) = -1 EBADF (Bad file descriptor) [pid 3667] close(10) = -1 EBADF (Bad file descriptor) [pid 3667] close(11) = -1 EBADF (Bad file descriptor) [pid 3667] close(12) = -1 EBADF (Bad file descriptor) [pid 3667] close(13) = -1 EBADF (Bad file descriptor) [pid 3667] close(14) = -1 EBADF (Bad file descriptor) [pid 3667] close(15) = -1 EBADF (Bad file descriptor) [pid 3667] close(16) = -1 EBADF (Bad file descriptor) [pid 3667] close(17) = -1 EBADF (Bad file descriptor) [pid 3667] close(18) = -1 EBADF (Bad file descriptor) [pid 3667] close(19) = -1 EBADF (Bad file descriptor) [pid 3667] close(20) = -1 EBADF (Bad file descriptor) [pid 3667] close(21) = -1 EBADF (Bad file descriptor) [pid 3667] close(22) = -1 EBADF (Bad file descriptor) [pid 3667] close(23) = -1 EBADF (Bad file descriptor) [pid 3667] close(24) = -1 EBADF (Bad file descriptor) [pid 3667] close(25) = -1 EBADF (Bad file descriptor) [pid 3667] close(26) = -1 EBADF (Bad file descriptor) [pid 3667] close(27) = -1 EBADF (Bad file descriptor) [pid 3667] close(28) = -1 EBADF (Bad file descriptor) [pid 3667] close(29) = -1 EBADF (Bad file descriptor) [pid 3667] exit_group(0) = ? [pid 3667] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 50 ./strace-static-x86_64: Process 3668 attached [pid 3668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3668] setpgid(0, 0) = 0 [pid 3668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3668] write(3, "1000", 4) = 4 [pid 3668] close(3) = 0 [pid 3668] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3668] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3668] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3668] write(4, "5", 1) = 1 [pid 3668] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.393415][ T3668] FAULT_INJECTION: forcing a failure. [ 57.393415][ T3668] name failslab, interval 1, probability 0, space 0, times 0 [ 57.406062][ T3668] CPU: 0 PID: 3668 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.416202][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.426243][ T3668] Call Trace: [ 57.429505][ T3668] [ 57.432413][ T3668] dump_stack_lvl+0xcd/0x134 [ 57.436990][ T3668] should_fail.cold+0x5/0xa [ 57.441472][ T3668] should_failslab+0x5/0x10 [ 57.445957][ T3668] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.451255][ T3668] ? ref_tracker_alloc+0x14c/0x550 [ 57.456475][ T3668] ref_tracker_alloc+0x14c/0x550 [ 57.461413][ T3668] ? ref_tracker_free+0x6b0/0x6b0 [ 57.466423][ T3668] ? lock_release+0x720/0x720 [ 57.471092][ T3668] ? do_raw_spin_lock+0x120/0x2a0 [ 57.476104][ T3668] ? rwlock_bug.part.0+0x90/0x90 [ 57.481030][ T3668] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.486582][ T3668] linkwatch_fire_event+0x202/0x260 [ 57.491782][ T3668] netif_carrier_off+0x96/0xb0 [ 57.496716][ T3668] __tun_detach+0xfe7/0x13e0 [ 57.501304][ T3668] tun_chr_close+0xc4/0x180 [ 57.505798][ T3668] __fput+0x277/0x9d0 [ 57.509767][ T3668] ? __tun_detach+0x13e0/0x13e0 [ 57.514605][ T3668] task_work_run+0xdd/0x1a0 [ 57.519098][ T3668] ptrace_notify+0x114/0x140 [ 57.523679][ T3668] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.529911][ T3668] syscall_exit_to_user_mode+0x9/0x60 [ 57.535622][ T3668] do_syscall_64+0x42/0xb0 [ 57.540032][ T3668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.545914][ T3668] RIP: 0033:0x7fc6cd2767a3 [ 57.550318][ T3668] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.569911][ T3668] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.578313][ T3668] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.586267][ T3668] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3668] close(3) = 0 [pid 3668] close(4) = 0 [pid 3668] close(5) = -1 EBADF (Bad file descriptor) [pid 3668] close(6) = -1 EBADF (Bad file descriptor) [pid 3668] close(7) = -1 EBADF (Bad file descriptor) [pid 3668] close(8) = -1 EBADF (Bad file descriptor) [pid 3668] close(9) = -1 EBADF (Bad file descriptor) [pid 3668] close(10) = -1 EBADF (Bad file descriptor) [pid 3668] close(11) = -1 EBADF (Bad file descriptor) [pid 3668] close(12) = -1 EBADF (Bad file descriptor) [pid 3668] close(13) = -1 EBADF (Bad file descriptor) [pid 3668] close(14) = -1 EBADF (Bad file descriptor) [pid 3668] close(15) = -1 EBADF (Bad file descriptor) [pid 3668] close(16) = -1 EBADF (Bad file descriptor) [pid 3668] close(17) = -1 EBADF (Bad file descriptor) [pid 3668] close(18) = -1 EBADF (Bad file descriptor) [pid 3668] close(19) = -1 EBADF (Bad file descriptor) [pid 3668] close(20) = -1 EBADF (Bad file descriptor) [pid 3668] close(21) = -1 EBADF (Bad file descriptor) [pid 3668] close(22) = -1 EBADF (Bad file descriptor) [pid 3668] close(23) = -1 EBADF (Bad file descriptor) [pid 3668] close(24) = -1 EBADF (Bad file descriptor) [pid 3668] close(25) = -1 EBADF (Bad file descriptor) [pid 3668] close(26) = -1 EBADF (Bad file descriptor) [pid 3668] close(27) = -1 EBADF (Bad file descriptor) [pid 3668] close(28) = -1 EBADF (Bad file descriptor) [pid 3668] close(29) = -1 EBADF (Bad file descriptor) [ 57.594226][ T3668] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.602179][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.610149][ T3668] R13: 00000000000f4240 R14: 000000000000dede R15: 00007ffdc49a5924 [ 57.618118][ T3668] [pid 3668] exit_group(0) = ? [pid 3668] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3669 attached , child_tidptr=0x5555570bd5d0) = 51 [pid 3669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3669] setpgid(0, 0) = 0 [pid 3669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3669] write(3, "1000", 4) = 4 [pid 3669] close(3) = 0 [pid 3669] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3669] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3669] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3669] write(4, "5", 1) = 1 [pid 3669] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.688271][ T3669] FAULT_INJECTION: forcing a failure. [ 57.688271][ T3669] name failslab, interval 1, probability 0, space 0, times 0 [ 57.701124][ T3669] CPU: 1 PID: 3669 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.711253][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.721291][ T3669] Call Trace: [ 57.724555][ T3669] [ 57.727464][ T3669] dump_stack_lvl+0xcd/0x134 [ 57.732042][ T3669] should_fail.cold+0x5/0xa [ 57.736525][ T3669] should_failslab+0x5/0x10 [ 57.741006][ T3669] kmem_cache_alloc_trace+0x60/0x3f0 [ 57.746267][ T3669] ? ref_tracker_alloc+0x14c/0x550 [ 57.751482][ T3669] ref_tracker_alloc+0x14c/0x550 [ 57.756412][ T3669] ? ref_tracker_free+0x6b0/0x6b0 [ 57.761414][ T3669] ? lock_release+0x720/0x720 [ 57.766071][ T3669] ? do_raw_spin_lock+0x120/0x2a0 [ 57.771096][ T3669] ? rwlock_bug.part.0+0x90/0x90 [ 57.776014][ T3669] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 57.781385][ T3669] linkwatch_fire_event+0x202/0x260 [ 57.786585][ T3669] netif_carrier_off+0x96/0xb0 [ 57.791329][ T3669] __tun_detach+0xfe7/0x13e0 [ 57.795906][ T3669] tun_chr_close+0xc4/0x180 [ 57.800387][ T3669] __fput+0x277/0x9d0 [ 57.804343][ T3669] ? __tun_detach+0x13e0/0x13e0 [ 57.809171][ T3669] task_work_run+0xdd/0x1a0 [ 57.813656][ T3669] ptrace_notify+0x114/0x140 [ 57.818228][ T3669] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 57.824534][ T3669] syscall_exit_to_user_mode+0x9/0x60 [ 57.829883][ T3669] do_syscall_64+0x42/0xb0 [ 57.834279][ T3669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.840150][ T3669] RIP: 0033:0x7fc6cd2767a3 [ 57.844542][ T3669] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 57.864123][ T3669] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 57.872529][ T3669] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 57.880652][ T3669] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3669] close(3) = 0 [pid 3669] close(4) = 0 [pid 3669] close(5) = -1 EBADF (Bad file descriptor) [pid 3669] close(6) = -1 EBADF (Bad file descriptor) [pid 3669] close(7) = -1 EBADF (Bad file descriptor) [pid 3669] close(8) = -1 EBADF (Bad file descriptor) [pid 3669] close(9) = -1 EBADF (Bad file descriptor) [pid 3669] close(10) = -1 EBADF (Bad file descriptor) [pid 3669] close(11) = -1 EBADF (Bad file descriptor) [pid 3669] close(12) = -1 EBADF (Bad file descriptor) [pid 3669] close(13) = -1 EBADF (Bad file descriptor) [pid 3669] close(14) = -1 EBADF (Bad file descriptor) [pid 3669] close(15) = -1 EBADF (Bad file descriptor) [pid 3669] close(16) = -1 EBADF (Bad file descriptor) [pid 3669] close(17) = -1 EBADF (Bad file descriptor) [pid 3669] close(18) = -1 EBADF (Bad file descriptor) [pid 3669] close(19) = -1 EBADF (Bad file descriptor) [pid 3669] close(20) = -1 EBADF (Bad file descriptor) [pid 3669] close(21) = -1 EBADF (Bad file descriptor) [pid 3669] close(22) = -1 EBADF (Bad file descriptor) [pid 3669] close(23) = -1 EBADF (Bad file descriptor) [pid 3669] close(24) = -1 EBADF (Bad file descriptor) [pid 3669] close(25) = -1 EBADF (Bad file descriptor) [pid 3669] close(26) = -1 EBADF (Bad file descriptor) [pid 3669] close(27) = -1 EBADF (Bad file descriptor) [pid 3669] close(28) = -1 EBADF (Bad file descriptor) [pid 3669] close(29) = -1 EBADF (Bad file descriptor) [pid 3669] exit_group(0) = ? [pid 3669] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 52 ./strace-static-x86_64: Process 3670 attached [pid 3670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3670] setpgid(0, 0) = 0 [pid 3670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3670] write(3, "1000", 4) = 4 [pid 3670] close(3) = 0 [pid 3670] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 57.888599][ T3669] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 57.896805][ T3669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.904753][ T3669] R13: 00000000000f4240 R14: 000000000000e016 R15: 00007ffdc49a5924 [ 57.912711][ T3669] [pid 3670] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3670] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3670] write(4, "5", 1) = 1 [pid 3670] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 57.972801][ T3670] FAULT_INJECTION: forcing a failure. [ 57.972801][ T3670] name failslab, interval 1, probability 0, space 0, times 0 [ 57.985410][ T3670] CPU: 0 PID: 3670 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 57.995553][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.006034][ T3670] Call Trace: [ 58.009310][ T3670] [ 58.012224][ T3670] dump_stack_lvl+0xcd/0x134 [ 58.016806][ T3670] should_fail.cold+0x5/0xa [ 58.021306][ T3670] should_failslab+0x5/0x10 [ 58.025806][ T3670] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.031114][ T3670] ? ref_tracker_alloc+0x14c/0x550 [ 58.036225][ T3670] ref_tracker_alloc+0x14c/0x550 [ 58.041162][ T3670] ? ref_tracker_free+0x6b0/0x6b0 [ 58.046174][ T3670] ? lock_release+0x720/0x720 [ 58.050838][ T3670] ? do_raw_spin_lock+0x120/0x2a0 [ 58.055848][ T3670] ? rwlock_bug.part.0+0x90/0x90 [ 58.060788][ T3670] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.066162][ T3670] linkwatch_fire_event+0x202/0x260 [ 58.071368][ T3670] netif_carrier_off+0x96/0xb0 [ 58.076119][ T3670] __tun_detach+0xfe7/0x13e0 [ 58.080716][ T3670] tun_chr_close+0xc4/0x180 [ 58.085205][ T3670] __fput+0x277/0x9d0 [ 58.089179][ T3670] ? __tun_detach+0x13e0/0x13e0 [ 58.094018][ T3670] task_work_run+0xdd/0x1a0 [ 58.098682][ T3670] ptrace_notify+0x114/0x140 [ 58.103347][ T3670] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.109576][ T3670] syscall_exit_to_user_mode+0x9/0x60 [ 58.114934][ T3670] do_syscall_64+0x42/0xb0 [ 58.119335][ T3670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.125216][ T3670] RIP: 0033:0x7fc6cd2767a3 [ 58.129622][ T3670] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.149743][ T3670] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.158141][ T3670] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3670] close(3) = 0 [pid 3670] close(4) = 0 [pid 3670] close(5) = -1 EBADF (Bad file descriptor) [pid 3670] close(6) = -1 EBADF (Bad file descriptor) [pid 3670] close(7) = -1 EBADF (Bad file descriptor) [pid 3670] close(8) = -1 EBADF (Bad file descriptor) [pid 3670] close(9) = -1 EBADF (Bad file descriptor) [pid 3670] close(10) = -1 EBADF (Bad file descriptor) [pid 3670] close(11) = -1 EBADF (Bad file descriptor) [pid 3670] close(12) = -1 EBADF (Bad file descriptor) [pid 3670] close(13) = -1 EBADF (Bad file descriptor) [pid 3670] close(14) = -1 EBADF (Bad file descriptor) [pid 3670] close(15) = -1 EBADF (Bad file descriptor) [ 58.166094][ T3670] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.174046][ T3670] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.182001][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.189965][ T3670] R13: 00000000000f4240 R14: 000000000000e13a R15: 00007ffdc49a5924 [ 58.198030][ T3670] [pid 3670] close(16) = -1 EBADF (Bad file descriptor) [pid 3670] close(17) = -1 EBADF (Bad file descriptor) [pid 3670] close(18) = -1 EBADF (Bad file descriptor) [pid 3670] close(19) = -1 EBADF (Bad file descriptor) [pid 3670] close(20) = -1 EBADF (Bad file descriptor) [pid 3670] close(21) = -1 EBADF (Bad file descriptor) [pid 3670] close(22) = -1 EBADF (Bad file descriptor) [pid 3670] close(23) = -1 EBADF (Bad file descriptor) [pid 3670] close(24) = -1 EBADF (Bad file descriptor) [pid 3670] close(25) = -1 EBADF (Bad file descriptor) [pid 3670] close(26) = -1 EBADF (Bad file descriptor) [pid 3670] close(27) = -1 EBADF (Bad file descriptor) [pid 3670] close(28) = -1 EBADF (Bad file descriptor) [pid 3670] close(29) = -1 EBADF (Bad file descriptor) [pid 3670] exit_group(0) = ? [pid 3670] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3671 attached , child_tidptr=0x5555570bd5d0) = 53 [pid 3671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3671] setpgid(0, 0) = 0 [pid 3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3671] write(3, "1000", 4) = 4 [pid 3671] close(3) = 0 [pid 3671] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3671] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3671] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3671] write(4, "5", 1) = 1 [pid 3671] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.271782][ T3671] FAULT_INJECTION: forcing a failure. [ 58.271782][ T3671] name failslab, interval 1, probability 0, space 0, times 0 [ 58.284582][ T3671] CPU: 0 PID: 3671 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.294917][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.304969][ T3671] Call Trace: [ 58.308240][ T3671] [ 58.311158][ T3671] dump_stack_lvl+0xcd/0x134 [ 58.315748][ T3671] should_fail.cold+0x5/0xa [ 58.320270][ T3671] should_failslab+0x5/0x10 [ 58.324767][ T3671] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.330063][ T3671] ? ref_tracker_alloc+0x14c/0x550 [ 58.335176][ T3671] ref_tracker_alloc+0x14c/0x550 [ 58.340106][ T3671] ? ref_tracker_free+0x6b0/0x6b0 [ 58.345119][ T3671] ? lock_release+0x720/0x720 [ 58.349791][ T3671] ? do_raw_spin_lock+0x120/0x2a0 [ 58.354808][ T3671] ? rwlock_bug.part.0+0x90/0x90 [ 58.359741][ T3671] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.365109][ T3671] linkwatch_fire_event+0x202/0x260 [ 58.370304][ T3671] netif_carrier_off+0x96/0xb0 [ 58.375059][ T3671] __tun_detach+0xfe7/0x13e0 [ 58.379646][ T3671] tun_chr_close+0xc4/0x180 [ 58.384140][ T3671] __fput+0x277/0x9d0 [ 58.388113][ T3671] ? __tun_detach+0x13e0/0x13e0 [ 58.392951][ T3671] task_work_run+0xdd/0x1a0 [ 58.397446][ T3671] ptrace_notify+0x114/0x140 [ 58.402026][ T3671] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.408254][ T3671] syscall_exit_to_user_mode+0x9/0x60 [ 58.413614][ T3671] do_syscall_64+0x42/0xb0 [ 58.418106][ T3671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.423989][ T3671] RIP: 0033:0x7fc6cd2767a3 [ 58.428392][ T3671] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.450609][ T3671] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.459131][ T3671] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 58.467105][ T3671] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.475074][ T3671] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.483043][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.491124][ T3671] R13: 00000000000f4240 R14: 000000000000e257 R15: 00007ffdc49a5924 [ 58.499105][ T3671] [pid 3671] close(3) = 0 [pid 3671] close(4) = 0 [pid 3671] close(5) = -1 EBADF (Bad file descriptor) [pid 3671] close(6) = -1 EBADF (Bad file descriptor) [pid 3671] close(7) = -1 EBADF (Bad file descriptor) [pid 3671] close(8) = -1 EBADF (Bad file descriptor) [pid 3671] close(9) = -1 EBADF (Bad file descriptor) [pid 3671] close(10) = -1 EBADF (Bad file descriptor) [pid 3671] close(11) = -1 EBADF (Bad file descriptor) [pid 3671] close(12) = -1 EBADF (Bad file descriptor) [pid 3671] close(13) = -1 EBADF (Bad file descriptor) [pid 3671] close(14) = -1 EBADF (Bad file descriptor) [pid 3671] close(15) = -1 EBADF (Bad file descriptor) [pid 3671] close(16) = -1 EBADF (Bad file descriptor) [pid 3671] close(17) = -1 EBADF (Bad file descriptor) [pid 3671] close(18) = -1 EBADF (Bad file descriptor) [pid 3671] close(19) = -1 EBADF (Bad file descriptor) [pid 3671] close(20) = -1 EBADF (Bad file descriptor) [pid 3671] close(21) = -1 EBADF (Bad file descriptor) [pid 3671] close(22) = -1 EBADF (Bad file descriptor) [pid 3671] close(23) = -1 EBADF (Bad file descriptor) [pid 3671] close(24) = -1 EBADF (Bad file descriptor) [pid 3671] close(25) = -1 EBADF (Bad file descriptor) [pid 3671] close(26) = -1 EBADF (Bad file descriptor) [pid 3671] close(27) = -1 EBADF (Bad file descriptor) [pid 3671] close(28) = -1 EBADF (Bad file descriptor) [pid 3671] close(29) = -1 EBADF (Bad file descriptor) [pid 3671] exit_group(0) = ? [pid 3671] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 54 ./strace-static-x86_64: Process 3672 attached [pid 3672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3672] setpgid(0, 0) = 0 [pid 3672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3672] write(3, "1000", 4) = 4 [pid 3672] close(3) = 0 [pid 3672] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3672] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3672] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3672] write(4, "5", 1) = 1 [pid 3672] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.582312][ T3672] FAULT_INJECTION: forcing a failure. [ 58.582312][ T3672] name failslab, interval 1, probability 0, space 0, times 0 [ 58.594926][ T3672] CPU: 0 PID: 3672 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.605309][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.615483][ T3672] Call Trace: [ 58.618766][ T3672] [ 58.621709][ T3672] dump_stack_lvl+0xcd/0x134 [ 58.626307][ T3672] should_fail.cold+0x5/0xa [ 58.630828][ T3672] should_failslab+0x5/0x10 [ 58.635348][ T3672] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.640726][ T3672] ? ref_tracker_alloc+0x14c/0x550 [ 58.645865][ T3672] ref_tracker_alloc+0x14c/0x550 [ 58.650917][ T3672] ? ref_tracker_free+0x6b0/0x6b0 [ 58.655955][ T3672] ? lock_release+0x720/0x720 [ 58.660664][ T3672] ? do_raw_spin_lock+0x120/0x2a0 [ 58.665907][ T3672] ? rwlock_bug.part.0+0x90/0x90 [ 58.670858][ T3672] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.676237][ T3672] linkwatch_fire_event+0x202/0x260 [ 58.681443][ T3672] netif_carrier_off+0x96/0xb0 [ 58.686213][ T3672] __tun_detach+0xfe7/0x13e0 [ 58.690998][ T3672] tun_chr_close+0xc4/0x180 [ 58.695528][ T3672] __fput+0x277/0x9d0 [ 58.699647][ T3672] ? __tun_detach+0x13e0/0x13e0 [ 58.704513][ T3672] task_work_run+0xdd/0x1a0 [ 58.709017][ T3672] ptrace_notify+0x114/0x140 [ 58.713622][ T3672] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 58.719865][ T3672] syscall_exit_to_user_mode+0x9/0x60 [ 58.725244][ T3672] do_syscall_64+0x42/0xb0 [ 58.730020][ T3672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.735921][ T3672] RIP: 0033:0x7fc6cd2767a3 [ 58.740348][ T3672] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 58.760043][ T3672] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 58.768451][ T3672] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3672] close(3) = 0 [pid 3672] close(4) = 0 [pid 3672] close(5) = -1 EBADF (Bad file descriptor) [pid 3672] close(6) = -1 EBADF (Bad file descriptor) [pid 3672] close(7) = -1 EBADF (Bad file descriptor) [pid 3672] close(8) = -1 EBADF (Bad file descriptor) [pid 3672] close(9) = -1 EBADF (Bad file descriptor) [pid 3672] close(10) = -1 EBADF (Bad file descriptor) [pid 3672] close(11) = -1 EBADF (Bad file descriptor) [pid 3672] close(12) = -1 EBADF (Bad file descriptor) [pid 3672] close(13) = -1 EBADF (Bad file descriptor) [pid 3672] close(14) = -1 EBADF (Bad file descriptor) [pid 3672] close(15) = -1 EBADF (Bad file descriptor) [ 58.776441][ T3672] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 58.784411][ T3672] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 58.792390][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 58.800480][ T3672] R13: 00000000000f4240 R14: 000000000000e383 R15: 00007ffdc49a5924 [ 58.808460][ T3672] [pid 3672] close(16) = -1 EBADF (Bad file descriptor) [pid 3672] close(17) = -1 EBADF (Bad file descriptor) [pid 3672] close(18) = -1 EBADF (Bad file descriptor) [pid 3672] close(19) = -1 EBADF (Bad file descriptor) [pid 3672] close(20) = -1 EBADF (Bad file descriptor) [pid 3672] close(21) = -1 EBADF (Bad file descriptor) [pid 3672] close(22) = -1 EBADF (Bad file descriptor) [pid 3672] close(23) = -1 EBADF (Bad file descriptor) [pid 3672] close(24) = -1 EBADF (Bad file descriptor) [pid 3672] close(25) = -1 EBADF (Bad file descriptor) [pid 3672] close(26) = -1 EBADF (Bad file descriptor) [pid 3672] close(27) = -1 EBADF (Bad file descriptor) [pid 3672] close(28) = -1 EBADF (Bad file descriptor) [pid 3672] close(29) = -1 EBADF (Bad file descriptor) [pid 3672] exit_group(0) = ? [pid 3672] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 55 ./strace-static-x86_64: Process 3673 attached [pid 3673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3673] setpgid(0, 0) = 0 [pid 3673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3673] write(3, "1000", 4) = 4 [pid 3673] close(3) = 0 [pid 3673] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3673] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3673] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3673] write(4, "5", 1) = 1 [pid 3673] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 58.877549][ T3673] FAULT_INJECTION: forcing a failure. [ 58.877549][ T3673] name failslab, interval 1, probability 0, space 0, times 0 [ 58.890709][ T3673] CPU: 0 PID: 3673 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 58.901403][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.911460][ T3673] Call Trace: [ 58.914912][ T3673] [ 58.917852][ T3673] dump_stack_lvl+0xcd/0x134 [ 58.922455][ T3673] should_fail.cold+0x5/0xa [ 58.927058][ T3673] should_failslab+0x5/0x10 [ 58.931566][ T3673] kmem_cache_alloc_trace+0x60/0x3f0 [ 58.936855][ T3673] ? ref_tracker_alloc+0x14c/0x550 [ 58.942066][ T3673] ref_tracker_alloc+0x14c/0x550 [ 58.947192][ T3673] ? ref_tracker_free+0x6b0/0x6b0 [ 58.952405][ T3673] ? lock_release+0x720/0x720 [ 58.957080][ T3673] ? do_raw_spin_lock+0x120/0x2a0 [ 58.962101][ T3673] ? rwlock_bug.part.0+0x90/0x90 [ 58.967032][ T3673] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 58.972664][ T3673] linkwatch_fire_event+0x202/0x260 [ 58.977864][ T3673] netif_carrier_off+0x96/0xb0 [ 58.983130][ T3673] __tun_detach+0xfe7/0x13e0 [ 58.987729][ T3673] tun_chr_close+0xc4/0x180 [ 58.992223][ T3673] __fput+0x277/0x9d0 [ 58.996195][ T3673] ? __tun_detach+0x13e0/0x13e0 [ 59.001045][ T3673] task_work_run+0xdd/0x1a0 [ 59.005547][ T3673] ptrace_notify+0x114/0x140 [ 59.010132][ T3673] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 59.016370][ T3673] syscall_exit_to_user_mode+0x9/0x60 [ 59.021740][ T3673] do_syscall_64+0x42/0xb0 [ 59.026327][ T3673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.032215][ T3673] RIP: 0033:0x7fc6cd2767a3 [ 59.036619][ T3673] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 59.056216][ T3673] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 59.064621][ T3673] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3673] close(3) = 0 [pid 3673] close(4) = 0 [pid 3673] close(5) = -1 EBADF (Bad file descriptor) [pid 3673] close(6) = -1 EBADF (Bad file descriptor) [ 59.072581][ T3673] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.080542][ T3673] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.088504][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.096464][ T3673] R13: 00000000000f4240 R14: 000000000000e4b9 R15: 00007ffdc49a5924 [ 59.104439][ T3673] [pid 3673] close(7) = -1 EBADF (Bad file descriptor) [pid 3673] close(8) = -1 EBADF (Bad file descriptor) [pid 3673] close(9) = -1 EBADF (Bad file descriptor) [pid 3673] close(10) = -1 EBADF (Bad file descriptor) [pid 3673] close(11) = -1 EBADF (Bad file descriptor) [pid 3673] close(12) = -1 EBADF (Bad file descriptor) [pid 3673] close(13) = -1 EBADF (Bad file descriptor) [pid 3673] close(14) = -1 EBADF (Bad file descriptor) [pid 3673] close(15) = -1 EBADF (Bad file descriptor) [pid 3673] close(16) = -1 EBADF (Bad file descriptor) [pid 3673] close(17) = -1 EBADF (Bad file descriptor) [pid 3673] close(18) = -1 EBADF (Bad file descriptor) [pid 3673] close(19) = -1 EBADF (Bad file descriptor) [pid 3673] close(20) = -1 EBADF (Bad file descriptor) [pid 3673] close(21) = -1 EBADF (Bad file descriptor) [pid 3673] close(22) = -1 EBADF (Bad file descriptor) [pid 3673] close(23) = -1 EBADF (Bad file descriptor) [pid 3673] close(24) = -1 EBADF (Bad file descriptor) [pid 3673] close(25) = -1 EBADF (Bad file descriptor) [pid 3673] close(26) = -1 EBADF (Bad file descriptor) [pid 3673] close(27) = -1 EBADF (Bad file descriptor) [pid 3673] close(28) = -1 EBADF (Bad file descriptor) [pid 3673] close(29) = -1 EBADF (Bad file descriptor) [pid 3673] exit_group(0) = ? [pid 3673] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 56 ./strace-static-x86_64: Process 3674 attached [pid 3674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3674] setpgid(0, 0) = 0 [pid 3674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3674] write(3, "1000", 4) = 4 [pid 3674] close(3) = 0 [pid 3674] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3674] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3674] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3674] write(4, "5", 1) = 1 [ 59.184395][ T3674] FAULT_INJECTION: forcing a failure. [ 59.184395][ T3674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.197686][ T3674] CPU: 0 PID: 3674 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.207836][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.218227][ T3674] Call Trace: [ 59.221518][ T3674] [ 59.224454][ T3674] dump_stack_lvl+0xcd/0x134 [ 59.229141][ T3674] should_fail.cold+0x5/0xa [ 59.233655][ T3674] prepare_alloc_pages+0x17b/0x570 [ 59.238775][ T3674] __alloc_pages+0x12f/0x500 [ 59.243377][ T3674] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 59.250171][ T3674] ? ___slab_alloc+0x47e/0xf20 [ 59.254959][ T3674] alloc_pages+0x1aa/0x310 [ 59.259382][ T3674] ? mark_held_locks+0x9f/0xe0 [ 59.264152][ T3674] allocate_slab+0x26c/0x3c0 [ 59.268752][ T3674] ___slab_alloc+0x8df/0xf20 [ 59.273348][ T3674] ? napi_skb_cache_get+0xeb/0x170 [ 59.278473][ T3674] ? mark_held_locks+0x9f/0xe0 [ 59.283260][ T3674] kmem_cache_alloc_bulk+0x21c/0x720 [ 59.288573][ T3674] napi_skb_cache_get+0xeb/0x170 [ 59.293514][ T3674] __alloc_skb+0x9b/0x340 [ 59.297845][ T3674] ? __lock_acquire+0xbca/0x56c0 [ 59.302784][ T3674] __napi_alloc_skb+0x70/0x310 [ 59.307549][ T3674] napi_get_frags+0x5e/0x140 [ 59.312144][ T3674] tun_get_user+0xa07/0x3b00 [ 59.316763][ T3674] ? tun_build_skb+0x1170/0x1170 [ 59.321715][ T3674] ? lock_downgrade+0x6e0/0x6e0 [ 59.326580][ T3674] ? find_held_lock+0x2d/0x110 [ 59.331358][ T3674] tun_chr_write_iter+0xdb/0x200 [ 59.336302][ T3674] do_iter_readv_writev+0x3d1/0x640 [ 59.341508][ T3674] ? new_sync_write+0x560/0x560 [ 59.346378][ T3674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.352648][ T3674] ? security_file_permission+0xab/0xd0 [ 59.358205][ T3674] do_iter_write+0x182/0x700 [ 59.362804][ T3674] ? import_iovec+0x10c/0x150 [ 59.367493][ T3674] vfs_writev+0x1aa/0x630 [ 59.371830][ T3674] ? vfs_iter_write+0xa0/0xa0 [ 59.376516][ T3674] ? do_raw_spin_lock+0x120/0x2a0 [ 59.381559][ T3674] ? rwlock_bug.part.0+0x90/0x90 [ 59.386509][ T3674] ? _raw_spin_lock_irq+0x41/0x50 [ 59.391544][ T3674] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 59.397795][ T3674] ? find_held_lock+0x2d/0x110 [ 59.402570][ T3674] ? ptrace_notify+0xfa/0x140 [ 59.407267][ T3674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.413891][ T3674] ? __fget_light+0x20f/0x270 [ 59.418577][ T3674] do_writev+0x133/0x2f0 [ 59.422824][ T3674] ? vfs_writev+0x630/0x630 [ 59.427332][ T3674] ? lockdep_hardirqs_on+0x79/0x100 [ 59.432562][ T3674] ? _raw_spin_unlock_irq+0x2a/0x40 [ 59.437783][ T3674] ? ptrace_notify+0xfa/0x140 [ 59.442476][ T3674] do_syscall_64+0x35/0xb0 [ 59.446906][ T3674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.452817][ T3674] RIP: 0033:0x7fc6cd2b4c39 [ 59.457229][ T3674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.476918][ T3674] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3674] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.485336][ T3674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 59.493406][ T3674] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.501375][ T3674] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.509345][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.517400][ T3674] R13: 00000000000f4240 R14: 000000000000e5e2 R15: 00007ffdc49a5924 [ 59.525638][ T3674] [pid 3674] close(3) = 0 [pid 3674] close(4) = 0 [pid 3674] close(5) = -1 EBADF (Bad file descriptor) [pid 3674] close(6) = -1 EBADF (Bad file descriptor) [pid 3674] close(7) = -1 EBADF (Bad file descriptor) [pid 3674] close(8) = -1 EBADF (Bad file descriptor) [pid 3674] close(9) = -1 EBADF (Bad file descriptor) [pid 3674] close(10) = -1 EBADF (Bad file descriptor) [pid 3674] close(11) = -1 EBADF (Bad file descriptor) [pid 3674] close(12) = -1 EBADF (Bad file descriptor) [pid 3674] close(13) = -1 EBADF (Bad file descriptor) [pid 3674] close(14) = -1 EBADF (Bad file descriptor) [pid 3674] close(15) = -1 EBADF (Bad file descriptor) [pid 3674] close(16) = -1 EBADF (Bad file descriptor) [pid 3674] close(17) = -1 EBADF (Bad file descriptor) [pid 3674] close(18) = -1 EBADF (Bad file descriptor) [pid 3674] close(19) = -1 EBADF (Bad file descriptor) [pid 3674] close(20) = -1 EBADF (Bad file descriptor) [pid 3674] close(21) = -1 EBADF (Bad file descriptor) [pid 3674] close(22) = -1 EBADF (Bad file descriptor) [pid 3674] close(23) = -1 EBADF (Bad file descriptor) [pid 3674] close(24) = -1 EBADF (Bad file descriptor) [pid 3674] close(25) = -1 EBADF (Bad file descriptor) [pid 3674] close(26) = -1 EBADF (Bad file descriptor) [pid 3674] close(27) = -1 EBADF (Bad file descriptor) [pid 3674] close(28) = -1 EBADF (Bad file descriptor) [pid 3674] close(29) = -1 EBADF (Bad file descriptor) [pid 3674] exit_group(0) = ? [pid 3674] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 57 ./strace-static-x86_64: Process 3675 attached [pid 3675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3675] setpgid(0, 0) = 0 [pid 3675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3675] write(3, "1000", 4) = 4 [pid 3675] close(3) = 0 [pid 3675] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3675] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3675] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3675] write(4, "5", 1) = 1 [pid 3675] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.591755][ T3675] FAULT_INJECTION: forcing a failure. [ 59.591755][ T3675] name failslab, interval 1, probability 0, space 0, times 0 [ 59.604574][ T3675] CPU: 0 PID: 3675 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.615833][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.625961][ T3675] Call Trace: [ 59.629225][ T3675] [ 59.632138][ T3675] dump_stack_lvl+0xcd/0x134 [ 59.636737][ T3675] should_fail.cold+0x5/0xa [ 59.641229][ T3675] should_failslab+0x5/0x10 [ 59.645719][ T3675] kmem_cache_alloc_trace+0x60/0x3f0 [ 59.651022][ T3675] ? ref_tracker_alloc+0x14c/0x550 [ 59.656136][ T3675] ref_tracker_alloc+0x14c/0x550 [ 59.661068][ T3675] ? ref_tracker_free+0x6b0/0x6b0 [ 59.666081][ T3675] ? lock_release+0x720/0x720 [ 59.670752][ T3675] ? do_raw_spin_lock+0x120/0x2a0 [ 59.675855][ T3675] ? rwlock_bug.part.0+0x90/0x90 [ 59.680783][ T3675] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 59.686150][ T3675] linkwatch_fire_event+0x202/0x260 [ 59.691350][ T3675] netif_carrier_off+0x96/0xb0 [ 59.696105][ T3675] __tun_detach+0xfe7/0x13e0 [ 59.700782][ T3675] tun_chr_close+0xc4/0x180 [ 59.705284][ T3675] __fput+0x277/0x9d0 [ 59.709263][ T3675] ? __tun_detach+0x13e0/0x13e0 [ 59.714203][ T3675] task_work_run+0xdd/0x1a0 [ 59.718705][ T3675] ptrace_notify+0x114/0x140 [ 59.723287][ T3675] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 59.729522][ T3675] syscall_exit_to_user_mode+0x9/0x60 [ 59.734886][ T3675] do_syscall_64+0x42/0xb0 [ 59.739298][ T3675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.745189][ T3675] RIP: 0033:0x7fc6cd2767a3 [ 59.749599][ T3675] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 59.769292][ T3675] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 59.777721][ T3675] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 59.785687][ T3675] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 59.793645][ T3675] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 59.801605][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 59.809571][ T3675] R13: 00000000000f4240 R14: 000000000000e717 R15: 00007ffdc49a5924 [ 59.817546][ T3675] [pid 3675] close(3) = 0 [pid 3675] close(4) = 0 [pid 3675] close(5) = -1 EBADF (Bad file descriptor) [pid 3675] close(6) = -1 EBADF (Bad file descriptor) [pid 3675] close(7) = -1 EBADF (Bad file descriptor) [pid 3675] close(8) = -1 EBADF (Bad file descriptor) [pid 3675] close(9) = -1 EBADF (Bad file descriptor) [pid 3675] close(10) = -1 EBADF (Bad file descriptor) [pid 3675] close(11) = -1 EBADF (Bad file descriptor) [pid 3675] close(12) = -1 EBADF (Bad file descriptor) [pid 3675] close(13) = -1 EBADF (Bad file descriptor) [pid 3675] close(14) = -1 EBADF (Bad file descriptor) [pid 3675] close(15) = -1 EBADF (Bad file descriptor) [pid 3675] close(16) = -1 EBADF (Bad file descriptor) [pid 3675] close(17) = -1 EBADF (Bad file descriptor) [pid 3675] close(18) = -1 EBADF (Bad file descriptor) [pid 3675] close(19) = -1 EBADF (Bad file descriptor) [pid 3675] close(20) = -1 EBADF (Bad file descriptor) [pid 3675] close(21) = -1 EBADF (Bad file descriptor) [pid 3675] close(22) = -1 EBADF (Bad file descriptor) [pid 3675] close(23) = -1 EBADF (Bad file descriptor) [pid 3675] close(24) = -1 EBADF (Bad file descriptor) [pid 3675] close(25) = -1 EBADF (Bad file descriptor) [pid 3675] close(26) = -1 EBADF (Bad file descriptor) [pid 3675] close(27) = -1 EBADF (Bad file descriptor) [pid 3675] close(28) = -1 EBADF (Bad file descriptor) [pid 3675] close(29) = -1 EBADF (Bad file descriptor) [pid 3675] exit_group(0) = ? [pid 3675] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 58 ./strace-static-x86_64: Process 3676 attached [pid 3676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3676] setpgid(0, 0) = 0 [pid 3676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3676] write(3, "1000", 4) = 4 [pid 3676] close(3) = 0 [pid 3676] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3676] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3676] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3676] write(4, "5", 1) = 1 [pid 3676] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 59.904324][ T3676] FAULT_INJECTION: forcing a failure. [ 59.904324][ T3676] name failslab, interval 1, probability 0, space 0, times 0 [ 59.916955][ T3676] CPU: 0 PID: 3676 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 59.927763][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.937806][ T3676] Call Trace: [ 59.941069][ T3676] [ 59.943994][ T3676] dump_stack_lvl+0xcd/0x134 [ 59.948583][ T3676] should_fail.cold+0x5/0xa [ 59.953081][ T3676] should_failslab+0x5/0x10 [ 59.957572][ T3676] kmem_cache_alloc_trace+0x60/0x3f0 [ 59.962859][ T3676] ? ref_tracker_alloc+0x14c/0x550 [ 59.968658][ T3676] ref_tracker_alloc+0x14c/0x550 [ 59.973582][ T3676] ? ref_tracker_free+0x6b0/0x6b0 [ 59.978588][ T3676] ? lock_release+0x720/0x720 [ 59.983342][ T3676] ? do_raw_spin_lock+0x120/0x2a0 [ 59.988351][ T3676] ? rwlock_bug.part.0+0x90/0x90 [ 59.993274][ T3676] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 59.998639][ T3676] linkwatch_fire_event+0x202/0x260 [ 60.003827][ T3676] netif_carrier_off+0x96/0xb0 [ 60.008582][ T3676] __tun_detach+0xfe7/0x13e0 [ 60.013185][ T3676] tun_chr_close+0xc4/0x180 [ 60.017845][ T3676] __fput+0x277/0x9d0 [ 60.021810][ T3676] ? __tun_detach+0x13e0/0x13e0 [ 60.026646][ T3676] task_work_run+0xdd/0x1a0 [ 60.031143][ T3676] ptrace_notify+0x114/0x140 [ 60.035716][ T3676] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.041941][ T3676] syscall_exit_to_user_mode+0x9/0x60 [ 60.047299][ T3676] do_syscall_64+0x42/0xb0 [ 60.051704][ T3676] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.057584][ T3676] RIP: 0033:0x7fc6cd2767a3 [ 60.062069][ T3676] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.081661][ T3676] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.090064][ T3676] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3676] close(3) = 0 [pid 3676] close(4) = 0 [pid 3676] close(5) = -1 EBADF (Bad file descriptor) [pid 3676] close(6) = -1 EBADF (Bad file descriptor) [pid 3676] close(7) = -1 EBADF (Bad file descriptor) [pid 3676] close(8) = -1 EBADF (Bad file descriptor) [pid 3676] close(9) = -1 EBADF (Bad file descriptor) [pid 3676] close(10) = -1 EBADF (Bad file descriptor) [pid 3676] close(11) = -1 EBADF (Bad file descriptor) [pid 3676] close(12) = -1 EBADF (Bad file descriptor) [pid 3676] close(13) = -1 EBADF (Bad file descriptor) [pid 3676] close(14) = -1 EBADF (Bad file descriptor) [pid 3676] close(15) = -1 EBADF (Bad file descriptor) [pid 3676] close(16) = -1 EBADF (Bad file descriptor) [pid 3676] close(17) = -1 EBADF (Bad file descriptor) [pid 3676] close(18) = -1 EBADF (Bad file descriptor) [pid 3676] close(19) = -1 EBADF (Bad file descriptor) [pid 3676] close(20) = -1 EBADF (Bad file descriptor) [pid 3676] close(21) = -1 EBADF (Bad file descriptor) [pid 3676] close(22) = -1 EBADF (Bad file descriptor) [pid 3676] close(23) = -1 EBADF (Bad file descriptor) [pid 3676] close(24) = -1 EBADF (Bad file descriptor) [pid 3676] close(25) = -1 EBADF (Bad file descriptor) [pid 3676] close(26) = -1 EBADF (Bad file descriptor) [pid 3676] close(27) = -1 EBADF (Bad file descriptor) [pid 3676] close(28) = -1 EBADF (Bad file descriptor) [pid 3676] close(29) = -1 EBADF (Bad file descriptor) [pid 3676] exit_group(0) = ? [pid 3676] +++ exited with 0 +++ [ 60.098110][ T3676] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.106073][ T3676] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.114062][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.122033][ T3676] R13: 00000000000f4240 R14: 000000000000e8ab R15: 00007ffdc49a5924 [ 60.130010][ T3676] [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3677 attached , child_tidptr=0x5555570bd5d0) = 59 [pid 3677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3677] setpgid(0, 0) = 0 [pid 3677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3677] write(3, "1000", 4) = 4 [pid 3677] close(3) = 0 [pid 3677] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3677] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3677] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3677] write(4, "5", 1) = 1 [pid 3677] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.201903][ T3677] FAULT_INJECTION: forcing a failure. [ 60.201903][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 60.214623][ T3677] CPU: 0 PID: 3677 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.224770][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.235029][ T3677] Call Trace: [ 60.238317][ T3677] [ 60.241490][ T3677] dump_stack_lvl+0xcd/0x134 [ 60.246083][ T3677] should_fail.cold+0x5/0xa [ 60.250624][ T3677] should_failslab+0x5/0x10 [ 60.255123][ T3677] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.260412][ T3677] ? ref_tracker_alloc+0x14c/0x550 [ 60.265537][ T3677] ref_tracker_alloc+0x14c/0x550 [ 60.270496][ T3677] ? ref_tracker_free+0x6b0/0x6b0 [ 60.275525][ T3677] ? lock_release+0x720/0x720 [ 60.280229][ T3677] ? do_raw_spin_lock+0x120/0x2a0 [ 60.285260][ T3677] ? rwlock_bug.part.0+0x90/0x90 [ 60.290223][ T3677] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.295606][ T3677] linkwatch_fire_event+0x202/0x260 [ 60.300821][ T3677] netif_carrier_off+0x96/0xb0 [ 60.305590][ T3677] __tun_detach+0xfe7/0x13e0 [ 60.310192][ T3677] tun_chr_close+0xc4/0x180 [ 60.314693][ T3677] __fput+0x277/0x9d0 [ 60.318670][ T3677] ? __tun_detach+0x13e0/0x13e0 [ 60.323517][ T3677] task_work_run+0xdd/0x1a0 [ 60.328243][ T3677] ptrace_notify+0x114/0x140 [ 60.332872][ T3677] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.339124][ T3677] syscall_exit_to_user_mode+0x9/0x60 [ 60.344502][ T3677] do_syscall_64+0x42/0xb0 [ 60.348935][ T3677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.354832][ T3677] RIP: 0033:0x7fc6cd2767a3 [ 60.359244][ T3677] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.378851][ T3677] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.387261][ T3677] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3677] close(3) = 0 [pid 3677] close(4) = 0 [pid 3677] close(5) = -1 EBADF (Bad file descriptor) [pid 3677] close(6) = -1 EBADF (Bad file descriptor) [pid 3677] close(7) = -1 EBADF (Bad file descriptor) [pid 3677] close(8) = -1 EBADF (Bad file descriptor) [pid 3677] close(9) = -1 EBADF (Bad file descriptor) [pid 3677] close(10) = -1 EBADF (Bad file descriptor) [pid 3677] close(11) = -1 EBADF (Bad file descriptor) [pid 3677] close(12) = -1 EBADF (Bad file descriptor) [pid 3677] close(13) = -1 EBADF (Bad file descriptor) [pid 3677] close(14) = -1 EBADF (Bad file descriptor) [pid 3677] close(15) = -1 EBADF (Bad file descriptor) [pid 3677] close(16) = -1 EBADF (Bad file descriptor) [ 60.395230][ T3677] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.403201][ T3677] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.411174][ T3677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.419160][ T3677] R13: 00000000000f4240 R14: 000000000000e9df R15: 00007ffdc49a5924 [ 60.427153][ T3677] [pid 3677] close(17) = -1 EBADF (Bad file descriptor) [pid 3677] close(18) = -1 EBADF (Bad file descriptor) [pid 3677] close(19) = -1 EBADF (Bad file descriptor) [pid 3677] close(20) = -1 EBADF (Bad file descriptor) [pid 3677] close(21) = -1 EBADF (Bad file descriptor) [pid 3677] close(22) = -1 EBADF (Bad file descriptor) [pid 3677] close(23) = -1 EBADF (Bad file descriptor) [pid 3677] close(24) = -1 EBADF (Bad file descriptor) [pid 3677] close(25) = -1 EBADF (Bad file descriptor) [pid 3677] close(26) = -1 EBADF (Bad file descriptor) [pid 3677] close(27) = -1 EBADF (Bad file descriptor) [pid 3677] close(28) = -1 EBADF (Bad file descriptor) [pid 3677] close(29) = -1 EBADF (Bad file descriptor) [pid 3677] exit_group(0) = ? [pid 3677] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 60 ./strace-static-x86_64: Process 3678 attached [pid 3678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3678] setpgid(0, 0) = 0 [pid 3678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3678] write(3, "1000", 4) = 4 [pid 3678] close(3) = 0 [pid 3678] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3678] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3678] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3678] write(4, "5", 1) = 1 [pid 3678] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.508280][ T3678] FAULT_INJECTION: forcing a failure. [ 60.508280][ T3678] name failslab, interval 1, probability 0, space 0, times 0 [ 60.523199][ T3678] CPU: 0 PID: 3678 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.533551][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.543711][ T3678] Call Trace: [ 60.546989][ T3678] [ 60.549925][ T3678] dump_stack_lvl+0xcd/0x134 [ 60.554530][ T3678] should_fail.cold+0x5/0xa [ 60.559041][ T3678] should_failslab+0x5/0x10 [ 60.563541][ T3678] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.568820][ T3678] ? ref_tracker_alloc+0x14c/0x550 [ 60.573944][ T3678] ref_tracker_alloc+0x14c/0x550 [ 60.578893][ T3678] ? ref_tracker_free+0x6b0/0x6b0 [ 60.583928][ T3678] ? lock_release+0x720/0x720 [ 60.588619][ T3678] ? do_raw_spin_lock+0x120/0x2a0 [ 60.593673][ T3678] ? rwlock_bug.part.0+0x90/0x90 [ 60.598657][ T3678] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.604039][ T3678] linkwatch_fire_event+0x202/0x260 [ 60.609267][ T3678] netif_carrier_off+0x96/0xb0 [ 60.614058][ T3678] __tun_detach+0xfe7/0x13e0 [ 60.618662][ T3678] tun_chr_close+0xc4/0x180 [ 60.623172][ T3678] __fput+0x277/0x9d0 [ 60.627160][ T3678] ? __tun_detach+0x13e0/0x13e0 [ 60.632021][ T3678] task_work_run+0xdd/0x1a0 [ 60.636541][ T3678] ptrace_notify+0x114/0x140 [ 60.641160][ T3678] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.647415][ T3678] syscall_exit_to_user_mode+0x9/0x60 [ 60.652795][ T3678] do_syscall_64+0x42/0xb0 [ 60.657405][ T3678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.663325][ T3678] RIP: 0033:0x7fc6cd2767a3 [ 60.667739][ T3678] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.687531][ T3678] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.696493][ T3678] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3678] close(3) = 0 [pid 3678] close(4) = 0 [pid 3678] close(5) = -1 EBADF (Bad file descriptor) [pid 3678] close(6) = -1 EBADF (Bad file descriptor) [pid 3678] close(7) = -1 EBADF (Bad file descriptor) [pid 3678] close(8) = -1 EBADF (Bad file descriptor) [pid 3678] close(9) = -1 EBADF (Bad file descriptor) [pid 3678] close(10) = -1 EBADF (Bad file descriptor) [pid 3678] close(11) = -1 EBADF (Bad file descriptor) [pid 3678] close(12) = -1 EBADF (Bad file descriptor) [pid 3678] close(13) = -1 EBADF (Bad file descriptor) [pid 3678] close(14) = -1 EBADF (Bad file descriptor) [pid 3678] close(15) = -1 EBADF (Bad file descriptor) [pid 3678] close(16) = -1 EBADF (Bad file descriptor) [pid 3678] close(17) = -1 EBADF (Bad file descriptor) [pid 3678] close(18) = -1 EBADF (Bad file descriptor) [pid 3678] close(19) = -1 EBADF (Bad file descriptor) [pid 3678] close(20) = -1 EBADF (Bad file descriptor) [pid 3678] close(21) = -1 EBADF (Bad file descriptor) [pid 3678] close(22) = -1 EBADF (Bad file descriptor) [pid 3678] close(23) = -1 EBADF (Bad file descriptor) [pid 3678] close(24) = -1 EBADF (Bad file descriptor) [pid 3678] close(25) = -1 EBADF (Bad file descriptor) [pid 3678] close(26) = -1 EBADF (Bad file descriptor) [pid 3678] close(27) = -1 EBADF (Bad file descriptor) [pid 3678] close(28) = -1 EBADF (Bad file descriptor) [ 60.704645][ T3678] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 60.712613][ T3678] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 60.720667][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.728633][ T3678] R13: 00000000000f4240 R14: 000000000000eb0d R15: 00007ffdc49a5924 [ 60.736700][ T3678] [pid 3678] close(29) = -1 EBADF (Bad file descriptor) [pid 3678] exit_group(0) = ? [pid 3678] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=25} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 61 ./strace-static-x86_64: Process 3679 attached [pid 3679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3679] setpgid(0, 0) = 0 [pid 3679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3679] write(3, "1000", 4) = 4 [pid 3679] close(3) = 0 [pid 3679] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3679] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3679] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3679] write(4, "5", 1) = 1 [pid 3679] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 60.798919][ T3679] FAULT_INJECTION: forcing a failure. [ 60.798919][ T3679] name failslab, interval 1, probability 0, space 0, times 0 [ 60.812108][ T3679] CPU: 0 PID: 3679 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 60.822558][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.832606][ T3679] Call Trace: [ 60.835984][ T3679] [ 60.838902][ T3679] dump_stack_lvl+0xcd/0x134 [ 60.843504][ T3679] should_fail.cold+0x5/0xa [ 60.848000][ T3679] should_failslab+0x5/0x10 [ 60.852500][ T3679] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.857775][ T3679] ? ref_tracker_alloc+0x14c/0x550 [ 60.862976][ T3679] ref_tracker_alloc+0x14c/0x550 [ 60.867901][ T3679] ? ref_tracker_free+0x6b0/0x6b0 [ 60.872998][ T3679] ? lock_release+0x720/0x720 [ 60.877666][ T3679] ? do_raw_spin_lock+0x120/0x2a0 [ 60.882684][ T3679] ? rwlock_bug.part.0+0x90/0x90 [ 60.887611][ T3679] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 60.892995][ T3679] linkwatch_fire_event+0x202/0x260 [ 60.898186][ T3679] netif_carrier_off+0x96/0xb0 [ 60.903024][ T3679] __tun_detach+0xfe7/0x13e0 [ 60.907614][ T3679] tun_chr_close+0xc4/0x180 [ 60.912112][ T3679] __fput+0x277/0x9d0 [ 60.916079][ T3679] ? __tun_detach+0x13e0/0x13e0 [ 60.920921][ T3679] task_work_run+0xdd/0x1a0 [ 60.925439][ T3679] ptrace_notify+0x114/0x140 [ 60.930280][ T3679] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 60.936510][ T3679] syscall_exit_to_user_mode+0x9/0x60 [ 60.941867][ T3679] do_syscall_64+0x42/0xb0 [ 60.946274][ T3679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.952155][ T3679] RIP: 0033:0x7fc6cd2767a3 [ 60.956556][ T3679] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 60.976429][ T3679] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.984833][ T3679] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3679] close(3) = 0 [pid 3679] close(4) = 0 [pid 3679] close(5) = -1 EBADF (Bad file descriptor) [pid 3679] close(6) = -1 EBADF (Bad file descriptor) [pid 3679] close(7) = -1 EBADF (Bad file descriptor) [pid 3679] close(8) = -1 EBADF (Bad file descriptor) [pid 3679] close(9) = -1 EBADF (Bad file descriptor) [pid 3679] close(10) = -1 EBADF (Bad file descriptor) [pid 3679] close(11) = -1 EBADF (Bad file descriptor) [pid 3679] close(12) = -1 EBADF (Bad file descriptor) [pid 3679] close(13) = -1 EBADF (Bad file descriptor) [pid 3679] close(14) = -1 EBADF (Bad file descriptor) [pid 3679] close(15) = -1 EBADF (Bad file descriptor) [pid 3679] close(16) = -1 EBADF (Bad file descriptor) [pid 3679] close(17) = -1 EBADF (Bad file descriptor) [pid 3679] close(18) = -1 EBADF (Bad file descriptor) [pid 3679] close(19) = -1 EBADF (Bad file descriptor) [pid 3679] close(20) = -1 EBADF (Bad file descriptor) [pid 3679] close(21) = -1 EBADF (Bad file descriptor) [pid 3679] close(22) = -1 EBADF (Bad file descriptor) [pid 3679] close(23) = -1 EBADF (Bad file descriptor) [pid 3679] close(24) = -1 EBADF (Bad file descriptor) [pid 3679] close(25) = -1 EBADF (Bad file descriptor) [pid 3679] close(26) = -1 EBADF (Bad file descriptor) [ 60.992790][ T3679] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.000962][ T3679] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.009013][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.016978][ T3679] R13: 00000000000f4240 R14: 000000000000ec35 R15: 00007ffdc49a5924 [ 61.025212][ T3679] [pid 3679] close(27) = -1 EBADF (Bad file descriptor) [pid 3679] close(28) = -1 EBADF (Bad file descriptor) [pid 3679] close(29) = -1 EBADF (Bad file descriptor) [pid 3679] exit_group(0) = ? [pid 3679] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 62 ./strace-static-x86_64: Process 3680 attached [pid 3680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3680] setpgid(0, 0) = 0 [pid 3680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3680] write(3, "1000", 4) = 4 [pid 3680] close(3) = 0 [pid 3680] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3680] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3680] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3680] write(4, "5", 1) = 1 [ 61.094148][ T3680] FAULT_INJECTION: forcing a failure. [ 61.094148][ T3680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.107424][ T3680] CPU: 1 PID: 3680 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.117673][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.127727][ T3680] Call Trace: [ 61.130996][ T3680] [ 61.133914][ T3680] dump_stack_lvl+0xcd/0x134 [ 61.138511][ T3680] should_fail.cold+0x5/0xa [ 61.143260][ T3680] prepare_alloc_pages+0x17b/0x570 [ 61.148610][ T3680] __alloc_pages+0x12f/0x500 [ 61.153336][ T3680] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 61.160116][ T3680] ? ___slab_alloc+0x47e/0xf20 [ 61.164890][ T3680] alloc_pages+0x1aa/0x310 [ 61.169481][ T3680] ? mark_held_locks+0x9f/0xe0 [ 61.174256][ T3680] allocate_slab+0x26c/0x3c0 [ 61.178859][ T3680] ___slab_alloc+0x8df/0xf20 [ 61.183458][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.188426][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.193380][ T3680] __slab_alloc.constprop.0+0x4d/0xa0 [ 61.198758][ T3680] __kmalloc_node_track_caller+0x2cb/0x360 [ 61.204748][ T3680] ? __napi_alloc_skb+0x70/0x310 [ 61.209726][ T3680] __alloc_skb+0xde/0x340 [ 61.214068][ T3680] ? __lock_acquire+0xbca/0x56c0 [ 61.219033][ T3680] __napi_alloc_skb+0x70/0x310 [ 61.223809][ T3680] napi_get_frags+0x5e/0x140 [ 61.228413][ T3680] tun_get_user+0xa07/0x3b00 [ 61.233291][ T3680] ? tun_build_skb+0x1170/0x1170 [ 61.238237][ T3680] ? lock_downgrade+0x6e0/0x6e0 [ 61.243239][ T3680] ? find_held_lock+0x2d/0x110 [ 61.248102][ T3680] tun_chr_write_iter+0xdb/0x200 [ 61.253041][ T3680] do_iter_readv_writev+0x3d1/0x640 [ 61.258249][ T3680] ? new_sync_write+0x560/0x560 [ 61.263106][ T3680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 61.269691][ T3680] ? security_file_permission+0xab/0xd0 [ 61.275252][ T3680] do_iter_write+0x182/0x700 [ 61.279870][ T3680] ? import_iovec+0x10c/0x150 [ 61.284549][ T3680] vfs_writev+0x1aa/0x630 [ 61.288887][ T3680] ? vfs_iter_write+0xa0/0xa0 [ 61.293567][ T3680] ? do_raw_spin_lock+0x120/0x2a0 [ 61.298594][ T3680] ? rwlock_bug.part.0+0x90/0x90 [ 61.303564][ T3680] ? _raw_spin_lock_irq+0x41/0x50 [ 61.308600][ T3680] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 61.314861][ T3680] ? find_held_lock+0x2d/0x110 [ 61.319630][ T3680] ? ptrace_notify+0xfa/0x140 [ 61.324336][ T3680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 61.330577][ T3680] ? __fget_light+0x20f/0x270 [ 61.335258][ T3680] do_writev+0x133/0x2f0 [ 61.339501][ T3680] ? vfs_writev+0x630/0x630 [ 61.344090][ T3680] ? lockdep_hardirqs_on+0x79/0x100 [ 61.349297][ T3680] ? _raw_spin_unlock_irq+0x2a/0x40 [ 61.354496][ T3680] ? ptrace_notify+0xfa/0x140 [ 61.359179][ T3680] do_syscall_64+0x35/0xb0 [ 61.363601][ T3680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.369519][ T3680] RIP: 0033:0x7fc6cd2b4c39 [ 61.373931][ T3680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3680] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.393773][ T3680] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.402181][ T3680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 61.410150][ T3680] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.418111][ T3680] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.426076][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.434041][ T3680] R13: 00000000000f4240 R14: 000000000000ed63 R15: 00007ffdc49a5924 [ 61.442016][ T3680] [pid 3680] close(3) = 0 [pid 3680] close(4) = 0 [pid 3680] close(5) = -1 EBADF (Bad file descriptor) [pid 3680] close(6) = -1 EBADF (Bad file descriptor) [pid 3680] close(7) = -1 EBADF (Bad file descriptor) [pid 3680] close(8) = -1 EBADF (Bad file descriptor) [pid 3680] close(9) = -1 EBADF (Bad file descriptor) [pid 3680] close(10) = -1 EBADF (Bad file descriptor) [pid 3680] close(11) = -1 EBADF (Bad file descriptor) [pid 3680] close(12) = -1 EBADF (Bad file descriptor) [pid 3680] close(13) = -1 EBADF (Bad file descriptor) [pid 3680] close(14) = -1 EBADF (Bad file descriptor) [pid 3680] close(15) = -1 EBADF (Bad file descriptor) [pid 3680] close(16) = -1 EBADF (Bad file descriptor) [pid 3680] close(17) = -1 EBADF (Bad file descriptor) [pid 3680] close(18) = -1 EBADF (Bad file descriptor) [pid 3680] close(19) = -1 EBADF (Bad file descriptor) [pid 3680] close(20) = -1 EBADF (Bad file descriptor) [pid 3680] close(21) = -1 EBADF (Bad file descriptor) [pid 3680] close(22) = -1 EBADF (Bad file descriptor) [pid 3680] close(23) = -1 EBADF (Bad file descriptor) [pid 3680] close(24) = -1 EBADF (Bad file descriptor) [pid 3680] close(25) = -1 EBADF (Bad file descriptor) [pid 3680] close(26) = -1 EBADF (Bad file descriptor) [pid 3680] close(27) = -1 EBADF (Bad file descriptor) [pid 3680] close(28) = -1 EBADF (Bad file descriptor) [pid 3680] close(29) = -1 EBADF (Bad file descriptor) [pid 3680] exit_group(0) = ? [pid 3680] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 63 ./strace-static-x86_64: Process 3681 attached [pid 3681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3681] setpgid(0, 0) = 0 [pid 3681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3681] write(3, "1000", 4) = 4 [pid 3681] close(3) = 0 [pid 3681] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3681] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3681] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3681] write(4, "5", 1) = 1 [pid 3681] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.514361][ T3681] FAULT_INJECTION: forcing a failure. [ 61.514361][ T3681] name failslab, interval 1, probability 0, space 0, times 0 [ 61.526973][ T3681] CPU: 1 PID: 3681 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.537104][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.547370][ T3681] Call Trace: [ 61.550812][ T3681] [ 61.553719][ T3681] dump_stack_lvl+0xcd/0x134 [ 61.558298][ T3681] should_fail.cold+0x5/0xa [ 61.562793][ T3681] should_failslab+0x5/0x10 [ 61.567280][ T3681] kmem_cache_alloc_trace+0x60/0x3f0 [ 61.572552][ T3681] ? ref_tracker_alloc+0x14c/0x550 [ 61.577651][ T3681] ref_tracker_alloc+0x14c/0x550 [ 61.582576][ T3681] ? ref_tracker_free+0x6b0/0x6b0 [ 61.587583][ T3681] ? lock_release+0x720/0x720 [ 61.592249][ T3681] ? do_raw_spin_lock+0x120/0x2a0 [ 61.597259][ T3681] ? rwlock_bug.part.0+0x90/0x90 [ 61.602184][ T3681] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 61.607547][ T3681] linkwatch_fire_event+0x202/0x260 [ 61.612738][ T3681] netif_carrier_off+0x96/0xb0 [ 61.617487][ T3681] __tun_detach+0xfe7/0x13e0 [ 61.622070][ T3681] tun_chr_close+0xc4/0x180 [ 61.626559][ T3681] __fput+0x277/0x9d0 [ 61.630528][ T3681] ? __tun_detach+0x13e0/0x13e0 [ 61.635366][ T3681] task_work_run+0xdd/0x1a0 [ 61.639860][ T3681] ptrace_notify+0x114/0x140 [ 61.644436][ T3681] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 61.650668][ T3681] syscall_exit_to_user_mode+0x9/0x60 [ 61.656027][ T3681] do_syscall_64+0x42/0xb0 [ 61.660445][ T3681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.666324][ T3681] RIP: 0033:0x7fc6cd2767a3 [ 61.670729][ T3681] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 61.690322][ T3681] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 61.698732][ T3681] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 61.706686][ T3681] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 61.714641][ T3681] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 61.722591][ T3681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 61.730544][ T3681] R13: 00000000000f4240 R14: 000000000000ee88 R15: 00007ffdc49a5924 [ 61.738691][ T3681] [pid 3681] close(3) = 0 [pid 3681] close(4) = 0 [pid 3681] close(5) = -1 EBADF (Bad file descriptor) [pid 3681] close(6) = -1 EBADF (Bad file descriptor) [pid 3681] close(7) = -1 EBADF (Bad file descriptor) [pid 3681] close(8) = -1 EBADF (Bad file descriptor) [pid 3681] close(9) = -1 EBADF (Bad file descriptor) [pid 3681] close(10) = -1 EBADF (Bad file descriptor) [pid 3681] close(11) = -1 EBADF (Bad file descriptor) [pid 3681] close(12) = -1 EBADF (Bad file descriptor) [pid 3681] close(13) = -1 EBADF (Bad file descriptor) [pid 3681] close(14) = -1 EBADF (Bad file descriptor) [pid 3681] close(15) = -1 EBADF (Bad file descriptor) [pid 3681] close(16) = -1 EBADF (Bad file descriptor) [pid 3681] close(17) = -1 EBADF (Bad file descriptor) [pid 3681] close(18) = -1 EBADF (Bad file descriptor) [pid 3681] close(19) = -1 EBADF (Bad file descriptor) [pid 3681] close(20) = -1 EBADF (Bad file descriptor) [pid 3681] close(21) = -1 EBADF (Bad file descriptor) [pid 3681] close(22) = -1 EBADF (Bad file descriptor) [pid 3681] close(23) = -1 EBADF (Bad file descriptor) [pid 3681] close(24) = -1 EBADF (Bad file descriptor) [pid 3681] close(25) = -1 EBADF (Bad file descriptor) [pid 3681] close(26) = -1 EBADF (Bad file descriptor) [pid 3681] close(27) = -1 EBADF (Bad file descriptor) [pid 3681] close(28) = -1 EBADF (Bad file descriptor) [pid 3681] close(29) = -1 EBADF (Bad file descriptor) [pid 3681] exit_group(0) = ? [pid 3681] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3682 attached , child_tidptr=0x5555570bd5d0) = 64 [pid 3682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3682] setpgid(0, 0) = 0 [pid 3682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3682] write(3, "1000", 4) = 4 [pid 3682] close(3) = 0 [pid 3682] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3682] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3682] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3682] write(4, "5", 1) = 1 [pid 3682] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 61.826608][ T3682] FAULT_INJECTION: forcing a failure. [ 61.826608][ T3682] name failslab, interval 1, probability 0, space 0, times 0 [ 61.839443][ T3682] CPU: 0 PID: 3682 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 61.849572][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.859602][ T3682] Call Trace: [ 61.863122][ T3682] [ 61.866033][ T3682] dump_stack_lvl+0xcd/0x134 [ 61.870612][ T3682] should_fail.cold+0x5/0xa [ 61.875094][ T3682] should_failslab+0x5/0x10 [ 61.879592][ T3682] kmem_cache_alloc_trace+0x60/0x3f0 [ 61.884855][ T3682] ? ref_tracker_alloc+0x14c/0x550 [ 61.889960][ T3682] ref_tracker_alloc+0x14c/0x550 [ 61.894873][ T3682] ? ref_tracker_free+0x6b0/0x6b0 [ 61.899873][ T3682] ? lock_release+0x720/0x720 [ 61.904530][ T3682] ? do_raw_spin_lock+0x120/0x2a0 [ 61.909532][ T3682] ? rwlock_bug.part.0+0x90/0x90 [ 61.914448][ T3682] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 61.919801][ T3682] linkwatch_fire_event+0x202/0x260 [ 61.924981][ T3682] netif_carrier_off+0x96/0xb0 [ 61.929724][ T3682] __tun_detach+0xfe7/0x13e0 [ 61.934300][ T3682] tun_chr_close+0xc4/0x180 [ 61.938782][ T3682] __fput+0x277/0x9d0 [ 61.942761][ T3682] ? __tun_detach+0x13e0/0x13e0 [ 61.947595][ T3682] task_work_run+0xdd/0x1a0 [ 61.952085][ T3682] ptrace_notify+0x114/0x140 [ 61.956667][ T3682] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 61.962888][ T3682] syscall_exit_to_user_mode+0x9/0x60 [ 61.968238][ T3682] do_syscall_64+0x42/0xb0 [ 61.972637][ T3682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.978508][ T3682] RIP: 0033:0x7fc6cd2767a3 [ 61.982904][ T3682] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.002487][ T3682] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.010875][ T3682] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.018824][ T3682] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3682] close(3) = 0 [pid 3682] close(4) = 0 [pid 3682] close(5) = -1 EBADF (Bad file descriptor) [pid 3682] close(6) = -1 EBADF (Bad file descriptor) [pid 3682] close(7) = -1 EBADF (Bad file descriptor) [pid 3682] close(8) = -1 EBADF (Bad file descriptor) [pid 3682] close(9) = -1 EBADF (Bad file descriptor) [pid 3682] close(10) = -1 EBADF (Bad file descriptor) [pid 3682] close(11) = -1 EBADF (Bad file descriptor) [pid 3682] close(12) = -1 EBADF (Bad file descriptor) [pid 3682] close(13) = -1 EBADF (Bad file descriptor) [pid 3682] close(14) = -1 EBADF (Bad file descriptor) [pid 3682] close(15) = -1 EBADF (Bad file descriptor) [pid 3682] close(16) = -1 EBADF (Bad file descriptor) [pid 3682] close(17) = -1 EBADF (Bad file descriptor) [pid 3682] close(18) = -1 EBADF (Bad file descriptor) [pid 3682] close(19) = -1 EBADF (Bad file descriptor) [pid 3682] close(20) = -1 EBADF (Bad file descriptor) [pid 3682] close(21) = -1 EBADF (Bad file descriptor) [pid 3682] close(22) = -1 EBADF (Bad file descriptor) [pid 3682] close(23) = -1 EBADF (Bad file descriptor) [pid 3682] close(24) = -1 EBADF (Bad file descriptor) [pid 3682] close(25) = -1 EBADF (Bad file descriptor) [pid 3682] close(26) = -1 EBADF (Bad file descriptor) [pid 3682] close(27) = -1 EBADF (Bad file descriptor) [pid 3682] close(28) = -1 EBADF (Bad file descriptor) [pid 3682] close(29) = -1 EBADF (Bad file descriptor) [pid 3682] exit_group(0) = ? [pid 3682] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 65 ./strace-static-x86_64: Process 3683 attached [pid 3683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3683] setpgid(0, 0) = 0 [pid 3683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3683] write(3, "1000", 4) = 4 [pid 3683] close(3) = 0 [pid 3683] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3683] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3683] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 62.026773][ T3682] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.034725][ T3682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.042686][ T3682] R13: 00000000000f4240 R14: 000000000000f02c R15: 00007ffdc49a5924 [ 62.050655][ T3682] [pid 3683] write(4, "5", 1) = 1 [pid 3683] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.109550][ T3683] FAULT_INJECTION: forcing a failure. [ 62.109550][ T3683] name failslab, interval 1, probability 0, space 0, times 0 [ 62.122249][ T3683] CPU: 0 PID: 3683 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.132480][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.142544][ T3683] Call Trace: [ 62.145821][ T3683] [ 62.148733][ T3683] dump_stack_lvl+0xcd/0x134 [ 62.153312][ T3683] should_fail.cold+0x5/0xa [ 62.157797][ T3683] should_failslab+0x5/0x10 [ 62.162281][ T3683] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.167548][ T3683] ? ref_tracker_alloc+0x14c/0x550 [ 62.172654][ T3683] ref_tracker_alloc+0x14c/0x550 [ 62.177583][ T3683] ? ref_tracker_free+0x6b0/0x6b0 [ 62.182595][ T3683] ? lock_release+0x720/0x720 [ 62.187260][ T3683] ? do_raw_spin_lock+0x120/0x2a0 [ 62.192276][ T3683] ? rwlock_bug.part.0+0x90/0x90 [ 62.197205][ T3683] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.202576][ T3683] linkwatch_fire_event+0x202/0x260 [ 62.207776][ T3683] netif_carrier_off+0x96/0xb0 [ 62.212532][ T3683] __tun_detach+0xfe7/0x13e0 [ 62.217128][ T3683] tun_chr_close+0xc4/0x180 [ 62.221718][ T3683] __fput+0x277/0x9d0 [ 62.225688][ T3683] ? __tun_detach+0x13e0/0x13e0 [ 62.230544][ T3683] task_work_run+0xdd/0x1a0 [ 62.235044][ T3683] ptrace_notify+0x114/0x140 [ 62.239630][ T3683] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.245869][ T3683] syscall_exit_to_user_mode+0x9/0x60 [ 62.251357][ T3683] do_syscall_64+0x42/0xb0 [ 62.255770][ T3683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.261656][ T3683] RIP: 0033:0x7fc6cd2767a3 [ 62.266059][ T3683] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.285664][ T3683] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.294072][ T3683] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.302032][ T3683] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3683] close(3) = 0 [pid 3683] close(4) = 0 [pid 3683] close(5) = -1 EBADF (Bad file descriptor) [pid 3683] close(6) = -1 EBADF (Bad file descriptor) [pid 3683] close(7) = -1 EBADF (Bad file descriptor) [pid 3683] close(8) = -1 EBADF (Bad file descriptor) [pid 3683] close(9) = -1 EBADF (Bad file descriptor) [pid 3683] close(10) = -1 EBADF (Bad file descriptor) [pid 3683] close(11) = -1 EBADF (Bad file descriptor) [pid 3683] close(12) = -1 EBADF (Bad file descriptor) [pid 3683] close(13) = -1 EBADF (Bad file descriptor) [pid 3683] close(14) = -1 EBADF (Bad file descriptor) [pid 3683] close(15) = -1 EBADF (Bad file descriptor) [pid 3683] close(16) = -1 EBADF (Bad file descriptor) [pid 3683] close(17) = -1 EBADF (Bad file descriptor) [pid 3683] close(18) = -1 EBADF (Bad file descriptor) [pid 3683] close(19) = -1 EBADF (Bad file descriptor) [pid 3683] close(20) = -1 EBADF (Bad file descriptor) [pid 3683] close(21) = -1 EBADF (Bad file descriptor) [pid 3683] close(22) = -1 EBADF (Bad file descriptor) [pid 3683] close(23) = -1 EBADF (Bad file descriptor) [pid 3683] close(24) = -1 EBADF (Bad file descriptor) [pid 3683] close(25) = -1 EBADF (Bad file descriptor) [pid 3683] close(26) = -1 EBADF (Bad file descriptor) [pid 3683] close(27) = -1 EBADF (Bad file descriptor) [pid 3683] close(28) = -1 EBADF (Bad file descriptor) [pid 3683] close(29) = -1 EBADF (Bad file descriptor) [pid 3683] exit_group(0) = ? [pid 3683] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 66 ./strace-static-x86_64: Process 3684 attached [pid 3684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3684] setpgid(0, 0) = 0 [ 62.309993][ T3683] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.317957][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.325916][ T3683] R13: 00000000000f4240 R14: 000000000000f166 R15: 00007ffdc49a5924 [ 62.333888][ T3683] [pid 3684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3684] write(3, "1000", 4) = 4 [pid 3684] close(3) = 0 [pid 3684] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3684] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3684] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3684] write(4, "5", 1) = 1 [pid 3684] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.399448][ T3684] FAULT_INJECTION: forcing a failure. [ 62.399448][ T3684] name failslab, interval 1, probability 0, space 0, times 0 [ 62.412060][ T3684] CPU: 1 PID: 3684 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.422425][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.432663][ T3684] Call Trace: [ 62.435931][ T3684] [ 62.438841][ T3684] dump_stack_lvl+0xcd/0x134 [ 62.443506][ T3684] should_fail.cold+0x5/0xa [ 62.448000][ T3684] should_failslab+0x5/0x10 [ 62.452490][ T3684] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.457757][ T3684] ? ref_tracker_alloc+0x14c/0x550 [ 62.462853][ T3684] ref_tracker_alloc+0x14c/0x550 [ 62.467774][ T3684] ? ref_tracker_free+0x6b0/0x6b0 [ 62.472793][ T3684] ? lock_release+0x720/0x720 [ 62.477463][ T3684] ? do_raw_spin_lock+0x120/0x2a0 [ 62.482475][ T3684] ? rwlock_bug.part.0+0x90/0x90 [ 62.487399][ T3684] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.492853][ T3684] linkwatch_fire_event+0x202/0x260 [ 62.498055][ T3684] netif_carrier_off+0x96/0xb0 [ 62.502801][ T3684] __tun_detach+0xfe7/0x13e0 [ 62.507380][ T3684] tun_chr_close+0xc4/0x180 [ 62.511866][ T3684] __fput+0x277/0x9d0 [ 62.515829][ T3684] ? __tun_detach+0x13e0/0x13e0 [ 62.520660][ T3684] task_work_run+0xdd/0x1a0 [ 62.525144][ T3684] ptrace_notify+0x114/0x140 [ 62.529724][ T3684] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.535959][ T3684] syscall_exit_to_user_mode+0x9/0x60 [ 62.541330][ T3684] do_syscall_64+0x42/0xb0 [ 62.545917][ T3684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.551791][ T3684] RIP: 0033:0x7fc6cd2767a3 [ 62.556185][ T3684] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.575783][ T3684] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.584187][ T3684] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.592148][ T3684] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3684] close(3) = 0 [pid 3684] close(4) = 0 [pid 3684] close(5) = -1 EBADF (Bad file descriptor) [pid 3684] close(6) = -1 EBADF (Bad file descriptor) [pid 3684] close(7) = -1 EBADF (Bad file descriptor) [pid 3684] close(8) = -1 EBADF (Bad file descriptor) [pid 3684] close(9) = -1 EBADF (Bad file descriptor) [ 62.600118][ T3684] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.608077][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.616121][ T3684] R13: 00000000000f4240 R14: 000000000000f27e R15: 00007ffdc49a5924 [ 62.624084][ T3684] [pid 3684] close(10) = -1 EBADF (Bad file descriptor) [pid 3684] close(11) = -1 EBADF (Bad file descriptor) [pid 3684] close(12) = -1 EBADF (Bad file descriptor) [pid 3684] close(13) = -1 EBADF (Bad file descriptor) [pid 3684] close(14) = -1 EBADF (Bad file descriptor) [pid 3684] close(15) = -1 EBADF (Bad file descriptor) [pid 3684] close(16) = -1 EBADF (Bad file descriptor) [pid 3684] close(17) = -1 EBADF (Bad file descriptor) [pid 3684] close(18) = -1 EBADF (Bad file descriptor) [pid 3684] close(19) = -1 EBADF (Bad file descriptor) [pid 3684] close(20) = -1 EBADF (Bad file descriptor) [pid 3684] close(21) = -1 EBADF (Bad file descriptor) [pid 3684] close(22) = -1 EBADF (Bad file descriptor) [pid 3684] close(23) = -1 EBADF (Bad file descriptor) [pid 3684] close(24) = -1 EBADF (Bad file descriptor) [pid 3684] close(25) = -1 EBADF (Bad file descriptor) [pid 3684] close(26) = -1 EBADF (Bad file descriptor) [pid 3684] close(27) = -1 EBADF (Bad file descriptor) [pid 3684] close(28) = -1 EBADF (Bad file descriptor) [pid 3684] close(29) = -1 EBADF (Bad file descriptor) [pid 3684] exit_group(0) = ? [pid 3684] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 67 ./strace-static-x86_64: Process 3685 attached [pid 3685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3685] setpgid(0, 0) = 0 [pid 3685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3685] write(3, "1000", 4) = 4 [pid 3685] close(3) = 0 [pid 3685] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3685] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3685] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3685] write(4, "5", 1) = 1 [pid 3685] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.703820][ T3685] FAULT_INJECTION: forcing a failure. [ 62.703820][ T3685] name failslab, interval 1, probability 0, space 0, times 0 [ 62.716434][ T3685] CPU: 1 PID: 3685 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 62.726580][ T3685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.736628][ T3685] Call Trace: [ 62.739897][ T3685] [ 62.742812][ T3685] dump_stack_lvl+0xcd/0x134 [ 62.747403][ T3685] should_fail.cold+0x5/0xa [ 62.751906][ T3685] should_failslab+0x5/0x10 [ 62.756404][ T3685] kmem_cache_alloc_trace+0x60/0x3f0 [ 62.761684][ T3685] ? ref_tracker_alloc+0x14c/0x550 [ 62.766788][ T3685] ref_tracker_alloc+0x14c/0x550 [ 62.771718][ T3685] ? ref_tracker_free+0x6b0/0x6b0 [ 62.776733][ T3685] ? lock_release+0x720/0x720 [ 62.781405][ T3685] ? do_raw_spin_lock+0x120/0x2a0 [ 62.786420][ T3685] ? rwlock_bug.part.0+0x90/0x90 [ 62.791352][ T3685] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 62.796722][ T3685] linkwatch_fire_event+0x202/0x260 [ 62.801922][ T3685] netif_carrier_off+0x96/0xb0 [ 62.806679][ T3685] __tun_detach+0xfe7/0x13e0 [ 62.811272][ T3685] tun_chr_close+0xc4/0x180 [ 62.815765][ T3685] __fput+0x277/0x9d0 [ 62.819828][ T3685] ? __tun_detach+0x13e0/0x13e0 [ 62.824674][ T3685] task_work_run+0xdd/0x1a0 [ 62.829181][ T3685] ptrace_notify+0x114/0x140 [ 62.833771][ T3685] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 62.840014][ T3685] syscall_exit_to_user_mode+0x9/0x60 [ 62.845389][ T3685] do_syscall_64+0x42/0xb0 [ 62.849806][ T3685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.855710][ T3685] RIP: 0033:0x7fc6cd2767a3 [ 62.860119][ T3685] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 62.879723][ T3685] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.888135][ T3685] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 62.896097][ T3685] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3685] close(3) = 0 [pid 3685] close(4) = 0 [pid 3685] close(5) = -1 EBADF (Bad file descriptor) [pid 3685] close(6) = -1 EBADF (Bad file descriptor) [pid 3685] close(7) = -1 EBADF (Bad file descriptor) [pid 3685] close(8) = -1 EBADF (Bad file descriptor) [pid 3685] close(9) = -1 EBADF (Bad file descriptor) [pid 3685] close(10) = -1 EBADF (Bad file descriptor) [pid 3685] close(11) = -1 EBADF (Bad file descriptor) [pid 3685] close(12) = -1 EBADF (Bad file descriptor) [pid 3685] close(13) = -1 EBADF (Bad file descriptor) [pid 3685] close(14) = -1 EBADF (Bad file descriptor) [pid 3685] close(15) = -1 EBADF (Bad file descriptor) [pid 3685] close(16) = -1 EBADF (Bad file descriptor) [pid 3685] close(17) = -1 EBADF (Bad file descriptor) [pid 3685] close(18) = -1 EBADF (Bad file descriptor) [pid 3685] close(19) = -1 EBADF (Bad file descriptor) [pid 3685] close(20) = -1 EBADF (Bad file descriptor) [pid 3685] close(21) = -1 EBADF (Bad file descriptor) [pid 3685] close(22) = -1 EBADF (Bad file descriptor) [pid 3685] close(23) = -1 EBADF (Bad file descriptor) [pid 3685] close(24) = -1 EBADF (Bad file descriptor) [pid 3685] close(25) = -1 EBADF (Bad file descriptor) [pid 3685] close(26) = -1 EBADF (Bad file descriptor) [pid 3685] close(27) = -1 EBADF (Bad file descriptor) [pid 3685] close(28) = -1 EBADF (Bad file descriptor) [pid 3685] close(29) = -1 EBADF (Bad file descriptor) [pid 3685] exit_group(0) = ? [pid 3685] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 68 ./strace-static-x86_64: Process 3686 attached [pid 3686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3686] setpgid(0, 0) = 0 [pid 3686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3686] write(3, "1000", 4) = 4 [pid 3686] close(3) = 0 [pid 3686] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3686] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3686] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 62.904054][ T3685] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 62.912017][ T3685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 62.919982][ T3685] R13: 00000000000f4240 R14: 000000000000f3a0 R15: 00007ffdc49a5924 [ 62.928051][ T3685] [pid 3686] write(4, "5", 1) = 1 [pid 3686] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 62.986987][ T3686] FAULT_INJECTION: forcing a failure. [ 62.986987][ T3686] name failslab, interval 1, probability 0, space 0, times 0 [ 62.999906][ T3686] CPU: 1 PID: 3686 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.010158][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.020222][ T3686] Call Trace: [ 63.023501][ T3686] [ 63.026434][ T3686] dump_stack_lvl+0xcd/0x134 [ 63.031061][ T3686] should_fail.cold+0x5/0xa [ 63.035570][ T3686] should_failslab+0x5/0x10 [ 63.040090][ T3686] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.045376][ T3686] ? ref_tracker_alloc+0x14c/0x550 [ 63.050495][ T3686] ref_tracker_alloc+0x14c/0x550 [ 63.055464][ T3686] ? ref_tracker_free+0x6b0/0x6b0 [ 63.060512][ T3686] ? lock_release+0x720/0x720 [ 63.065192][ T3686] ? do_raw_spin_lock+0x120/0x2a0 [ 63.070221][ T3686] ? rwlock_bug.part.0+0x90/0x90 [ 63.075163][ T3686] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.080569][ T3686] linkwatch_fire_event+0x202/0x260 [ 63.085778][ T3686] netif_carrier_off+0x96/0xb0 [ 63.090534][ T3686] __tun_detach+0xfe7/0x13e0 [ 63.095121][ T3686] tun_chr_close+0xc4/0x180 [ 63.099620][ T3686] __fput+0x277/0x9d0 [ 63.103596][ T3686] ? __tun_detach+0x13e0/0x13e0 [ 63.108442][ T3686] task_work_run+0xdd/0x1a0 [ 63.112947][ T3686] ptrace_notify+0x114/0x140 [ 63.117530][ T3686] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.123760][ T3686] syscall_exit_to_user_mode+0x9/0x60 [ 63.129126][ T3686] do_syscall_64+0x42/0xb0 [ 63.133539][ T3686] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.139448][ T3686] RIP: 0033:0x7fc6cd2767a3 [ 63.143854][ T3686] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.163456][ T3686] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.171885][ T3686] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 63.179866][ T3686] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3686] close(3) = 0 [pid 3686] close(4) = 0 [pid 3686] close(5) = -1 EBADF (Bad file descriptor) [pid 3686] close(6) = -1 EBADF (Bad file descriptor) [pid 3686] close(7) = -1 EBADF (Bad file descriptor) [pid 3686] close(8) = -1 EBADF (Bad file descriptor) [pid 3686] close(9) = -1 EBADF (Bad file descriptor) [pid 3686] close(10) = -1 EBADF (Bad file descriptor) [pid 3686] close(11) = -1 EBADF (Bad file descriptor) [pid 3686] close(12) = -1 EBADF (Bad file descriptor) [pid 3686] close(13) = -1 EBADF (Bad file descriptor) [pid 3686] close(14) = -1 EBADF (Bad file descriptor) [pid 3686] close(15) = -1 EBADF (Bad file descriptor) [pid 3686] close(16) = -1 EBADF (Bad file descriptor) [pid 3686] close(17) = -1 EBADF (Bad file descriptor) [pid 3686] close(18) = -1 EBADF (Bad file descriptor) [ 63.187829][ T3686] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.195870][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.203823][ T3686] R13: 00000000000f4240 R14: 000000000000f4cf R15: 00007ffdc49a5924 [ 63.211793][ T3686] [pid 3686] close(19) = -1 EBADF (Bad file descriptor) [pid 3686] close(20) = -1 EBADF (Bad file descriptor) [pid 3686] close(21) = -1 EBADF (Bad file descriptor) [pid 3686] close(22) = -1 EBADF (Bad file descriptor) [pid 3686] close(23) = -1 EBADF (Bad file descriptor) [pid 3686] close(24) = -1 EBADF (Bad file descriptor) [pid 3686] close(25) = -1 EBADF (Bad file descriptor) [pid 3686] close(26) = -1 EBADF (Bad file descriptor) [pid 3686] close(27) = -1 EBADF (Bad file descriptor) [pid 3686] close(28) = -1 EBADF (Bad file descriptor) [pid 3686] close(29) = -1 EBADF (Bad file descriptor) [pid 3686] exit_group(0) = ? [pid 3686] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 69 ./strace-static-x86_64: Process 3687 attached [pid 3687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3687] setpgid(0, 0) = 0 [pid 3687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3687] write(3, "1000", 4) = 4 [pid 3687] close(3) = 0 [pid 3687] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3687] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3687] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3687] write(4, "5", 1) = 1 [pid 3687] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.282413][ T3687] FAULT_INJECTION: forcing a failure. [ 63.282413][ T3687] name failslab, interval 1, probability 0, space 0, times 0 [ 63.295446][ T3687] CPU: 0 PID: 3687 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.305593][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.315648][ T3687] Call Trace: [ 63.318908][ T3687] [ 63.321818][ T3687] dump_stack_lvl+0xcd/0x134 [ 63.326573][ T3687] should_fail.cold+0x5/0xa [ 63.331078][ T3687] should_failslab+0x5/0x10 [ 63.335575][ T3687] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.340845][ T3687] ? ref_tracker_alloc+0x14c/0x550 [ 63.345964][ T3687] ref_tracker_alloc+0x14c/0x550 [ 63.350889][ T3687] ? ref_tracker_free+0x6b0/0x6b0 [ 63.355917][ T3687] ? lock_release+0x720/0x720 [ 63.360598][ T3687] ? do_raw_spin_lock+0x120/0x2a0 [ 63.365610][ T3687] ? rwlock_bug.part.0+0x90/0x90 [ 63.370536][ T3687] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.376992][ T3687] linkwatch_fire_event+0x202/0x260 [ 63.382215][ T3687] netif_carrier_off+0x96/0xb0 [ 63.387060][ T3687] __tun_detach+0xfe7/0x13e0 [ 63.391646][ T3687] tun_chr_close+0xc4/0x180 [ 63.396154][ T3687] __fput+0x277/0x9d0 [ 63.400124][ T3687] ? __tun_detach+0x13e0/0x13e0 [ 63.404966][ T3687] task_work_run+0xdd/0x1a0 [ 63.409477][ T3687] ptrace_notify+0x114/0x140 [ 63.414079][ T3687] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.420328][ T3687] syscall_exit_to_user_mode+0x9/0x60 [ 63.425692][ T3687] do_syscall_64+0x42/0xb0 [ 63.430112][ T3687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.436109][ T3687] RIP: 0033:0x7fc6cd2767a3 [ 63.440599][ T3687] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.460196][ T3687] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.468618][ T3687] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3687] close(3) = 0 [pid 3687] close(4) = 0 [pid 3687] close(5) = -1 EBADF (Bad file descriptor) [pid 3687] close(6) = -1 EBADF (Bad file descriptor) [pid 3687] close(7) = -1 EBADF (Bad file descriptor) [pid 3687] close(8) = -1 EBADF (Bad file descriptor) [pid 3687] close(9) = -1 EBADF (Bad file descriptor) [pid 3687] close(10) = -1 EBADF (Bad file descriptor) [pid 3687] close(11) = -1 EBADF (Bad file descriptor) [pid 3687] close(12) = -1 EBADF (Bad file descriptor) [pid 3687] close(13) = -1 EBADF (Bad file descriptor) [pid 3687] close(14) = -1 EBADF (Bad file descriptor) [pid 3687] close(15) = -1 EBADF (Bad file descriptor) [pid 3687] close(16) = -1 EBADF (Bad file descriptor) [pid 3687] close(17) = -1 EBADF (Bad file descriptor) [pid 3687] close(18) = -1 EBADF (Bad file descriptor) [pid 3687] close(19) = -1 EBADF (Bad file descriptor) [pid 3687] close(20) = -1 EBADF (Bad file descriptor) [pid 3687] close(21) = -1 EBADF (Bad file descriptor) [pid 3687] close(22) = -1 EBADF (Bad file descriptor) [pid 3687] close(23) = -1 EBADF (Bad file descriptor) [pid 3687] close(24) = -1 EBADF (Bad file descriptor) [pid 3687] close(25) = -1 EBADF (Bad file descriptor) [pid 3687] close(26) = -1 EBADF (Bad file descriptor) [pid 3687] close(27) = -1 EBADF (Bad file descriptor) [pid 3687] close(28) = -1 EBADF (Bad file descriptor) [pid 3687] close(29) = -1 EBADF (Bad file descriptor) [pid 3687] exit_group(0) = ? [pid 3687] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 70 ./strace-static-x86_64: Process 3688 attached [ 63.476763][ T3687] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 63.484719][ T3687] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.492689][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.500645][ T3687] R13: 00000000000f4240 R14: 000000000000f5ec R15: 00007ffdc49a5924 [ 63.508718][ T3687] [pid 3688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3688] setpgid(0, 0) = 0 [pid 3688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3688] write(3, "1000", 4) = 4 [pid 3688] close(3) = 0 [pid 3688] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3688] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3688] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3688] write(4, "5", 1) = 1 [pid 3688] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.571729][ T3688] FAULT_INJECTION: forcing a failure. [ 63.571729][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 63.584764][ T3688] CPU: 0 PID: 3688 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.594904][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.604965][ T3688] Call Trace: [ 63.608228][ T3688] [ 63.611136][ T3688] dump_stack_lvl+0xcd/0x134 [ 63.615730][ T3688] should_fail.cold+0x5/0xa [ 63.620217][ T3688] should_failslab+0x5/0x10 [ 63.624698][ T3688] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.629975][ T3688] ? ref_tracker_alloc+0x14c/0x550 [ 63.635255][ T3688] ref_tracker_alloc+0x14c/0x550 [ 63.640199][ T3688] ? ref_tracker_free+0x6b0/0x6b0 [ 63.645212][ T3688] ? lock_release+0x720/0x720 [ 63.649878][ T3688] ? do_raw_spin_lock+0x120/0x2a0 [ 63.654903][ T3688] ? rwlock_bug.part.0+0x90/0x90 [ 63.659837][ T3688] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.665225][ T3688] linkwatch_fire_event+0x202/0x260 [ 63.670418][ T3688] netif_carrier_off+0x96/0xb0 [ 63.675173][ T3688] __tun_detach+0xfe7/0x13e0 [ 63.679941][ T3688] tun_chr_close+0xc4/0x180 [ 63.684547][ T3688] __fput+0x277/0x9d0 [ 63.688515][ T3688] ? __tun_detach+0x13e0/0x13e0 [ 63.693354][ T3688] task_work_run+0xdd/0x1a0 [ 63.697934][ T3688] ptrace_notify+0x114/0x140 [ 63.702518][ T3688] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.708769][ T3688] syscall_exit_to_user_mode+0x9/0x60 [ 63.714142][ T3688] do_syscall_64+0x42/0xb0 [ 63.718547][ T3688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.724429][ T3688] RIP: 0033:0x7fc6cd2767a3 [ 63.728833][ T3688] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 63.748429][ T3688] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.756831][ T3688] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3688] close(3) = 0 [pid 3688] close(4) = 0 [pid 3688] close(5) = -1 EBADF (Bad file descriptor) [pid 3688] close(6) = -1 EBADF (Bad file descriptor) [pid 3688] close(7) = -1 EBADF (Bad file descriptor) [pid 3688] close(8) = -1 EBADF (Bad file descriptor) [pid 3688] close(9) = -1 EBADF (Bad file descriptor) [pid 3688] close(10) = -1 EBADF (Bad file descriptor) [pid 3688] close(11) = -1 EBADF (Bad file descriptor) [pid 3688] close(12) = -1 EBADF (Bad file descriptor) [pid 3688] close(13) = -1 EBADF (Bad file descriptor) [pid 3688] close(14) = -1 EBADF (Bad file descriptor) [pid 3688] close(15) = -1 EBADF (Bad file descriptor) [pid 3688] close(16) = -1 EBADF (Bad file descriptor) [pid 3688] close(17) = -1 EBADF (Bad file descriptor) [pid 3688] close(18) = -1 EBADF (Bad file descriptor) [pid 3688] close(19) = -1 EBADF (Bad file descriptor) [pid 3688] close(20) = -1 EBADF (Bad file descriptor) [pid 3688] close(21) = -1 EBADF (Bad file descriptor) [pid 3688] close(22) = -1 EBADF (Bad file descriptor) [pid 3688] close(23) = -1 EBADF (Bad file descriptor) [pid 3688] close(24) = -1 EBADF (Bad file descriptor) [pid 3688] close(25) = -1 EBADF (Bad file descriptor) [pid 3688] close(26) = -1 EBADF (Bad file descriptor) [pid 3688] close(27) = -1 EBADF (Bad file descriptor) [pid 3688] close(28) = -1 EBADF (Bad file descriptor) [pid 3688] close(29) = -1 EBADF (Bad file descriptor) [pid 3688] exit_group(0) = ? [pid 3688] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 71 ./strace-static-x86_64: Process 3689 attached [pid 3689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3689] setpgid(0, 0) = 0 [pid 3689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3689] write(3, "1000", 4) = 4 [pid 3689] close(3) = 0 [pid 3689] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 63.764787][ T3688] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 63.772918][ T3688] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 63.780882][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.788839][ T3688] R13: 00000000000f4240 R14: 000000000000f714 R15: 00007ffdc49a5924 [ 63.796809][ T3688] [pid 3689] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3689] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3689] write(4, "5", 1) = 1 [pid 3689] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 63.859752][ T3689] FAULT_INJECTION: forcing a failure. [ 63.859752][ T3689] name failslab, interval 1, probability 0, space 0, times 0 [ 63.872692][ T3689] CPU: 0 PID: 3689 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 63.882857][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.893011][ T3689] Call Trace: [ 63.896289][ T3689] [ 63.899220][ T3689] dump_stack_lvl+0xcd/0x134 [ 63.903825][ T3689] should_fail.cold+0x5/0xa [ 63.908346][ T3689] should_failslab+0x5/0x10 [ 63.912863][ T3689] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.918150][ T3689] ? ref_tracker_alloc+0x14c/0x550 [ 63.923268][ T3689] ref_tracker_alloc+0x14c/0x550 [ 63.928400][ T3689] ? ref_tracker_free+0x6b0/0x6b0 [ 63.933455][ T3689] ? lock_release+0x720/0x720 [ 63.938319][ T3689] ? do_raw_spin_lock+0x120/0x2a0 [ 63.943422][ T3689] ? rwlock_bug.part.0+0x90/0x90 [ 63.948395][ T3689] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.954500][ T3689] linkwatch_fire_event+0x202/0x260 [ 63.959801][ T3689] netif_carrier_off+0x96/0xb0 [ 63.964586][ T3689] __tun_detach+0xfe7/0x13e0 [ 63.969216][ T3689] tun_chr_close+0xc4/0x180 [ 63.973734][ T3689] __fput+0x277/0x9d0 [ 63.977762][ T3689] ? __tun_detach+0x13e0/0x13e0 [ 63.982734][ T3689] task_work_run+0xdd/0x1a0 [ 63.987263][ T3689] ptrace_notify+0x114/0x140 [ 63.992039][ T3689] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 63.998308][ T3689] syscall_exit_to_user_mode+0x9/0x60 [ 64.003691][ T3689] do_syscall_64+0x42/0xb0 [ 64.008131][ T3689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.014029][ T3689] RIP: 0033:0x7fc6cd2767a3 [ 64.018543][ T3689] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.038169][ T3689] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.046804][ T3689] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3689] close(3) = 0 [pid 3689] close(4) = 0 [pid 3689] close(5) = -1 EBADF (Bad file descriptor) [pid 3689] close(6) = -1 EBADF (Bad file descriptor) [pid 3689] close(7) = -1 EBADF (Bad file descriptor) [pid 3689] close(8) = -1 EBADF (Bad file descriptor) [pid 3689] close(9) = -1 EBADF (Bad file descriptor) [pid 3689] close(10) = -1 EBADF (Bad file descriptor) [pid 3689] close(11) = -1 EBADF (Bad file descriptor) [pid 3689] close(12) = -1 EBADF (Bad file descriptor) [pid 3689] close(13) = -1 EBADF (Bad file descriptor) [pid 3689] close(14) = -1 EBADF (Bad file descriptor) [pid 3689] close(15) = -1 EBADF (Bad file descriptor) [pid 3689] close(16) = -1 EBADF (Bad file descriptor) [pid 3689] close(17) = -1 EBADF (Bad file descriptor) [pid 3689] close(18) = -1 EBADF (Bad file descriptor) [pid 3689] close(19) = -1 EBADF (Bad file descriptor) [pid 3689] close(20) = -1 EBADF (Bad file descriptor) [pid 3689] close(21) = -1 EBADF (Bad file descriptor) [pid 3689] close(22) = -1 EBADF (Bad file descriptor) [pid 3689] close(23) = -1 EBADF (Bad file descriptor) [pid 3689] close(24) = -1 EBADF (Bad file descriptor) [pid 3689] close(25) = -1 EBADF (Bad file descriptor) [pid 3689] close(26) = -1 EBADF (Bad file descriptor) [pid 3689] close(27) = -1 EBADF (Bad file descriptor) [pid 3689] close(28) = -1 EBADF (Bad file descriptor) [pid 3689] close(29) = -1 EBADF (Bad file descriptor) [pid 3689] exit_group(0) = ? [pid 3689] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3690 attached , child_tidptr=0x5555570bd5d0) = 72 [pid 3690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3690] setpgid(0, 0) = 0 [pid 3690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3690] write(3, "1000", 4) = 4 [pid 3690] close(3) = 0 [pid 3690] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 64.054783][ T3689] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.062756][ T3689] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.070828][ T3689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.078797][ T3689] R13: 00000000000f4240 R14: 000000000000f83a R15: 00007ffdc49a5924 [ 64.086784][ T3689] [pid 3690] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3690] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3690] write(4, "5", 1) = 1 [pid 3690] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.144223][ T3690] FAULT_INJECTION: forcing a failure. [ 64.144223][ T3690] name failslab, interval 1, probability 0, space 0, times 0 [ 64.157297][ T3690] CPU: 1 PID: 3690 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.167769][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.177847][ T3690] Call Trace: [ 64.181136][ T3690] [ 64.184056][ T3690] dump_stack_lvl+0xcd/0x134 [ 64.188736][ T3690] should_fail.cold+0x5/0xa [ 64.193245][ T3690] should_failslab+0x5/0x10 [ 64.197743][ T3690] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.203025][ T3690] ? ref_tracker_alloc+0x14c/0x550 [ 64.208134][ T3690] ref_tracker_alloc+0x14c/0x550 [ 64.213071][ T3690] ? ref_tracker_free+0x6b0/0x6b0 [ 64.218098][ T3690] ? lock_release+0x720/0x720 [ 64.222793][ T3690] ? do_raw_spin_lock+0x120/0x2a0 [ 64.227992][ T3690] ? rwlock_bug.part.0+0x90/0x90 [ 64.232937][ T3690] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.238608][ T3690] linkwatch_fire_event+0x202/0x260 [ 64.243831][ T3690] netif_carrier_off+0x96/0xb0 [ 64.248605][ T3690] __tun_detach+0xfe7/0x13e0 [ 64.253198][ T3690] tun_chr_close+0xc4/0x180 [ 64.257712][ T3690] __fput+0x277/0x9d0 [ 64.261705][ T3690] ? __tun_detach+0x13e0/0x13e0 [ 64.266553][ T3690] task_work_run+0xdd/0x1a0 [ 64.271056][ T3690] ptrace_notify+0x114/0x140 [ 64.275651][ T3690] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.281913][ T3690] syscall_exit_to_user_mode+0x9/0x60 [ 64.287296][ T3690] do_syscall_64+0x42/0xb0 [ 64.291724][ T3690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.297625][ T3690] RIP: 0033:0x7fc6cd2767a3 [ 64.302060][ T3690] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.321671][ T3690] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.330099][ T3690] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3690] close(3) = 0 [pid 3690] close(4) = 0 [pid 3690] close(5) = -1 EBADF (Bad file descriptor) [pid 3690] close(6) = -1 EBADF (Bad file descriptor) [pid 3690] close(7) = -1 EBADF (Bad file descriptor) [pid 3690] close(8) = -1 EBADF (Bad file descriptor) [pid 3690] close(9) = -1 EBADF (Bad file descriptor) [pid 3690] close(10) = -1 EBADF (Bad file descriptor) [pid 3690] close(11) = -1 EBADF (Bad file descriptor) [pid 3690] close(12) = -1 EBADF (Bad file descriptor) [pid 3690] close(13) = -1 EBADF (Bad file descriptor) [pid 3690] close(14) = -1 EBADF (Bad file descriptor) [pid 3690] close(15) = -1 EBADF (Bad file descriptor) [pid 3690] close(16) = -1 EBADF (Bad file descriptor) [pid 3690] close(17) = -1 EBADF (Bad file descriptor) [ 64.338089][ T3690] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.346093][ T3690] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.354092][ T3690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.362087][ T3690] R13: 00000000000f4240 R14: 000000000000f953 R15: 00007ffdc49a5924 [ 64.370081][ T3690] [pid 3690] close(18) = -1 EBADF (Bad file descriptor) [pid 3690] close(19) = -1 EBADF (Bad file descriptor) [pid 3690] close(20) = -1 EBADF (Bad file descriptor) [pid 3690] close(21) = -1 EBADF (Bad file descriptor) [pid 3690] close(22) = -1 EBADF (Bad file descriptor) [pid 3690] close(23) = -1 EBADF (Bad file descriptor) [pid 3690] close(24) = -1 EBADF (Bad file descriptor) [pid 3690] close(25) = -1 EBADF (Bad file descriptor) [pid 3690] close(26) = -1 EBADF (Bad file descriptor) [pid 3690] close(27) = -1 EBADF (Bad file descriptor) [pid 3690] close(28) = -1 EBADF (Bad file descriptor) [pid 3690] close(29) = -1 EBADF (Bad file descriptor) [pid 3690] exit_group(0) = ? [pid 3690] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 73 ./strace-static-x86_64: Process 3691 attached [pid 3691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3691] setpgid(0, 0) = 0 [pid 3691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3691] write(3, "1000", 4) = 4 [pid 3691] close(3) = 0 [pid 3691] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3691] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3691] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3691] write(4, "5", 1) = 1 [pid 3691] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.447728][ T3691] FAULT_INJECTION: forcing a failure. [ 64.447728][ T3691] name failslab, interval 1, probability 0, space 0, times 0 [ 64.461017][ T3691] CPU: 0 PID: 3691 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.471182][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.481414][ T3691] Call Trace: [ 64.484689][ T3691] [ 64.487610][ T3691] dump_stack_lvl+0xcd/0x134 [ 64.492211][ T3691] should_fail.cold+0x5/0xa [ 64.496720][ T3691] should_failslab+0x5/0x10 [ 64.501225][ T3691] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.506515][ T3691] ? ref_tracker_alloc+0x14c/0x550 [ 64.511644][ T3691] ref_tracker_alloc+0x14c/0x550 [ 64.516607][ T3691] ? ref_tracker_free+0x6b0/0x6b0 [ 64.521634][ T3691] ? lock_release+0x720/0x720 [ 64.526606][ T3691] ? do_raw_spin_lock+0x120/0x2a0 [ 64.532045][ T3691] ? rwlock_bug.part.0+0x90/0x90 [ 64.537080][ T3691] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.542466][ T3691] linkwatch_fire_event+0x202/0x260 [ 64.547784][ T3691] netif_carrier_off+0x96/0xb0 [ 64.552569][ T3691] __tun_detach+0xfe7/0x13e0 [ 64.557168][ T3691] tun_chr_close+0xc4/0x180 [ 64.561679][ T3691] __fput+0x277/0x9d0 [ 64.565680][ T3691] ? __tun_detach+0x13e0/0x13e0 [ 64.570543][ T3691] task_work_run+0xdd/0x1a0 [ 64.575088][ T3691] ptrace_notify+0x114/0x140 [ 64.579707][ T3691] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.585996][ T3691] syscall_exit_to_user_mode+0x9/0x60 [ 64.591395][ T3691] do_syscall_64+0x42/0xb0 [ 64.595926][ T3691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.601812][ T3691] RIP: 0033:0x7fc6cd2767a3 [ 64.606317][ T3691] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.626012][ T3691] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.634425][ T3691] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3691] close(3) = 0 [pid 3691] close(4) = 0 [pid 3691] close(5) = -1 EBADF (Bad file descriptor) [pid 3691] close(6) = -1 EBADF (Bad file descriptor) [pid 3691] close(7) = -1 EBADF (Bad file descriptor) [pid 3691] close(8) = -1 EBADF (Bad file descriptor) [pid 3691] close(9) = -1 EBADF (Bad file descriptor) [pid 3691] close(10) = -1 EBADF (Bad file descriptor) [pid 3691] close(11) = -1 EBADF (Bad file descriptor) [pid 3691] close(12) = -1 EBADF (Bad file descriptor) [pid 3691] close(13) = -1 EBADF (Bad file descriptor) [pid 3691] close(14) = -1 EBADF (Bad file descriptor) [pid 3691] close(15) = -1 EBADF (Bad file descriptor) [pid 3691] close(16) = -1 EBADF (Bad file descriptor) [pid 3691] close(17) = -1 EBADF (Bad file descriptor) [pid 3691] close(18) = -1 EBADF (Bad file descriptor) [pid 3691] close(19) = -1 EBADF (Bad file descriptor) [pid 3691] close(20) = -1 EBADF (Bad file descriptor) [pid 3691] close(21) = -1 EBADF (Bad file descriptor) [pid 3691] close(22) = -1 EBADF (Bad file descriptor) [ 64.642414][ T3691] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.650423][ T3691] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.658414][ T3691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.666395][ T3691] R13: 00000000000f4240 R14: 000000000000fa74 R15: 00007ffdc49a5924 [ 64.674587][ T3691] [pid 3691] close(23) = -1 EBADF (Bad file descriptor) [pid 3691] close(24) = -1 EBADF (Bad file descriptor) [pid 3691] close(25) = -1 EBADF (Bad file descriptor) [pid 3691] close(26) = -1 EBADF (Bad file descriptor) [pid 3691] close(27) = -1 EBADF (Bad file descriptor) [pid 3691] close(28) = -1 EBADF (Bad file descriptor) [pid 3691] close(29) = -1 EBADF (Bad file descriptor) [pid 3691] exit_group(0) = ? [pid 3691] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 74 ./strace-static-x86_64: Process 3692 attached [pid 3692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3692] setpgid(0, 0) = 0 [pid 3692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3692] write(3, "1000", 4) = 4 [pid 3692] close(3) = 0 [pid 3692] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3692] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3692] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3692] write(4, "5", 1) = 1 [pid 3692] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 64.747802][ T3692] FAULT_INJECTION: forcing a failure. [ 64.747802][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 64.760642][ T3692] CPU: 0 PID: 3692 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 64.770786][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.781052][ T3692] Call Trace: [ 64.784327][ T3692] [ 64.787252][ T3692] dump_stack_lvl+0xcd/0x134 [ 64.791864][ T3692] should_fail.cold+0x5/0xa [ 64.796385][ T3692] should_failslab+0x5/0x10 [ 64.800912][ T3692] kmem_cache_alloc_trace+0x60/0x3f0 [ 64.806190][ T3692] ? ref_tracker_alloc+0x14c/0x550 [ 64.811325][ T3692] ref_tracker_alloc+0x14c/0x550 [ 64.816270][ T3692] ? ref_tracker_free+0x6b0/0x6b0 [ 64.821373][ T3692] ? lock_release+0x720/0x720 [ 64.826046][ T3692] ? do_raw_spin_lock+0x120/0x2a0 [ 64.831065][ T3692] ? rwlock_bug.part.0+0x90/0x90 [ 64.836180][ T3692] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 64.841638][ T3692] linkwatch_fire_event+0x202/0x260 [ 64.847096][ T3692] netif_carrier_off+0x96/0xb0 [ 64.851861][ T3692] __tun_detach+0xfe7/0x13e0 [ 64.856471][ T3692] tun_chr_close+0xc4/0x180 [ 64.861055][ T3692] __fput+0x277/0x9d0 [ 64.865023][ T3692] ? __tun_detach+0x13e0/0x13e0 [ 64.869869][ T3692] task_work_run+0xdd/0x1a0 [ 64.874372][ T3692] ptrace_notify+0x114/0x140 [ 64.878961][ T3692] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 64.885198][ T3692] syscall_exit_to_user_mode+0x9/0x60 [ 64.890562][ T3692] do_syscall_64+0x42/0xb0 [ 64.894976][ T3692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.900861][ T3692] RIP: 0033:0x7fc6cd2767a3 [ 64.905263][ T3692] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 64.924865][ T3692] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.933281][ T3692] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3692] close(3) = 0 [pid 3692] close(4) = 0 [pid 3692] close(5) = -1 EBADF (Bad file descriptor) [pid 3692] close(6) = -1 EBADF (Bad file descriptor) [pid 3692] close(7) = -1 EBADF (Bad file descriptor) [pid 3692] close(8) = -1 EBADF (Bad file descriptor) [pid 3692] close(9) = -1 EBADF (Bad file descriptor) [pid 3692] close(10) = -1 EBADF (Bad file descriptor) [pid 3692] close(11) = -1 EBADF (Bad file descriptor) [pid 3692] close(12) = -1 EBADF (Bad file descriptor) [pid 3692] close(13) = -1 EBADF (Bad file descriptor) [pid 3692] close(14) = -1 EBADF (Bad file descriptor) [pid 3692] close(15) = -1 EBADF (Bad file descriptor) [pid 3692] close(16) = -1 EBADF (Bad file descriptor) [pid 3692] close(17) = -1 EBADF (Bad file descriptor) [pid 3692] close(18) = -1 EBADF (Bad file descriptor) [pid 3692] close(19) = -1 EBADF (Bad file descriptor) [pid 3692] close(20) = -1 EBADF (Bad file descriptor) [pid 3692] close(21) = -1 EBADF (Bad file descriptor) [pid 3692] close(22) = -1 EBADF (Bad file descriptor) [pid 3692] close(23) = -1 EBADF (Bad file descriptor) [pid 3692] close(24) = -1 EBADF (Bad file descriptor) [pid 3692] close(25) = -1 EBADF (Bad file descriptor) [pid 3692] close(26) = -1 EBADF (Bad file descriptor) [pid 3692] close(27) = -1 EBADF (Bad file descriptor) [ 64.941264][ T3692] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 64.949235][ T3692] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 64.957201][ T3692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 64.965177][ T3692] R13: 00000000000f4240 R14: 000000000000fba0 R15: 00007ffdc49a5924 [ 64.973153][ T3692] [pid 3692] close(28) = -1 EBADF (Bad file descriptor) [pid 3692] close(29) = -1 EBADF (Bad file descriptor) [pid 3692] exit_group(0) = ? [pid 3692] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3693 attached , child_tidptr=0x5555570bd5d0) = 75 [pid 3693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3693] setpgid(0, 0) = 0 [pid 3693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3693] write(3, "1000", 4) = 4 [pid 3693] close(3) = 0 [pid 3693] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3693] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3693] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3693] write(4, "5", 1) = 1 [pid 3693] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.043178][ T3693] FAULT_INJECTION: forcing a failure. [ 65.043178][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 65.055788][ T3693] CPU: 0 PID: 3693 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.065923][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.075957][ T3693] Call Trace: [ 65.079216][ T3693] [ 65.082124][ T3693] dump_stack_lvl+0xcd/0x134 [ 65.086700][ T3693] should_fail.cold+0x5/0xa [ 65.091183][ T3693] should_failslab+0x5/0x10 [ 65.095680][ T3693] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.100964][ T3693] ? ref_tracker_alloc+0x14c/0x550 [ 65.106095][ T3693] ref_tracker_alloc+0x14c/0x550 [ 65.111036][ T3693] ? ref_tracker_free+0x6b0/0x6b0 [ 65.116048][ T3693] ? lock_release+0x720/0x720 [ 65.120716][ T3693] ? do_raw_spin_lock+0x120/0x2a0 [ 65.125733][ T3693] ? rwlock_bug.part.0+0x90/0x90 [ 65.130663][ T3693] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.136031][ T3693] linkwatch_fire_event+0x202/0x260 [ 65.141225][ T3693] netif_carrier_off+0x96/0xb0 [ 65.145983][ T3693] __tun_detach+0xfe7/0x13e0 [ 65.150573][ T3693] tun_chr_close+0xc4/0x180 [ 65.155080][ T3693] __fput+0x277/0x9d0 [ 65.159052][ T3693] ? __tun_detach+0x13e0/0x13e0 [ 65.163902][ T3693] task_work_run+0xdd/0x1a0 [ 65.168419][ T3693] ptrace_notify+0x114/0x140 [ 65.173013][ T3693] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.179272][ T3693] syscall_exit_to_user_mode+0x9/0x60 [ 65.184646][ T3693] do_syscall_64+0x42/0xb0 [ 65.189061][ T3693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.195034][ T3693] RIP: 0033:0x7fc6cd2767a3 [ 65.199442][ T3693] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.219074][ T3693] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.227483][ T3693] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 65.235449][ T3693] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3693] close(3) = 0 [pid 3693] close(4) = 0 [pid 3693] close(5) = -1 EBADF (Bad file descriptor) [pid 3693] close(6) = -1 EBADF (Bad file descriptor) [pid 3693] close(7) = -1 EBADF (Bad file descriptor) [pid 3693] close(8) = -1 EBADF (Bad file descriptor) [pid 3693] close(9) = -1 EBADF (Bad file descriptor) [pid 3693] close(10) = -1 EBADF (Bad file descriptor) [pid 3693] close(11) = -1 EBADF (Bad file descriptor) [pid 3693] close(12) = -1 EBADF (Bad file descriptor) [pid 3693] close(13) = -1 EBADF (Bad file descriptor) [pid 3693] close(14) = -1 EBADF (Bad file descriptor) [ 65.243414][ T3693] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.251383][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.259356][ T3693] R13: 00000000000f4240 R14: 000000000000fccc R15: 00007ffdc49a5924 [ 65.267344][ T3693] [pid 3693] close(15) = -1 EBADF (Bad file descriptor) [pid 3693] close(16) = -1 EBADF (Bad file descriptor) [pid 3693] close(17) = -1 EBADF (Bad file descriptor) [pid 3693] close(18) = -1 EBADF (Bad file descriptor) [pid 3693] close(19) = -1 EBADF (Bad file descriptor) [pid 3693] close(20) = -1 EBADF (Bad file descriptor) [pid 3693] close(21) = -1 EBADF (Bad file descriptor) [pid 3693] close(22) = -1 EBADF (Bad file descriptor) [pid 3693] close(23) = -1 EBADF (Bad file descriptor) [pid 3693] close(24) = -1 EBADF (Bad file descriptor) [pid 3693] close(25) = -1 EBADF (Bad file descriptor) [pid 3693] close(26) = -1 EBADF (Bad file descriptor) [pid 3693] close(27) = -1 EBADF (Bad file descriptor) [pid 3693] close(28) = -1 EBADF (Bad file descriptor) [pid 3693] close(29) = -1 EBADF (Bad file descriptor) [pid 3693] exit_group(0) = ? [pid 3693] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 76 ./strace-static-x86_64: Process 3694 attached [pid 3694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3694] setpgid(0, 0) = 0 [pid 3694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3694] write(3, "1000", 4) = 4 [pid 3694] close(3) = 0 [pid 3694] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3694] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3694] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3694] write(4, "5", 1) = 1 [pid 3694] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.354376][ T3694] FAULT_INJECTION: forcing a failure. [ 65.354376][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 65.367707][ T3694] CPU: 0 PID: 3694 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.377876][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.387928][ T3694] Call Trace: [ 65.391202][ T3694] [ 65.394130][ T3694] dump_stack_lvl+0xcd/0x134 [ 65.398737][ T3694] should_fail.cold+0x5/0xa [ 65.403238][ T3694] should_failslab+0x5/0x10 [ 65.407748][ T3694] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.413060][ T3694] ? ref_tracker_alloc+0x14c/0x550 [ 65.418170][ T3694] ref_tracker_alloc+0x14c/0x550 [ 65.423134][ T3694] ? ref_tracker_free+0x6b0/0x6b0 [ 65.428173][ T3694] ? lock_release+0x720/0x720 [ 65.432844][ T3694] ? do_raw_spin_lock+0x120/0x2a0 [ 65.437864][ T3694] ? rwlock_bug.part.0+0x90/0x90 [ 65.442799][ T3694] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.448173][ T3694] linkwatch_fire_event+0x202/0x260 [ 65.453464][ T3694] netif_carrier_off+0x96/0xb0 [ 65.458309][ T3694] __tun_detach+0xfe7/0x13e0 [ 65.462902][ T3694] tun_chr_close+0xc4/0x180 [ 65.467484][ T3694] __fput+0x277/0x9d0 [ 65.471461][ T3694] ? __tun_detach+0x13e0/0x13e0 [ 65.476304][ T3694] task_work_run+0xdd/0x1a0 [ 65.480804][ T3694] ptrace_notify+0x114/0x140 [ 65.485480][ T3694] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.491738][ T3694] syscall_exit_to_user_mode+0x9/0x60 [ 65.497123][ T3694] do_syscall_64+0x42/0xb0 [ 65.501530][ T3694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.507413][ T3694] RIP: 0033:0x7fc6cd2767a3 [ 65.511816][ T3694] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.531599][ T3694] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.539997][ T3694] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 65.547951][ T3694] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 65.555903][ T3694] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.563854][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.571805][ T3694] R13: 00000000000f4240 R14: 000000000000fdf3 R15: 00007ffdc49a5924 [ 65.579945][ T3694] [pid 3694] close(3) = 0 [pid 3694] close(4) = 0 [pid 3694] close(5) = -1 EBADF (Bad file descriptor) [pid 3694] close(6) = -1 EBADF (Bad file descriptor) [pid 3694] close(7) = -1 EBADF (Bad file descriptor) [pid 3694] close(8) = -1 EBADF (Bad file descriptor) [pid 3694] close(9) = -1 EBADF (Bad file descriptor) [pid 3694] close(10) = -1 EBADF (Bad file descriptor) [pid 3694] close(11) = -1 EBADF (Bad file descriptor) [pid 3694] close(12) = -1 EBADF (Bad file descriptor) [pid 3694] close(13) = -1 EBADF (Bad file descriptor) [pid 3694] close(14) = -1 EBADF (Bad file descriptor) [pid 3694] close(15) = -1 EBADF (Bad file descriptor) [pid 3694] close(16) = -1 EBADF (Bad file descriptor) [pid 3694] close(17) = -1 EBADF (Bad file descriptor) [pid 3694] close(18) = -1 EBADF (Bad file descriptor) [pid 3694] close(19) = -1 EBADF (Bad file descriptor) [pid 3694] close(20) = -1 EBADF (Bad file descriptor) [pid 3694] close(21) = -1 EBADF (Bad file descriptor) [pid 3694] close(22) = -1 EBADF (Bad file descriptor) [pid 3694] close(23) = -1 EBADF (Bad file descriptor) [pid 3694] close(24) = -1 EBADF (Bad file descriptor) [pid 3694] close(25) = -1 EBADF (Bad file descriptor) [pid 3694] close(26) = -1 EBADF (Bad file descriptor) [pid 3694] close(27) = -1 EBADF (Bad file descriptor) [pid 3694] close(28) = -1 EBADF (Bad file descriptor) [pid 3694] close(29) = -1 EBADF (Bad file descriptor) [pid 3694] exit_group(0) = ? [pid 3694] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 77 ./strace-static-x86_64: Process 3695 attached [pid 3695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3695] setpgid(0, 0) = 0 [pid 3695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3695] write(3, "1000", 4) = 4 [pid 3695] close(3) = 0 [pid 3695] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3695] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3695] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3695] write(4, "5", 1) = 1 [pid 3695] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.651929][ T3695] FAULT_INJECTION: forcing a failure. [ 65.651929][ T3695] name failslab, interval 1, probability 0, space 0, times 0 [ 65.665146][ T3695] CPU: 0 PID: 3695 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.675288][ T3695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.685404][ T3695] Call Trace: [ 65.688666][ T3695] [ 65.691573][ T3695] dump_stack_lvl+0xcd/0x134 [ 65.696236][ T3695] should_fail.cold+0x5/0xa [ 65.700718][ T3695] should_failslab+0x5/0x10 [ 65.705198][ T3695] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.710471][ T3695] ? ref_tracker_alloc+0x14c/0x550 [ 65.715577][ T3695] ref_tracker_alloc+0x14c/0x550 [ 65.720510][ T3695] ? ref_tracker_free+0x6b0/0x6b0 [ 65.725515][ T3695] ? lock_release+0x720/0x720 [ 65.730180][ T3695] ? do_raw_spin_lock+0x120/0x2a0 [ 65.735202][ T3695] ? rwlock_bug.part.0+0x90/0x90 [ 65.740556][ T3695] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.745932][ T3695] linkwatch_fire_event+0x202/0x260 [ 65.751134][ T3695] netif_carrier_off+0x96/0xb0 [ 65.755892][ T3695] __tun_detach+0xfe7/0x13e0 [ 65.760486][ T3695] tun_chr_close+0xc4/0x180 [ 65.765070][ T3695] __fput+0x277/0x9d0 [ 65.769034][ T3695] ? __tun_detach+0x13e0/0x13e0 [ 65.773874][ T3695] task_work_run+0xdd/0x1a0 [ 65.778382][ T3695] ptrace_notify+0x114/0x140 [ 65.783047][ T3695] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 65.789290][ T3695] syscall_exit_to_user_mode+0x9/0x60 [ 65.794646][ T3695] do_syscall_64+0x42/0xb0 [ 65.799062][ T3695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.804937][ T3695] RIP: 0033:0x7fc6cd2767a3 [ 65.809421][ T3695] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 65.829092][ T3695] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.837484][ T3695] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3695] close(3) = 0 [pid 3695] close(4) = 0 [pid 3695] close(5) = -1 EBADF (Bad file descriptor) [pid 3695] close(6) = -1 EBADF (Bad file descriptor) [pid 3695] close(7) = -1 EBADF (Bad file descriptor) [pid 3695] close(8) = -1 EBADF (Bad file descriptor) [pid 3695] close(9) = -1 EBADF (Bad file descriptor) [pid 3695] close(10) = -1 EBADF (Bad file descriptor) [pid 3695] close(11) = -1 EBADF (Bad file descriptor) [pid 3695] close(12) = -1 EBADF (Bad file descriptor) [pid 3695] close(13) = -1 EBADF (Bad file descriptor) [pid 3695] close(14) = -1 EBADF (Bad file descriptor) [pid 3695] close(15) = -1 EBADF (Bad file descriptor) [pid 3695] close(16) = -1 EBADF (Bad file descriptor) [pid 3695] close(17) = -1 EBADF (Bad file descriptor) [pid 3695] close(18) = -1 EBADF (Bad file descriptor) [pid 3695] close(19) = -1 EBADF (Bad file descriptor) [pid 3695] close(20) = -1 EBADF (Bad file descriptor) [pid 3695] close(21) = -1 EBADF (Bad file descriptor) [pid 3695] close(22) = -1 EBADF (Bad file descriptor) [pid 3695] close(23) = -1 EBADF (Bad file descriptor) [pid 3695] close(24) = -1 EBADF (Bad file descriptor) [pid 3695] close(25) = -1 EBADF (Bad file descriptor) [pid 3695] close(26) = -1 EBADF (Bad file descriptor) [pid 3695] close(27) = -1 EBADF (Bad file descriptor) [pid 3695] close(28) = -1 EBADF (Bad file descriptor) [pid 3695] close(29) = -1 EBADF (Bad file descriptor) [pid 3695] exit_group(0) = ? [pid 3695] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 78 ./strace-static-x86_64: Process 3696 attached [pid 3696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3696] setpgid(0, 0) = 0 [pid 3696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3696] write(3, "1000", 4) = 4 [pid 3696] close(3) = 0 [pid 3696] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3696] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3696] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3696] write(4, "5", 1) = 1 [pid 3696] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 65.845449][ T3695] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 65.853499][ T3695] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 65.861624][ T3695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 65.869575][ T3695] R13: 00000000000f4240 R14: 000000000000ff2a R15: 00007ffdc49a5924 [ 65.878056][ T3695] [ 65.922843][ T3696] FAULT_INJECTION: forcing a failure. [ 65.922843][ T3696] name failslab, interval 1, probability 0, space 0, times 0 [ 65.935537][ T3696] CPU: 0 PID: 3696 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 65.945680][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.955715][ T3696] Call Trace: [ 65.958983][ T3696] [ 65.961893][ T3696] dump_stack_lvl+0xcd/0x134 [ 65.966482][ T3696] should_fail.cold+0x5/0xa [ 65.970981][ T3696] should_failslab+0x5/0x10 [ 65.975469][ T3696] kmem_cache_alloc_trace+0x60/0x3f0 [ 65.980748][ T3696] ? ref_tracker_alloc+0x14c/0x550 [ 65.985858][ T3696] ref_tracker_alloc+0x14c/0x550 [ 65.990779][ T3696] ? ref_tracker_free+0x6b0/0x6b0 [ 65.995886][ T3696] ? lock_release+0x720/0x720 [ 66.000571][ T3696] ? do_raw_spin_lock+0x120/0x2a0 [ 66.005579][ T3696] ? rwlock_bug.part.0+0x90/0x90 [ 66.010502][ T3696] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.015883][ T3696] linkwatch_fire_event+0x202/0x260 [ 66.021095][ T3696] netif_carrier_off+0x96/0xb0 [ 66.025858][ T3696] __tun_detach+0xfe7/0x13e0 [ 66.030447][ T3696] tun_chr_close+0xc4/0x180 [ 66.034936][ T3696] __fput+0x277/0x9d0 [ 66.038902][ T3696] ? __tun_detach+0x13e0/0x13e0 [ 66.043829][ T3696] task_work_run+0xdd/0x1a0 [ 66.048321][ T3696] ptrace_notify+0x114/0x140 [ 66.052898][ T3696] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 66.059129][ T3696] syscall_exit_to_user_mode+0x9/0x60 [ 66.064598][ T3696] do_syscall_64+0x42/0xb0 [ 66.069030][ T3696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.074923][ T3696] RIP: 0033:0x7fc6cd2767a3 [ 66.079349][ T3696] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 66.099133][ T3696] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 66.107543][ T3696] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 66.115504][ T3696] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3696] close(3) = 0 [pid 3696] close(4) = 0 [pid 3696] close(5) = -1 EBADF (Bad file descriptor) [pid 3696] close(6) = -1 EBADF (Bad file descriptor) [pid 3696] close(7) = -1 EBADF (Bad file descriptor) [pid 3696] close(8) = -1 EBADF (Bad file descriptor) [pid 3696] close(9) = -1 EBADF (Bad file descriptor) [pid 3696] close(10) = -1 EBADF (Bad file descriptor) [pid 3696] close(11) = -1 EBADF (Bad file descriptor) [pid 3696] close(12) = -1 EBADF (Bad file descriptor) [pid 3696] close(13) = -1 EBADF (Bad file descriptor) [pid 3696] close(14) = -1 EBADF (Bad file descriptor) [pid 3696] close(15) = -1 EBADF (Bad file descriptor) [pid 3696] close(16) = -1 EBADF (Bad file descriptor) [pid 3696] close(17) = -1 EBADF (Bad file descriptor) [pid 3696] close(18) = -1 EBADF (Bad file descriptor) [pid 3696] close(19) = -1 EBADF (Bad file descriptor) [pid 3696] close(20) = -1 EBADF (Bad file descriptor) [pid 3696] close(21) = -1 EBADF (Bad file descriptor) [pid 3696] close(22) = -1 EBADF (Bad file descriptor) [pid 3696] close(23) = -1 EBADF (Bad file descriptor) [pid 3696] close(24) = -1 EBADF (Bad file descriptor) [pid 3696] close(25) = -1 EBADF (Bad file descriptor) [pid 3696] close(26) = -1 EBADF (Bad file descriptor) [pid 3696] close(27) = -1 EBADF (Bad file descriptor) [pid 3696] close(28) = -1 EBADF (Bad file descriptor) [pid 3696] close(29) = -1 EBADF (Bad file descriptor) [pid 3696] exit_group(0) = ? [pid 3696] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 79 ./strace-static-x86_64: Process 3697 attached [pid 3697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3697] setpgid(0, 0) = 0 [pid 3697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3697] write(3, "1000", 4) = 4 [pid 3697] close(3) = 0 [pid 3697] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3697] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3697] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3697] write(4, "5", 1) = 1 [ 66.123459][ T3696] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.131440][ T3696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.139411][ T3696] R13: 00000000000f4240 R14: 0000000000010056 R15: 00007ffdc49a5924 [ 66.147396][ T3696] [ 66.197275][ T3697] FAULT_INJECTION: forcing a failure. [ 66.197275][ T3697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.210545][ T3697] CPU: 0 PID: 3697 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.220695][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.230752][ T3697] Call Trace: [ 66.234048][ T3697] [ 66.236965][ T3697] dump_stack_lvl+0xcd/0x134 [ 66.241554][ T3697] should_fail.cold+0x5/0xa [ 66.246073][ T3697] prepare_alloc_pages+0x17b/0x570 [ 66.251172][ T3697] __alloc_pages+0x12f/0x500 [ 66.255761][ T3697] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 66.262527][ T3697] ? ___slab_alloc+0x47e/0xf20 [ 66.267276][ T3697] alloc_pages+0x1aa/0x310 [ 66.271680][ T3697] ? mark_held_locks+0x9f/0xe0 [ 66.276523][ T3697] allocate_slab+0x26c/0x3c0 [ 66.281102][ T3697] ___slab_alloc+0x8df/0xf20 [ 66.285676][ T3697] ? napi_skb_cache_get+0xeb/0x170 [ 66.290777][ T3697] ? mark_held_locks+0x9f/0xe0 [ 66.295532][ T3697] kmem_cache_alloc_bulk+0x21c/0x720 [ 66.301243][ T3697] napi_skb_cache_get+0xeb/0x170 [ 66.306174][ T3697] __alloc_skb+0x9b/0x340 [ 66.310487][ T3697] ? __lock_acquire+0xbca/0x56c0 [ 66.315436][ T3697] __napi_alloc_skb+0x70/0x310 [ 66.320376][ T3697] napi_get_frags+0x5e/0x140 [ 66.324954][ T3697] tun_get_user+0xa07/0x3b00 [ 66.329565][ T3697] ? tun_build_skb+0x1170/0x1170 [ 66.334495][ T3697] ? lock_downgrade+0x6e0/0x6e0 [ 66.339343][ T3697] ? find_held_lock+0x2d/0x110 [ 66.344132][ T3697] tun_chr_write_iter+0xdb/0x200 [ 66.349066][ T3697] do_iter_readv_writev+0x3d1/0x640 [ 66.354261][ T3697] ? new_sync_write+0x560/0x560 [ 66.359109][ T3697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.365342][ T3697] ? security_file_permission+0xab/0xd0 [ 66.370887][ T3697] do_iter_write+0x182/0x700 [ 66.375564][ T3697] ? import_iovec+0x10c/0x150 [ 66.380233][ T3697] vfs_writev+0x1aa/0x630 [ 66.384574][ T3697] ? vfs_iter_write+0xa0/0xa0 [ 66.389260][ T3697] ? do_raw_spin_lock+0x120/0x2a0 [ 66.394286][ T3697] ? rwlock_bug.part.0+0x90/0x90 [ 66.399217][ T3697] ? _raw_spin_lock_irq+0x41/0x50 [ 66.404241][ T3697] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 66.410480][ T3697] ? find_held_lock+0x2d/0x110 [ 66.415243][ T3697] ? ptrace_notify+0xfa/0x140 [ 66.419923][ T3697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.426166][ T3697] ? __fget_light+0x20f/0x270 [ 66.430844][ T3697] do_writev+0x133/0x2f0 [ 66.435093][ T3697] ? vfs_writev+0x630/0x630 [ 66.439592][ T3697] ? lockdep_hardirqs_on+0x79/0x100 [ 66.444788][ T3697] ? _raw_spin_unlock_irq+0x2a/0x40 [ 66.449980][ T3697] ? ptrace_notify+0xfa/0x140 [ 66.454664][ T3697] do_syscall_64+0x35/0xb0 [ 66.459081][ T3697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.464974][ T3697] RIP: 0033:0x7fc6cd2b4c39 [ 66.469383][ T3697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.489010][ T3697] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3697] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.497437][ T3697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 66.505408][ T3697] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 66.513375][ T3697] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.521345][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.529395][ T3697] R13: 00000000000f4240 R14: 0000000000010165 R15: 00007ffdc49a5924 [ 66.537368][ T3697] [pid 3697] close(3) = 0 [pid 3697] close(4) = 0 [pid 3697] close(5) = -1 EBADF (Bad file descriptor) [pid 3697] close(6) = -1 EBADF (Bad file descriptor) [pid 3697] close(7) = -1 EBADF (Bad file descriptor) [pid 3697] close(8) = -1 EBADF (Bad file descriptor) [pid 3697] close(9) = -1 EBADF (Bad file descriptor) [pid 3697] close(10) = -1 EBADF (Bad file descriptor) [pid 3697] close(11) = -1 EBADF (Bad file descriptor) [pid 3697] close(12) = -1 EBADF (Bad file descriptor) [pid 3697] close(13) = -1 EBADF (Bad file descriptor) [pid 3697] close(14) = -1 EBADF (Bad file descriptor) [pid 3697] close(15) = -1 EBADF (Bad file descriptor) [pid 3697] close(16) = -1 EBADF (Bad file descriptor) [pid 3697] close(17) = -1 EBADF (Bad file descriptor) [pid 3697] close(18) = -1 EBADF (Bad file descriptor) [pid 3697] close(19) = -1 EBADF (Bad file descriptor) [pid 3697] close(20) = -1 EBADF (Bad file descriptor) [pid 3697] close(21) = -1 EBADF (Bad file descriptor) [pid 3697] close(22) = -1 EBADF (Bad file descriptor) [pid 3697] close(23) = -1 EBADF (Bad file descriptor) [pid 3697] close(24) = -1 EBADF (Bad file descriptor) [pid 3697] close(25) = -1 EBADF (Bad file descriptor) [pid 3697] close(26) = -1 EBADF (Bad file descriptor) [pid 3697] close(27) = -1 EBADF (Bad file descriptor) [pid 3697] close(28) = -1 EBADF (Bad file descriptor) [pid 3697] close(29) = -1 EBADF (Bad file descriptor) [pid 3697] exit_group(0) = ? [pid 3697] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 80 ./strace-static-x86_64: Process 3698 attached [pid 3698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3698] setpgid(0, 0) = 0 [pid 3698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3698] write(3, "1000", 4) = 4 [pid 3698] close(3) = 0 [pid 3698] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3698] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3698] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3698] write(4, "5", 1) = 1 [pid 3698] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.610347][ T3698] FAULT_INJECTION: forcing a failure. [ 66.610347][ T3698] name failslab, interval 1, probability 0, space 0, times 0 [ 66.623004][ T3698] CPU: 0 PID: 3698 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.633147][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.643195][ T3698] Call Trace: [ 66.646464][ T3698] [ 66.649389][ T3698] dump_stack_lvl+0xcd/0x134 [ 66.653969][ T3698] should_fail.cold+0x5/0xa [ 66.658459][ T3698] should_failslab+0x5/0x10 [ 66.662991][ T3698] kmem_cache_alloc_trace+0x60/0x3f0 [ 66.668267][ T3698] ? ref_tracker_alloc+0x14c/0x550 [ 66.673380][ T3698] ref_tracker_alloc+0x14c/0x550 [ 66.678305][ T3698] ? ref_tracker_free+0x6b0/0x6b0 [ 66.683313][ T3698] ? lock_release+0x720/0x720 [ 66.687979][ T3698] ? do_raw_spin_lock+0x120/0x2a0 [ 66.692993][ T3698] ? rwlock_bug.part.0+0x90/0x90 [ 66.697919][ T3698] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.703285][ T3698] linkwatch_fire_event+0x202/0x260 [ 66.709726][ T3698] netif_carrier_off+0x96/0xb0 [ 66.714484][ T3698] __tun_detach+0xfe7/0x13e0 [ 66.719077][ T3698] tun_chr_close+0xc4/0x180 [ 66.723573][ T3698] __fput+0x277/0x9d0 [ 66.727543][ T3698] ? __tun_detach+0x13e0/0x13e0 [ 66.732384][ T3698] task_work_run+0xdd/0x1a0 [ 66.736879][ T3698] ptrace_notify+0x114/0x140 [ 66.741633][ T3698] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 66.747953][ T3698] syscall_exit_to_user_mode+0x9/0x60 [ 66.753489][ T3698] do_syscall_64+0x42/0xb0 [ 66.757898][ T3698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.763784][ T3698] RIP: 0033:0x7fc6cd2767a3 [ 66.768187][ T3698] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 66.787802][ T3698] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 66.796295][ T3698] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3698] close(3) = 0 [pid 3698] close(4) = 0 [pid 3698] close(5) = -1 EBADF (Bad file descriptor) [pid 3698] close(6) = -1 EBADF (Bad file descriptor) [pid 3698] close(7) = -1 EBADF (Bad file descriptor) [pid 3698] close(8) = -1 EBADF (Bad file descriptor) [pid 3698] close(9) = -1 EBADF (Bad file descriptor) [pid 3698] close(10) = -1 EBADF (Bad file descriptor) [pid 3698] close(11) = -1 EBADF (Bad file descriptor) [pid 3698] close(12) = -1 EBADF (Bad file descriptor) [pid 3698] close(13) = -1 EBADF (Bad file descriptor) [pid 3698] close(14) = -1 EBADF (Bad file descriptor) [pid 3698] close(15) = -1 EBADF (Bad file descriptor) [pid 3698] close(16) = -1 EBADF (Bad file descriptor) [pid 3698] close(17) = -1 EBADF (Bad file descriptor) [pid 3698] close(18) = -1 EBADF (Bad file descriptor) [pid 3698] close(19) = -1 EBADF (Bad file descriptor) [pid 3698] close(20) = -1 EBADF (Bad file descriptor) [pid 3698] close(21) = -1 EBADF (Bad file descriptor) [pid 3698] close(22) = -1 EBADF (Bad file descriptor) [pid 3698] close(23) = -1 EBADF (Bad file descriptor) [pid 3698] close(24) = -1 EBADF (Bad file descriptor) [pid 3698] close(25) = -1 EBADF (Bad file descriptor) [pid 3698] close(26) = -1 EBADF (Bad file descriptor) [pid 3698] close(27) = -1 EBADF (Bad file descriptor) [pid 3698] close(28) = -1 EBADF (Bad file descriptor) [pid 3698] close(29) = -1 EBADF (Bad file descriptor) [pid 3698] exit_group(0) = ? [pid 3698] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3699 attached , child_tidptr=0x5555570bd5d0) = 81 [pid 3699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3699] setpgid(0, 0) = 0 [pid 3699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3699] write(3, "1000", 4) = 4 [pid 3699] close(3) = 0 [pid 3699] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 66.804252][ T3698] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 66.812224][ T3698] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 66.820286][ T3698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.828254][ T3698] R13: 00000000000f4240 R14: 0000000000010279 R15: 00007ffdc49a5924 [ 66.836226][ T3698] [pid 3699] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3699] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3699] write(4, "5", 1) = 1 [pid 3699] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 66.896344][ T3699] FAULT_INJECTION: forcing a failure. [ 66.896344][ T3699] name failslab, interval 1, probability 0, space 0, times 0 [ 66.909201][ T3699] CPU: 0 PID: 3699 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 66.919347][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.929418][ T3699] Call Trace: [ 66.932719][ T3699] [ 66.935638][ T3699] dump_stack_lvl+0xcd/0x134 [ 66.940235][ T3699] should_fail.cold+0x5/0xa [ 66.944759][ T3699] should_failslab+0x5/0x10 [ 66.949259][ T3699] kmem_cache_alloc_trace+0x60/0x3f0 [ 66.954541][ T3699] ? ref_tracker_alloc+0x14c/0x550 [ 66.959772][ T3699] ref_tracker_alloc+0x14c/0x550 [ 66.964712][ T3699] ? ref_tracker_free+0x6b0/0x6b0 [ 66.969730][ T3699] ? lock_release+0x720/0x720 [ 66.974591][ T3699] ? do_raw_spin_lock+0x120/0x2a0 [ 66.979608][ T3699] ? rwlock_bug.part.0+0x90/0x90 [ 66.984625][ T3699] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 66.989997][ T3699] linkwatch_fire_event+0x202/0x260 [ 66.995193][ T3699] netif_carrier_off+0x96/0xb0 [ 66.999949][ T3699] __tun_detach+0xfe7/0x13e0 [ 67.004536][ T3699] tun_chr_close+0xc4/0x180 [ 67.009028][ T3699] __fput+0x277/0x9d0 [ 67.013006][ T3699] ? __tun_detach+0x13e0/0x13e0 [ 67.017850][ T3699] task_work_run+0xdd/0x1a0 [ 67.022357][ T3699] ptrace_notify+0x114/0x140 [ 67.027206][ T3699] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.033549][ T3699] syscall_exit_to_user_mode+0x9/0x60 [ 67.038924][ T3699] do_syscall_64+0x42/0xb0 [ 67.043428][ T3699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.049602][ T3699] RIP: 0033:0x7fc6cd2767a3 [ 67.054013][ T3699] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.073613][ T3699] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.082026][ T3699] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3699] close(3) = 0 [pid 3699] close(4) = 0 [ 67.089993][ T3699] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.097955][ T3699] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.106451][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.114419][ T3699] R13: 00000000000f4240 R14: 0000000000010412 R15: 00007ffdc49a5924 [ 67.122494][ T3699] [pid 3699] close(5) = -1 EBADF (Bad file descriptor) [pid 3699] close(6) = -1 EBADF (Bad file descriptor) [pid 3699] close(7) = -1 EBADF (Bad file descriptor) [pid 3699] close(8) = -1 EBADF (Bad file descriptor) [pid 3699] close(9) = -1 EBADF (Bad file descriptor) [pid 3699] close(10) = -1 EBADF (Bad file descriptor) [pid 3699] close(11) = -1 EBADF (Bad file descriptor) [pid 3699] close(12) = -1 EBADF (Bad file descriptor) [pid 3699] close(13) = -1 EBADF (Bad file descriptor) [pid 3699] close(14) = -1 EBADF (Bad file descriptor) [pid 3699] close(15) = -1 EBADF (Bad file descriptor) [pid 3699] close(16) = -1 EBADF (Bad file descriptor) [pid 3699] close(17) = -1 EBADF (Bad file descriptor) [pid 3699] close(18) = -1 EBADF (Bad file descriptor) [pid 3699] close(19) = -1 EBADF (Bad file descriptor) [pid 3699] close(20) = -1 EBADF (Bad file descriptor) [pid 3699] close(21) = -1 EBADF (Bad file descriptor) [pid 3699] close(22) = -1 EBADF (Bad file descriptor) [pid 3699] close(23) = -1 EBADF (Bad file descriptor) [pid 3699] close(24) = -1 EBADF (Bad file descriptor) [pid 3699] close(25) = -1 EBADF (Bad file descriptor) [pid 3699] close(26) = -1 EBADF (Bad file descriptor) [pid 3699] close(27) = -1 EBADF (Bad file descriptor) [pid 3699] close(28) = -1 EBADF (Bad file descriptor) [pid 3699] close(29) = -1 EBADF (Bad file descriptor) [pid 3699] exit_group(0) = ? [pid 3699] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3700 attached , child_tidptr=0x5555570bd5d0) = 82 [pid 3700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3700] setpgid(0, 0) = 0 [pid 3700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3700] write(3, "1000", 4) = 4 [pid 3700] close(3) = 0 [pid 3700] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3700] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3700] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3700] write(4, "5", 1) = 1 [pid 3700] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.206388][ T3700] FAULT_INJECTION: forcing a failure. [ 67.206388][ T3700] name failslab, interval 1, probability 0, space 0, times 0 [ 67.220869][ T3700] CPU: 1 PID: 3700 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.231171][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.241317][ T3700] Call Trace: [ 67.244592][ T3700] [ 67.247720][ T3700] dump_stack_lvl+0xcd/0x134 [ 67.252547][ T3700] should_fail.cold+0x5/0xa [ 67.257148][ T3700] should_failslab+0x5/0x10 [ 67.261662][ T3700] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.267051][ T3700] ? ref_tracker_alloc+0x14c/0x550 [ 67.272188][ T3700] ref_tracker_alloc+0x14c/0x550 [ 67.277131][ T3700] ? ref_tracker_free+0x6b0/0x6b0 [ 67.282158][ T3700] ? lock_release+0x720/0x720 [ 67.286846][ T3700] ? do_raw_spin_lock+0x120/0x2a0 [ 67.292044][ T3700] ? rwlock_bug.part.0+0x90/0x90 [ 67.296986][ T3700] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.302389][ T3700] linkwatch_fire_event+0x202/0x260 [ 67.307706][ T3700] netif_carrier_off+0x96/0xb0 [ 67.312505][ T3700] __tun_detach+0xfe7/0x13e0 [ 67.317112][ T3700] tun_chr_close+0xc4/0x180 [ 67.321630][ T3700] __fput+0x277/0x9d0 [ 67.325613][ T3700] ? __tun_detach+0x13e0/0x13e0 [ 67.330488][ T3700] task_work_run+0xdd/0x1a0 [ 67.335019][ T3700] ptrace_notify+0x114/0x140 [ 67.339698][ T3700] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.346211][ T3700] syscall_exit_to_user_mode+0x9/0x60 [ 67.351596][ T3700] do_syscall_64+0x42/0xb0 [ 67.356013][ T3700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.361922][ T3700] RIP: 0033:0x7fc6cd2767a3 [ 67.366524][ T3700] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.386316][ T3700] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.394914][ T3700] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3700] close(3) = 0 [pid 3700] close(4) = 0 [pid 3700] close(5) = -1 EBADF (Bad file descriptor) [pid 3700] close(6) = -1 EBADF (Bad file descriptor) [pid 3700] close(7) = -1 EBADF (Bad file descriptor) [pid 3700] close(8) = -1 EBADF (Bad file descriptor) [pid 3700] close(9) = -1 EBADF (Bad file descriptor) [pid 3700] close(10) = -1 EBADF (Bad file descriptor) [pid 3700] close(11) = -1 EBADF (Bad file descriptor) [pid 3700] close(12) = -1 EBADF (Bad file descriptor) [pid 3700] close(13) = -1 EBADF (Bad file descriptor) [pid 3700] close(14) = -1 EBADF (Bad file descriptor) [pid 3700] close(15) = -1 EBADF (Bad file descriptor) [pid 3700] close(16) = -1 EBADF (Bad file descriptor) [pid 3700] close(17) = -1 EBADF (Bad file descriptor) [pid 3700] close(18) = -1 EBADF (Bad file descriptor) [pid 3700] close(19) = -1 EBADF (Bad file descriptor) [pid 3700] close(20) = -1 EBADF (Bad file descriptor) [pid 3700] close(21) = -1 EBADF (Bad file descriptor) [pid 3700] close(22) = -1 EBADF (Bad file descriptor) [pid 3700] close(23) = -1 EBADF (Bad file descriptor) [pid 3700] close(24) = -1 EBADF (Bad file descriptor) [pid 3700] close(25) = -1 EBADF (Bad file descriptor) [pid 3700] close(26) = -1 EBADF (Bad file descriptor) [pid 3700] close(27) = -1 EBADF (Bad file descriptor) [pid 3700] close(28) = -1 EBADF (Bad file descriptor) [pid 3700] close(29) = -1 EBADF (Bad file descriptor) [pid 3700] exit_group(0) = ? [pid 3700] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 83 ./strace-static-x86_64: Process 3701 attached [pid 3701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3701] setpgid(0, 0) = 0 [ 67.402892][ T3700] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.410955][ T3700] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.418941][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.426986][ T3700] R13: 00000000000f4240 R14: 0000000000010532 R15: 00007ffdc49a5924 [ 67.434951][ T3700] [pid 3701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3701] write(3, "1000", 4) = 4 [pid 3701] close(3) = 0 [pid 3701] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3701] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3701] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3701] write(4, "5", 1) = 1 [pid 3701] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.494697][ T3701] FAULT_INJECTION: forcing a failure. [ 67.494697][ T3701] name failslab, interval 1, probability 0, space 0, times 0 [ 67.507934][ T3701] CPU: 0 PID: 3701 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.518164][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.528227][ T3701] Call Trace: [ 67.532035][ T3701] [ 67.535679][ T3701] dump_stack_lvl+0xcd/0x134 [ 67.540310][ T3701] should_fail.cold+0x5/0xa [ 67.544840][ T3701] should_failslab+0x5/0x10 [ 67.549362][ T3701] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.554649][ T3701] ? ref_tracker_alloc+0x14c/0x550 [ 67.559759][ T3701] ref_tracker_alloc+0x14c/0x550 [ 67.564702][ T3701] ? ref_tracker_free+0x6b0/0x6b0 [ 67.569737][ T3701] ? lock_release+0x720/0x720 [ 67.574413][ T3701] ? do_raw_spin_lock+0x120/0x2a0 [ 67.579453][ T3701] ? rwlock_bug.part.0+0x90/0x90 [ 67.584484][ T3701] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.590052][ T3701] linkwatch_fire_event+0x202/0x260 [ 67.595261][ T3701] netif_carrier_off+0x96/0xb0 [ 67.600037][ T3701] __tun_detach+0xfe7/0x13e0 [ 67.604712][ T3701] tun_chr_close+0xc4/0x180 [ 67.609216][ T3701] __fput+0x277/0x9d0 [ 67.613190][ T3701] ? __tun_detach+0x13e0/0x13e0 [ 67.618033][ T3701] task_work_run+0xdd/0x1a0 [ 67.622532][ T3701] ptrace_notify+0x114/0x140 [ 67.627216][ T3701] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.633462][ T3701] syscall_exit_to_user_mode+0x9/0x60 [ 67.638854][ T3701] do_syscall_64+0x42/0xb0 [ 67.643286][ T3701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.649169][ T3701] RIP: 0033:0x7fc6cd2767a3 [ 67.653576][ T3701] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.673194][ T3701] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.681775][ T3701] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 67.689740][ T3701] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 67.697706][ T3701] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 67.705676][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.713652][ T3701] R13: 00000000000f4240 R14: 000000000001066a R15: 00007ffdc49a5924 [ 67.721627][ T3701] [pid 3701] close(3) = 0 [pid 3701] close(4) = 0 [pid 3701] close(5) = -1 EBADF (Bad file descriptor) [pid 3701] close(6) = -1 EBADF (Bad file descriptor) [pid 3701] close(7) = -1 EBADF (Bad file descriptor) [pid 3701] close(8) = -1 EBADF (Bad file descriptor) [pid 3701] close(9) = -1 EBADF (Bad file descriptor) [pid 3701] close(10) = -1 EBADF (Bad file descriptor) [pid 3701] close(11) = -1 EBADF (Bad file descriptor) [pid 3701] close(12) = -1 EBADF (Bad file descriptor) [pid 3701] close(13) = -1 EBADF (Bad file descriptor) [pid 3701] close(14) = -1 EBADF (Bad file descriptor) [pid 3701] close(15) = -1 EBADF (Bad file descriptor) [pid 3701] close(16) = -1 EBADF (Bad file descriptor) [pid 3701] close(17) = -1 EBADF (Bad file descriptor) [pid 3701] close(18) = -1 EBADF (Bad file descriptor) [pid 3701] close(19) = -1 EBADF (Bad file descriptor) [pid 3701] close(20) = -1 EBADF (Bad file descriptor) [pid 3701] close(21) = -1 EBADF (Bad file descriptor) [pid 3701] close(22) = -1 EBADF (Bad file descriptor) [pid 3701] close(23) = -1 EBADF (Bad file descriptor) [pid 3701] close(24) = -1 EBADF (Bad file descriptor) [pid 3701] close(25) = -1 EBADF (Bad file descriptor) [pid 3701] close(26) = -1 EBADF (Bad file descriptor) [pid 3701] close(27) = -1 EBADF (Bad file descriptor) [pid 3701] close(28) = -1 EBADF (Bad file descriptor) [pid 3701] close(29) = -1 EBADF (Bad file descriptor) [pid 3701] exit_group(0) = ? [pid 3701] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3702 attached [pid 3702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3702] setpgid(0, 0) = 0 [pid 3702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3702] write(3, "1000", 4) = 4 [pid 3702] close(3) = 0 [pid 3702] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 84 [pid 3702] <... openat resumed>) = 3 [pid 3702] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3702] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3702] write(4, "5", 1) = 1 [pid 3702] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 67.800549][ T3702] FAULT_INJECTION: forcing a failure. [ 67.800549][ T3702] name failslab, interval 1, probability 0, space 0, times 0 [ 67.813348][ T3702] CPU: 1 PID: 3702 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 67.823497][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.833549][ T3702] Call Trace: [ 67.836817][ T3702] [ 67.839732][ T3702] dump_stack_lvl+0xcd/0x134 [ 67.844316][ T3702] should_fail.cold+0x5/0xa [ 67.849086][ T3702] should_failslab+0x5/0x10 [ 67.853578][ T3702] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.858856][ T3702] ? ref_tracker_alloc+0x14c/0x550 [ 67.864046][ T3702] ref_tracker_alloc+0x14c/0x550 [ 67.868976][ T3702] ? ref_tracker_free+0x6b0/0x6b0 [ 67.874168][ T3702] ? lock_release+0x720/0x720 [ 67.878922][ T3702] ? do_raw_spin_lock+0x120/0x2a0 [ 67.883942][ T3702] ? rwlock_bug.part.0+0x90/0x90 [ 67.888866][ T3702] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 67.894230][ T3702] linkwatch_fire_event+0x202/0x260 [ 67.899424][ T3702] netif_carrier_off+0x96/0xb0 [ 67.904257][ T3702] __tun_detach+0xfe7/0x13e0 [ 67.908854][ T3702] tun_chr_close+0xc4/0x180 [ 67.913348][ T3702] __fput+0x277/0x9d0 [ 67.917514][ T3702] ? __tun_detach+0x13e0/0x13e0 [ 67.922371][ T3702] task_work_run+0xdd/0x1a0 [ 67.926867][ T3702] ptrace_notify+0x114/0x140 [ 67.931468][ T3702] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 67.937717][ T3702] syscall_exit_to_user_mode+0x9/0x60 [ 67.943098][ T3702] do_syscall_64+0x42/0xb0 [ 67.947607][ T3702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.953492][ T3702] RIP: 0033:0x7fc6cd2767a3 [ 67.957903][ T3702] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 67.977591][ T3702] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.986097][ T3702] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3702] close(3) = 0 [pid 3702] close(4) = 0 [pid 3702] close(5) = -1 EBADF (Bad file descriptor) [pid 3702] close(6) = -1 EBADF (Bad file descriptor) [pid 3702] close(7) = -1 EBADF (Bad file descriptor) [pid 3702] close(8) = -1 EBADF (Bad file descriptor) [pid 3702] close(9) = -1 EBADF (Bad file descriptor) [pid 3702] close(10) = -1 EBADF (Bad file descriptor) [pid 3702] close(11) = -1 EBADF (Bad file descriptor) [pid 3702] close(12) = -1 EBADF (Bad file descriptor) [pid 3702] close(13) = -1 EBADF (Bad file descriptor) [pid 3702] close(14) = -1 EBADF (Bad file descriptor) [pid 3702] close(15) = -1 EBADF (Bad file descriptor) [pid 3702] close(16) = -1 EBADF (Bad file descriptor) [pid 3702] close(17) = -1 EBADF (Bad file descriptor) [pid 3702] close(18) = -1 EBADF (Bad file descriptor) [pid 3702] close(19) = -1 EBADF (Bad file descriptor) [pid 3702] close(20) = -1 EBADF (Bad file descriptor) [pid 3702] close(21) = -1 EBADF (Bad file descriptor) [pid 3702] close(22) = -1 EBADF (Bad file descriptor) [pid 3702] close(23) = -1 EBADF (Bad file descriptor) [pid 3702] close(24) = -1 EBADF (Bad file descriptor) [pid 3702] close(25) = -1 EBADF (Bad file descriptor) [pid 3702] close(26) = -1 EBADF (Bad file descriptor) [pid 3702] close(27) = -1 EBADF (Bad file descriptor) [pid 3702] close(28) = -1 EBADF (Bad file descriptor) [ 67.994417][ T3702] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.002461][ T3702] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.010429][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.018399][ T3702] R13: 00000000000f4240 R14: 000000000001078b R15: 00007ffdc49a5924 [ 68.026368][ T3702] [pid 3702] close(29) = -1 EBADF (Bad file descriptor) [pid 3702] exit_group(0) = ? [pid 3702] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 85 ./strace-static-x86_64: Process 3703 attached [pid 3703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3703] setpgid(0, 0) = 0 [pid 3703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3703] write(3, "1000", 4) = 4 [pid 3703] close(3) = 0 [pid 3703] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3703] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3703] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3703] write(4, "5", 1) = 1 [pid 3703] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.092818][ T3703] FAULT_INJECTION: forcing a failure. [ 68.092818][ T3703] name failslab, interval 1, probability 0, space 0, times 0 [ 68.105522][ T3703] CPU: 0 PID: 3703 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.115845][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.126109][ T3703] Call Trace: [ 68.129380][ T3703] [ 68.132317][ T3703] dump_stack_lvl+0xcd/0x134 [ 68.136913][ T3703] should_fail.cold+0x5/0xa [ 68.141448][ T3703] should_failslab+0x5/0x10 [ 68.145960][ T3703] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.151261][ T3703] ? ref_tracker_alloc+0x14c/0x550 [ 68.156377][ T3703] ref_tracker_alloc+0x14c/0x550 [ 68.161312][ T3703] ? ref_tracker_free+0x6b0/0x6b0 [ 68.166331][ T3703] ? lock_release+0x720/0x720 [ 68.170999][ T3703] ? do_raw_spin_lock+0x120/0x2a0 [ 68.176014][ T3703] ? rwlock_bug.part.0+0x90/0x90 [ 68.180952][ T3703] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.186324][ T3703] linkwatch_fire_event+0x202/0x260 [ 68.191520][ T3703] netif_carrier_off+0x96/0xb0 [ 68.196273][ T3703] __tun_detach+0xfe7/0x13e0 [ 68.200860][ T3703] tun_chr_close+0xc4/0x180 [ 68.205352][ T3703] __fput+0x277/0x9d0 [ 68.209330][ T3703] ? __tun_detach+0x13e0/0x13e0 [ 68.214180][ T3703] task_work_run+0xdd/0x1a0 [ 68.218680][ T3703] ptrace_notify+0x114/0x140 [ 68.223263][ T3703] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.229506][ T3703] syscall_exit_to_user_mode+0x9/0x60 [ 68.234879][ T3703] do_syscall_64+0x42/0xb0 [ 68.239299][ T3703] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.245190][ T3703] RIP: 0033:0x7fc6cd2767a3 [ 68.249599][ T3703] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.269294][ T3703] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.277706][ T3703] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.285665][ T3703] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.293624][ T3703] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.301593][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.309567][ T3703] R13: 00000000000f4240 R14: 00000000000108be R15: 00007ffdc49a5924 [ 68.317551][ T3703] [pid 3703] close(3) = 0 [pid 3703] close(4) = 0 [pid 3703] close(5) = -1 EBADF (Bad file descriptor) [pid 3703] close(6) = -1 EBADF (Bad file descriptor) [pid 3703] close(7) = -1 EBADF (Bad file descriptor) [pid 3703] close(8) = -1 EBADF (Bad file descriptor) [pid 3703] close(9) = -1 EBADF (Bad file descriptor) [pid 3703] close(10) = -1 EBADF (Bad file descriptor) [pid 3703] close(11) = -1 EBADF (Bad file descriptor) [pid 3703] close(12) = -1 EBADF (Bad file descriptor) [pid 3703] close(13) = -1 EBADF (Bad file descriptor) [pid 3703] close(14) = -1 EBADF (Bad file descriptor) [pid 3703] close(15) = -1 EBADF (Bad file descriptor) [pid 3703] close(16) = -1 EBADF (Bad file descriptor) [pid 3703] close(17) = -1 EBADF (Bad file descriptor) [pid 3703] close(18) = -1 EBADF (Bad file descriptor) [pid 3703] close(19) = -1 EBADF (Bad file descriptor) [pid 3703] close(20) = -1 EBADF (Bad file descriptor) [pid 3703] close(21) = -1 EBADF (Bad file descriptor) [pid 3703] close(22) = -1 EBADF (Bad file descriptor) [pid 3703] close(23) = -1 EBADF (Bad file descriptor) [pid 3703] close(24) = -1 EBADF (Bad file descriptor) [pid 3703] close(25) = -1 EBADF (Bad file descriptor) [pid 3703] close(26) = -1 EBADF (Bad file descriptor) [pid 3703] close(27) = -1 EBADF (Bad file descriptor) [pid 3703] close(28) = -1 EBADF (Bad file descriptor) [pid 3703] close(29) = -1 EBADF (Bad file descriptor) [pid 3703] exit_group(0) = ? [pid 3703] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3704 attached , child_tidptr=0x5555570bd5d0) = 86 [pid 3704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3704] setpgid(0, 0) = 0 [pid 3704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3704] write(3, "1000", 4) = 4 [pid 3704] close(3) = 0 [pid 3704] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3704] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3704] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3704] write(4, "5", 1) = 1 [pid 3704] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.405402][ T3704] FAULT_INJECTION: forcing a failure. [ 68.405402][ T3704] name failslab, interval 1, probability 0, space 0, times 0 [ 68.418131][ T3704] CPU: 1 PID: 3704 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.428483][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.438548][ T3704] Call Trace: [ 68.441829][ T3704] [ 68.444747][ T3704] dump_stack_lvl+0xcd/0x134 [ 68.449330][ T3704] should_fail.cold+0x5/0xa [ 68.453833][ T3704] should_failslab+0x5/0x10 [ 68.458349][ T3704] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.463622][ T3704] ? ref_tracker_alloc+0x14c/0x550 [ 68.468811][ T3704] ref_tracker_alloc+0x14c/0x550 [ 68.473751][ T3704] ? ref_tracker_free+0x6b0/0x6b0 [ 68.478767][ T3704] ? lock_release+0x720/0x720 [ 68.483453][ T3704] ? do_raw_spin_lock+0x120/0x2a0 [ 68.488470][ T3704] ? rwlock_bug.part.0+0x90/0x90 [ 68.493415][ T3704] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.498967][ T3704] linkwatch_fire_event+0x202/0x260 [ 68.504168][ T3704] netif_carrier_off+0x96/0xb0 [ 68.508920][ T3704] __tun_detach+0xfe7/0x13e0 [ 68.513505][ T3704] tun_chr_close+0xc4/0x180 [ 68.517993][ T3704] __fput+0x277/0x9d0 [ 68.521961][ T3704] ? __tun_detach+0x13e0/0x13e0 [ 68.526798][ T3704] task_work_run+0xdd/0x1a0 [ 68.531292][ T3704] ptrace_notify+0x114/0x140 [ 68.535871][ T3704] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.542102][ T3704] syscall_exit_to_user_mode+0x9/0x60 [ 68.547462][ T3704] do_syscall_64+0x42/0xb0 [ 68.551870][ T3704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.557750][ T3704] RIP: 0033:0x7fc6cd2767a3 [ 68.562147][ T3704] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.581751][ T3704] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.590148][ T3704] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.598104][ T3704] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3704] close(3) = 0 [pid 3704] close(4) = 0 [pid 3704] close(5) = -1 EBADF (Bad file descriptor) [pid 3704] close(6) = -1 EBADF (Bad file descriptor) [pid 3704] close(7) = -1 EBADF (Bad file descriptor) [pid 3704] close(8) = -1 EBADF (Bad file descriptor) [pid 3704] close(9) = -1 EBADF (Bad file descriptor) [pid 3704] close(10) = -1 EBADF (Bad file descriptor) [pid 3704] close(11) = -1 EBADF (Bad file descriptor) [pid 3704] close(12) = -1 EBADF (Bad file descriptor) [pid 3704] close(13) = -1 EBADF (Bad file descriptor) [pid 3704] close(14) = -1 EBADF (Bad file descriptor) [pid 3704] close(15) = -1 EBADF (Bad file descriptor) [pid 3704] close(16) = -1 EBADF (Bad file descriptor) [pid 3704] close(17) = -1 EBADF (Bad file descriptor) [pid 3704] close(18) = -1 EBADF (Bad file descriptor) [ 68.606071][ T3704] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.614027][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.622169][ T3704] R13: 00000000000f4240 R14: 00000000000109df R15: 00007ffdc49a5924 [ 68.630140][ T3704] [pid 3704] close(19) = -1 EBADF (Bad file descriptor) [pid 3704] close(20) = -1 EBADF (Bad file descriptor) [pid 3704] close(21) = -1 EBADF (Bad file descriptor) [pid 3704] close(22) = -1 EBADF (Bad file descriptor) [pid 3704] close(23) = -1 EBADF (Bad file descriptor) [pid 3704] close(24) = -1 EBADF (Bad file descriptor) [pid 3704] close(25) = -1 EBADF (Bad file descriptor) [pid 3704] close(26) = -1 EBADF (Bad file descriptor) [pid 3704] close(27) = -1 EBADF (Bad file descriptor) [pid 3704] close(28) = -1 EBADF (Bad file descriptor) [pid 3704] close(29) = -1 EBADF (Bad file descriptor) [pid 3704] exit_group(0) = ? [pid 3704] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3705 attached , child_tidptr=0x5555570bd5d0) = 87 [pid 3705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3705] setpgid(0, 0) = 0 [pid 3705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3705] write(3, "1000", 4) = 4 [pid 3705] close(3) = 0 [pid 3705] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3705] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3705] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3705] write(4, "5", 1) = 1 [pid 3705] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 68.703272][ T3705] FAULT_INJECTION: forcing a failure. [ 68.703272][ T3705] name failslab, interval 1, probability 0, space 0, times 0 [ 68.716631][ T3705] CPU: 0 PID: 3705 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 68.726773][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.736907][ T3705] Call Trace: [ 68.740164][ T3705] [ 68.743072][ T3705] dump_stack_lvl+0xcd/0x134 [ 68.747667][ T3705] should_fail.cold+0x5/0xa [ 68.752152][ T3705] should_failslab+0x5/0x10 [ 68.756632][ T3705] kmem_cache_alloc_trace+0x60/0x3f0 [ 68.761895][ T3705] ? ref_tracker_alloc+0x14c/0x550 [ 68.766984][ T3705] ref_tracker_alloc+0x14c/0x550 [ 68.772087][ T3705] ? ref_tracker_free+0x6b0/0x6b0 [ 68.777086][ T3705] ? lock_release+0x720/0x720 [ 68.781741][ T3705] ? do_raw_spin_lock+0x120/0x2a0 [ 68.786761][ T3705] ? rwlock_bug.part.0+0x90/0x90 [ 68.791677][ T3705] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 68.797180][ T3705] linkwatch_fire_event+0x202/0x260 [ 68.802833][ T3705] netif_carrier_off+0x96/0xb0 [ 68.807592][ T3705] __tun_detach+0xfe7/0x13e0 [ 68.812181][ T3705] tun_chr_close+0xc4/0x180 [ 68.816660][ T3705] __fput+0x277/0x9d0 [ 68.820621][ T3705] ? __tun_detach+0x13e0/0x13e0 [ 68.825459][ T3705] task_work_run+0xdd/0x1a0 [ 68.830051][ T3705] ptrace_notify+0x114/0x140 [ 68.834623][ T3705] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 68.840844][ T3705] syscall_exit_to_user_mode+0x9/0x60 [ 68.846204][ T3705] do_syscall_64+0x42/0xb0 [ 68.850631][ T3705] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.856504][ T3705] RIP: 0033:0x7fc6cd2767a3 [ 68.860896][ T3705] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 68.880584][ T3705] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.888995][ T3705] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 68.896949][ T3705] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 68.904913][ T3705] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 68.912860][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.921244][ T3705] R13: 00000000000f4240 R14: 0000000000010b19 R15: 00007ffdc49a5924 [ 68.929207][ T3705] [pid 3705] close(3) = 0 [pid 3705] close(4) = 0 [pid 3705] close(5) = -1 EBADF (Bad file descriptor) [pid 3705] close(6) = -1 EBADF (Bad file descriptor) [pid 3705] close(7) = -1 EBADF (Bad file descriptor) [pid 3705] close(8) = -1 EBADF (Bad file descriptor) [pid 3705] close(9) = -1 EBADF (Bad file descriptor) [pid 3705] close(10) = -1 EBADF (Bad file descriptor) [pid 3705] close(11) = -1 EBADF (Bad file descriptor) [pid 3705] close(12) = -1 EBADF (Bad file descriptor) [pid 3705] close(13) = -1 EBADF (Bad file descriptor) [pid 3705] close(14) = -1 EBADF (Bad file descriptor) [pid 3705] close(15) = -1 EBADF (Bad file descriptor) [pid 3705] close(16) = -1 EBADF (Bad file descriptor) [pid 3705] close(17) = -1 EBADF (Bad file descriptor) [pid 3705] close(18) = -1 EBADF (Bad file descriptor) [pid 3705] close(19) = -1 EBADF (Bad file descriptor) [pid 3705] close(20) = -1 EBADF (Bad file descriptor) [pid 3705] close(21) = -1 EBADF (Bad file descriptor) [pid 3705] close(22) = -1 EBADF (Bad file descriptor) [pid 3705] close(23) = -1 EBADF (Bad file descriptor) [pid 3705] close(24) = -1 EBADF (Bad file descriptor) [pid 3705] close(25) = -1 EBADF (Bad file descriptor) [pid 3705] close(26) = -1 EBADF (Bad file descriptor) [pid 3705] close(27) = -1 EBADF (Bad file descriptor) [pid 3705] close(28) = -1 EBADF (Bad file descriptor) [pid 3705] close(29) = -1 EBADF (Bad file descriptor) [pid 3705] exit_group(0) = ? [pid 3705] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3706 attached [pid 3706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3706] setpgid(0, 0) = 0 [pid 3706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3706] write(3, "1000", 4) = 4 [pid 3706] close(3) = 0 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 88 [pid 3706] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3706] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3706] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3706] write(4, "5", 1) = 1 [pid 3706] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.011734][ T3706] FAULT_INJECTION: forcing a failure. [ 69.011734][ T3706] name failslab, interval 1, probability 0, space 0, times 0 [ 69.024708][ T3706] CPU: 0 PID: 3706 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.035025][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.045062][ T3706] Call Trace: [ 69.048328][ T3706] [ 69.051246][ T3706] dump_stack_lvl+0xcd/0x134 [ 69.055844][ T3706] should_fail.cold+0x5/0xa [ 69.060342][ T3706] should_failslab+0x5/0x10 [ 69.065038][ T3706] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.070309][ T3706] ? ref_tracker_alloc+0x14c/0x550 [ 69.075588][ T3706] ref_tracker_alloc+0x14c/0x550 [ 69.080601][ T3706] ? ref_tracker_free+0x6b0/0x6b0 [ 69.085623][ T3706] ? lock_release+0x720/0x720 [ 69.090291][ T3706] ? do_raw_spin_lock+0x120/0x2a0 [ 69.095478][ T3706] ? rwlock_bug.part.0+0x90/0x90 [ 69.100402][ T3706] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.105872][ T3706] linkwatch_fire_event+0x202/0x260 [ 69.111067][ T3706] netif_carrier_off+0x96/0xb0 [ 69.115818][ T3706] __tun_detach+0xfe7/0x13e0 [ 69.120582][ T3706] tun_chr_close+0xc4/0x180 [ 69.125243][ T3706] __fput+0x277/0x9d0 [ 69.129297][ T3706] ? __tun_detach+0x13e0/0x13e0 [ 69.134136][ T3706] task_work_run+0xdd/0x1a0 [ 69.138716][ T3706] ptrace_notify+0x114/0x140 [ 69.143295][ T3706] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.149611][ T3706] syscall_exit_to_user_mode+0x9/0x60 [ 69.154968][ T3706] do_syscall_64+0x42/0xb0 [ 69.159371][ T3706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.165252][ T3706] RIP: 0033:0x7fc6cd2767a3 [ 69.169649][ T3706] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.189256][ T3706] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.197651][ T3706] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3706] close(3) = 0 [pid 3706] close(4) = 0 [pid 3706] close(5) = -1 EBADF (Bad file descriptor) [pid 3706] close(6) = -1 EBADF (Bad file descriptor) [pid 3706] close(7) = -1 EBADF (Bad file descriptor) [pid 3706] close(8) = -1 EBADF (Bad file descriptor) [pid 3706] close(9) = -1 EBADF (Bad file descriptor) [pid 3706] close(10) = -1 EBADF (Bad file descriptor) [pid 3706] close(11) = -1 EBADF (Bad file descriptor) [pid 3706] close(12) = -1 EBADF (Bad file descriptor) [pid 3706] close(13) = -1 EBADF (Bad file descriptor) [pid 3706] close(14) = -1 EBADF (Bad file descriptor) [pid 3706] close(15) = -1 EBADF (Bad file descriptor) [pid 3706] close(16) = -1 EBADF (Bad file descriptor) [pid 3706] close(17) = -1 EBADF (Bad file descriptor) [pid 3706] close(18) = -1 EBADF (Bad file descriptor) [pid 3706] close(19) = -1 EBADF (Bad file descriptor) [pid 3706] close(20) = -1 EBADF (Bad file descriptor) [pid 3706] close(21) = -1 EBADF (Bad file descriptor) [pid 3706] close(22) = -1 EBADF (Bad file descriptor) [pid 3706] close(23) = -1 EBADF (Bad file descriptor) [pid 3706] close(24) = -1 EBADF (Bad file descriptor) [pid 3706] close(25) = -1 EBADF (Bad file descriptor) [pid 3706] close(26) = -1 EBADF (Bad file descriptor) [pid 3706] close(27) = -1 EBADF (Bad file descriptor) [pid 3706] close(28) = -1 EBADF (Bad file descriptor) [pid 3706] close(29) = -1 EBADF (Bad file descriptor) [pid 3706] exit_group(0) = ? [pid 3706] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 89 ./strace-static-x86_64: Process 3707 attached [pid 3707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3707] setpgid(0, 0) = 0 [pid 3707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3707] write(3, "1000", 4) = 4 [pid 3707] close(3) = 0 [pid 3707] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 69.205884][ T3706] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.213924][ T3706] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.221876][ T3706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.229828][ T3706] R13: 00000000000f4240 R14: 0000000000010c40 R15: 00007ffdc49a5924 [ 69.237797][ T3706] [pid 3707] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3707] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3707] write(4, "5", 1) = 1 [pid 3707] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.296938][ T3707] FAULT_INJECTION: forcing a failure. [ 69.296938][ T3707] name failslab, interval 1, probability 0, space 0, times 0 [ 69.309998][ T3707] CPU: 0 PID: 3707 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.321163][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.331555][ T3707] Call Trace: [ 69.334821][ T3707] [ 69.337732][ T3707] dump_stack_lvl+0xcd/0x134 [ 69.342317][ T3707] should_fail.cold+0x5/0xa [ 69.346814][ T3707] should_failslab+0x5/0x10 [ 69.351302][ T3707] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.356585][ T3707] ? ref_tracker_alloc+0x14c/0x550 [ 69.361688][ T3707] ref_tracker_alloc+0x14c/0x550 [ 69.366782][ T3707] ? ref_tracker_free+0x6b0/0x6b0 [ 69.371804][ T3707] ? lock_release+0x720/0x720 [ 69.376470][ T3707] ? do_raw_spin_lock+0x120/0x2a0 [ 69.381479][ T3707] ? rwlock_bug.part.0+0x90/0x90 [ 69.386409][ T3707] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.392496][ T3707] linkwatch_fire_event+0x202/0x260 [ 69.397717][ T3707] netif_carrier_off+0x96/0xb0 [ 69.402474][ T3707] __tun_detach+0xfe7/0x13e0 [ 69.407062][ T3707] tun_chr_close+0xc4/0x180 [ 69.411875][ T3707] __fput+0x277/0x9d0 [ 69.415878][ T3707] ? __tun_detach+0x13e0/0x13e0 [ 69.420831][ T3707] task_work_run+0xdd/0x1a0 [ 69.425341][ T3707] ptrace_notify+0x114/0x140 [ 69.430197][ T3707] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.436623][ T3707] syscall_exit_to_user_mode+0x9/0x60 [ 69.442007][ T3707] do_syscall_64+0x42/0xb0 [ 69.446438][ T3707] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.452339][ T3707] RIP: 0033:0x7fc6cd2767a3 [ 69.457110][ T3707] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.476722][ T3707] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.485156][ T3707] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 69.493147][ T3707] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.501121][ T3707] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.509265][ T3707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.517238][ T3707] R13: 00000000000f4240 R14: 0000000000010d79 R15: 00007ffdc49a5924 [ 69.525829][ T3707] [pid 3707] close(3) = 0 [pid 3707] close(4) = 0 [pid 3707] close(5) = -1 EBADF (Bad file descriptor) [pid 3707] close(6) = -1 EBADF (Bad file descriptor) [pid 3707] close(7) = -1 EBADF (Bad file descriptor) [pid 3707] close(8) = -1 EBADF (Bad file descriptor) [pid 3707] close(9) = -1 EBADF (Bad file descriptor) [pid 3707] close(10) = -1 EBADF (Bad file descriptor) [pid 3707] close(11) = -1 EBADF (Bad file descriptor) [pid 3707] close(12) = -1 EBADF (Bad file descriptor) [pid 3707] close(13) = -1 EBADF (Bad file descriptor) [pid 3707] close(14) = -1 EBADF (Bad file descriptor) [pid 3707] close(15) = -1 EBADF (Bad file descriptor) [pid 3707] close(16) = -1 EBADF (Bad file descriptor) [pid 3707] close(17) = -1 EBADF (Bad file descriptor) [pid 3707] close(18) = -1 EBADF (Bad file descriptor) [pid 3707] close(19) = -1 EBADF (Bad file descriptor) [pid 3707] close(20) = -1 EBADF (Bad file descriptor) [pid 3707] close(21) = -1 EBADF (Bad file descriptor) [pid 3707] close(22) = -1 EBADF (Bad file descriptor) [pid 3707] close(23) = -1 EBADF (Bad file descriptor) [pid 3707] close(24) = -1 EBADF (Bad file descriptor) [pid 3707] close(25) = -1 EBADF (Bad file descriptor) [pid 3707] close(26) = -1 EBADF (Bad file descriptor) [pid 3707] close(27) = -1 EBADF (Bad file descriptor) [pid 3707] close(28) = -1 EBADF (Bad file descriptor) [pid 3707] close(29) = -1 EBADF (Bad file descriptor) [pid 3707] exit_group(0) = ? [pid 3707] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 90 ./strace-static-x86_64: Process 3708 attached [pid 3708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3708] setpgid(0, 0) = 0 [pid 3708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3708] write(3, "1000", 4) = 4 [pid 3708] close(3) = 0 [pid 3708] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3708] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3708] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3708] write(4, "5", 1) = 1 [pid 3708] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.605568][ T3708] FAULT_INJECTION: forcing a failure. [ 69.605568][ T3708] name failslab, interval 1, probability 0, space 0, times 0 [ 69.619023][ T3708] CPU: 1 PID: 3708 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.629580][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.639648][ T3708] Call Trace: [ 69.642937][ T3708] [ 69.645854][ T3708] dump_stack_lvl+0xcd/0x134 [ 69.650467][ T3708] should_fail.cold+0x5/0xa [ 69.654966][ T3708] should_failslab+0x5/0x10 [ 69.659466][ T3708] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.664760][ T3708] ? ref_tracker_alloc+0x14c/0x550 [ 69.669890][ T3708] ref_tracker_alloc+0x14c/0x550 [ 69.674848][ T3708] ? ref_tracker_free+0x6b0/0x6b0 [ 69.679862][ T3708] ? lock_release+0x720/0x720 [ 69.684536][ T3708] ? do_raw_spin_lock+0x120/0x2a0 [ 69.689574][ T3708] ? rwlock_bug.part.0+0x90/0x90 [ 69.694511][ T3708] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.699889][ T3708] linkwatch_fire_event+0x202/0x260 [ 69.705095][ T3708] netif_carrier_off+0x96/0xb0 [ 69.709861][ T3708] __tun_detach+0xfe7/0x13e0 [ 69.714470][ T3708] tun_chr_close+0xc4/0x180 [ 69.718966][ T3708] __fput+0x277/0x9d0 [ 69.722941][ T3708] ? __tun_detach+0x13e0/0x13e0 [ 69.727803][ T3708] task_work_run+0xdd/0x1a0 [ 69.732308][ T3708] ptrace_notify+0x114/0x140 [ 69.736907][ T3708] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 69.743166][ T3708] syscall_exit_to_user_mode+0x9/0x60 [ 69.748553][ T3708] do_syscall_64+0x42/0xb0 [ 69.752978][ T3708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.758867][ T3708] RIP: 0033:0x7fc6cd2767a3 [ 69.763275][ T3708] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 69.782967][ T3708] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.791381][ T3708] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3708] close(3) = 0 [pid 3708] close(4) = 0 [pid 3708] close(5) = -1 EBADF (Bad file descriptor) [pid 3708] close(6) = -1 EBADF (Bad file descriptor) [pid 3708] close(7) = -1 EBADF (Bad file descriptor) [pid 3708] close(8) = -1 EBADF (Bad file descriptor) [pid 3708] close(9) = -1 EBADF (Bad file descriptor) [pid 3708] close(10) = -1 EBADF (Bad file descriptor) [pid 3708] close(11) = -1 EBADF (Bad file descriptor) [pid 3708] close(12) = -1 EBADF (Bad file descriptor) [pid 3708] close(13) = -1 EBADF (Bad file descriptor) [pid 3708] close(14) = -1 EBADF (Bad file descriptor) [pid 3708] close(15) = -1 EBADF (Bad file descriptor) [pid 3708] close(16) = -1 EBADF (Bad file descriptor) [pid 3708] close(17) = -1 EBADF (Bad file descriptor) [pid 3708] close(18) = -1 EBADF (Bad file descriptor) [pid 3708] close(19) = -1 EBADF (Bad file descriptor) [pid 3708] close(20) = -1 EBADF (Bad file descriptor) [pid 3708] close(21) = -1 EBADF (Bad file descriptor) [pid 3708] close(22) = -1 EBADF (Bad file descriptor) [pid 3708] close(23) = -1 EBADF (Bad file descriptor) [pid 3708] close(24) = -1 EBADF (Bad file descriptor) [pid 3708] close(25) = -1 EBADF (Bad file descriptor) [pid 3708] close(26) = -1 EBADF (Bad file descriptor) [pid 3708] close(27) = -1 EBADF (Bad file descriptor) [pid 3708] close(28) = -1 EBADF (Bad file descriptor) [pid 3708] close(29) = -1 EBADF (Bad file descriptor) [pid 3708] exit_group(0) = ? [pid 3708] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3709 attached , child_tidptr=0x5555570bd5d0) = 91 [pid 3709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3709] setpgid(0, 0) = 0 [ 69.799537][ T3708] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 69.807519][ T3708] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 69.815572][ T3708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.823903][ T3708] R13: 00000000000f4240 R14: 0000000000010e98 R15: 00007ffdc49a5924 [ 69.831901][ T3708] [pid 3709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3709] write(3, "1000", 4) = 4 [pid 3709] close(3) = 0 [pid 3709] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3709] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3709] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3709] write(4, "5", 1) = 1 [pid 3709] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 69.897137][ T3709] FAULT_INJECTION: forcing a failure. [ 69.897137][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 69.910536][ T3709] CPU: 1 PID: 3709 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 69.920772][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.930823][ T3709] Call Trace: [ 69.934093][ T3709] [ 69.937014][ T3709] dump_stack_lvl+0xcd/0x134 [ 69.941623][ T3709] should_fail.cold+0x5/0xa [ 69.946136][ T3709] should_failslab+0x5/0x10 [ 69.950640][ T3709] kmem_cache_alloc_trace+0x60/0x3f0 [ 69.955933][ T3709] ? ref_tracker_alloc+0x14c/0x550 [ 69.961132][ T3709] ref_tracker_alloc+0x14c/0x550 [ 69.966078][ T3709] ? ref_tracker_free+0x6b0/0x6b0 [ 69.971098][ T3709] ? lock_release+0x720/0x720 [ 69.975769][ T3709] ? do_raw_spin_lock+0x120/0x2a0 [ 69.980789][ T3709] ? rwlock_bug.part.0+0x90/0x90 [ 69.985724][ T3709] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 69.991093][ T3709] linkwatch_fire_event+0x202/0x260 [ 69.996378][ T3709] netif_carrier_off+0x96/0xb0 [ 70.001132][ T3709] __tun_detach+0xfe7/0x13e0 [ 70.005717][ T3709] tun_chr_close+0xc4/0x180 [ 70.010209][ T3709] __fput+0x277/0x9d0 [ 70.014184][ T3709] ? __tun_detach+0x13e0/0x13e0 [ 70.019035][ T3709] task_work_run+0xdd/0x1a0 [ 70.023539][ T3709] ptrace_notify+0x114/0x140 [ 70.028128][ T3709] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.034811][ T3709] syscall_exit_to_user_mode+0x9/0x60 [ 70.040187][ T3709] do_syscall_64+0x42/0xb0 [ 70.044604][ T3709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.050497][ T3709] RIP: 0033:0x7fc6cd2767a3 [ 70.054912][ T3709] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.074527][ T3709] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.082966][ T3709] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3709] close(3) = 0 [pid 3709] close(4) = 0 [pid 3709] close(5) = -1 EBADF (Bad file descriptor) [ 70.090943][ T3709] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 70.098911][ T3709] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.106875][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.115010][ T3709] R13: 00000000000f4240 R14: 0000000000010fc6 R15: 00007ffdc49a5924 [ 70.123018][ T3709] [pid 3709] close(6) = -1 EBADF (Bad file descriptor) [pid 3709] close(7) = -1 EBADF (Bad file descriptor) [pid 3709] close(8) = -1 EBADF (Bad file descriptor) [pid 3709] close(9) = -1 EBADF (Bad file descriptor) [pid 3709] close(10) = -1 EBADF (Bad file descriptor) [pid 3709] close(11) = -1 EBADF (Bad file descriptor) [pid 3709] close(12) = -1 EBADF (Bad file descriptor) [pid 3709] close(13) = -1 EBADF (Bad file descriptor) [pid 3709] close(14) = -1 EBADF (Bad file descriptor) [pid 3709] close(15) = -1 EBADF (Bad file descriptor) [pid 3709] close(16) = -1 EBADF (Bad file descriptor) [pid 3709] close(17) = -1 EBADF (Bad file descriptor) [pid 3709] close(18) = -1 EBADF (Bad file descriptor) [pid 3709] close(19) = -1 EBADF (Bad file descriptor) [pid 3709] close(20) = -1 EBADF (Bad file descriptor) [pid 3709] close(21) = -1 EBADF (Bad file descriptor) [pid 3709] close(22) = -1 EBADF (Bad file descriptor) [pid 3709] close(23) = -1 EBADF (Bad file descriptor) [pid 3709] close(24) = -1 EBADF (Bad file descriptor) [pid 3709] close(25) = -1 EBADF (Bad file descriptor) [pid 3709] close(26) = -1 EBADF (Bad file descriptor) [pid 3709] close(27) = -1 EBADF (Bad file descriptor) [pid 3709] close(28) = -1 EBADF (Bad file descriptor) [pid 3709] close(29) = -1 EBADF (Bad file descriptor) [pid 3709] exit_group(0) = ? [pid 3709] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3710 attached , child_tidptr=0x5555570bd5d0) = 92 [pid 3710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3710] setpgid(0, 0) = 0 [pid 3710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3710] write(3, "1000", 4) = 4 [pid 3710] close(3) = 0 [pid 3710] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3710] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3710] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3710] write(4, "5", 1) = 1 [pid 3710] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.209721][ T3710] FAULT_INJECTION: forcing a failure. [ 70.209721][ T3710] name failslab, interval 1, probability 0, space 0, times 0 [ 70.222628][ T3710] CPU: 1 PID: 3710 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.233139][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.243201][ T3710] Call Trace: [ 70.246491][ T3710] [ 70.249423][ T3710] dump_stack_lvl+0xcd/0x134 [ 70.254026][ T3710] should_fail.cold+0x5/0xa [ 70.258545][ T3710] should_failslab+0x5/0x10 [ 70.263053][ T3710] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.268360][ T3710] ? ref_tracker_alloc+0x14c/0x550 [ 70.273486][ T3710] ref_tracker_alloc+0x14c/0x550 [ 70.278433][ T3710] ? ref_tracker_free+0x6b0/0x6b0 [ 70.283466][ T3710] ? lock_release+0x720/0x720 [ 70.288176][ T3710] ? do_raw_spin_lock+0x120/0x2a0 [ 70.293296][ T3710] ? rwlock_bug.part.0+0x90/0x90 [ 70.298243][ T3710] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.303628][ T3710] linkwatch_fire_event+0x202/0x260 [ 70.308938][ T3710] netif_carrier_off+0x96/0xb0 [ 70.313732][ T3710] __tun_detach+0xfe7/0x13e0 [ 70.318346][ T3710] tun_chr_close+0xc4/0x180 [ 70.322885][ T3710] __fput+0x277/0x9d0 [ 70.326875][ T3710] ? __tun_detach+0x13e0/0x13e0 [ 70.331740][ T3710] task_work_run+0xdd/0x1a0 [ 70.336275][ T3710] ptrace_notify+0x114/0x140 [ 70.340886][ T3710] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.347167][ T3710] syscall_exit_to_user_mode+0x9/0x60 [ 70.352553][ T3710] do_syscall_64+0x42/0xb0 [ 70.356993][ T3710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.362895][ T3710] RIP: 0033:0x7fc6cd2767a3 [ 70.367312][ T3710] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.386917][ T3710] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.395348][ T3710] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 70.403317][ T3710] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 70.411298][ T3710] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.419284][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.427248][ T3710] R13: 00000000000f4240 R14: 00000000000110e8 R15: 00007ffdc49a5924 [ 70.435242][ T3710] [pid 3710] close(3) = 0 [pid 3710] close(4) = 0 [pid 3710] close(5) = -1 EBADF (Bad file descriptor) [pid 3710] close(6) = -1 EBADF (Bad file descriptor) [pid 3710] close(7) = -1 EBADF (Bad file descriptor) [pid 3710] close(8) = -1 EBADF (Bad file descriptor) [pid 3710] close(9) = -1 EBADF (Bad file descriptor) [pid 3710] close(10) = -1 EBADF (Bad file descriptor) [pid 3710] close(11) = -1 EBADF (Bad file descriptor) [pid 3710] close(12) = -1 EBADF (Bad file descriptor) [pid 3710] close(13) = -1 EBADF (Bad file descriptor) [pid 3710] close(14) = -1 EBADF (Bad file descriptor) [pid 3710] close(15) = -1 EBADF (Bad file descriptor) [pid 3710] close(16) = -1 EBADF (Bad file descriptor) [pid 3710] close(17) = -1 EBADF (Bad file descriptor) [pid 3710] close(18) = -1 EBADF (Bad file descriptor) [pid 3710] close(19) = -1 EBADF (Bad file descriptor) [pid 3710] close(20) = -1 EBADF (Bad file descriptor) [pid 3710] close(21) = -1 EBADF (Bad file descriptor) [pid 3710] close(22) = -1 EBADF (Bad file descriptor) [pid 3710] close(23) = -1 EBADF (Bad file descriptor) [pid 3710] close(24) = -1 EBADF (Bad file descriptor) [pid 3710] close(25) = -1 EBADF (Bad file descriptor) [pid 3710] close(26) = -1 EBADF (Bad file descriptor) [pid 3710] close(27) = -1 EBADF (Bad file descriptor) [pid 3710] close(28) = -1 EBADF (Bad file descriptor) [pid 3710] close(29) = -1 EBADF (Bad file descriptor) [pid 3710] exit_group(0) = ? [pid 3710] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 93 ./strace-static-x86_64: Process 3711 attached [pid 3711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3711] setpgid(0, 0) = 0 [pid 3711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3711] write(3, "1000", 4) = 4 [pid 3711] close(3) = 0 [pid 3711] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3711] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3711] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3711] write(4, "5", 1) = 1 [pid 3711] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.515370][ T3711] FAULT_INJECTION: forcing a failure. [ 70.515370][ T3711] name failslab, interval 1, probability 0, space 0, times 0 [ 70.528431][ T3711] CPU: 0 PID: 3711 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.538580][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.548720][ T3711] Call Trace: [ 70.551999][ T3711] [ 70.554914][ T3711] dump_stack_lvl+0xcd/0x134 [ 70.559498][ T3711] should_fail.cold+0x5/0xa [ 70.563991][ T3711] should_failslab+0x5/0x10 [ 70.568480][ T3711] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.573760][ T3711] ? ref_tracker_alloc+0x14c/0x550 [ 70.578860][ T3711] ref_tracker_alloc+0x14c/0x550 [ 70.583782][ T3711] ? ref_tracker_free+0x6b0/0x6b0 [ 70.588791][ T3711] ? lock_release+0x720/0x720 [ 70.593457][ T3711] ? do_raw_spin_lock+0x120/0x2a0 [ 70.598468][ T3711] ? rwlock_bug.part.0+0x90/0x90 [ 70.603392][ T3711] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.608754][ T3711] linkwatch_fire_event+0x202/0x260 [ 70.613944][ T3711] netif_carrier_off+0x96/0xb0 [ 70.618711][ T3711] __tun_detach+0xfe7/0x13e0 [ 70.623295][ T3711] tun_chr_close+0xc4/0x180 [ 70.627781][ T3711] __fput+0x277/0x9d0 [ 70.631749][ T3711] ? __tun_detach+0x13e0/0x13e0 [ 70.636588][ T3711] task_work_run+0xdd/0x1a0 [ 70.641078][ T3711] ptrace_notify+0x114/0x140 [ 70.645655][ T3711] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.651973][ T3711] syscall_exit_to_user_mode+0x9/0x60 [ 70.657357][ T3711] do_syscall_64+0x42/0xb0 [ 70.661868][ T3711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.667750][ T3711] RIP: 0033:0x7fc6cd2767a3 [ 70.672166][ T3711] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 70.691759][ T3711] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 70.700171][ T3711] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 70.708128][ T3711] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3711] close(3) = 0 [ 70.716084][ T3711] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 70.724064][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.732027][ T3711] R13: 00000000000f4240 R14: 0000000000011223 R15: 00007ffdc49a5924 [ 70.740006][ T3711] [pid 3711] close(4) = 0 [pid 3711] close(5) = -1 EBADF (Bad file descriptor) [pid 3711] close(6) = -1 EBADF (Bad file descriptor) [pid 3711] close(7) = -1 EBADF (Bad file descriptor) [pid 3711] close(8) = -1 EBADF (Bad file descriptor) [pid 3711] close(9) = -1 EBADF (Bad file descriptor) [pid 3711] close(10) = -1 EBADF (Bad file descriptor) [pid 3711] close(11) = -1 EBADF (Bad file descriptor) [pid 3711] close(12) = -1 EBADF (Bad file descriptor) [pid 3711] close(13) = -1 EBADF (Bad file descriptor) [pid 3711] close(14) = -1 EBADF (Bad file descriptor) [pid 3711] close(15) = -1 EBADF (Bad file descriptor) [pid 3711] close(16) = -1 EBADF (Bad file descriptor) [pid 3711] close(17) = -1 EBADF (Bad file descriptor) [pid 3711] close(18) = -1 EBADF (Bad file descriptor) [pid 3711] close(19) = -1 EBADF (Bad file descriptor) [pid 3711] close(20) = -1 EBADF (Bad file descriptor) [pid 3711] close(21) = -1 EBADF (Bad file descriptor) [pid 3711] close(22) = -1 EBADF (Bad file descriptor) [pid 3711] close(23) = -1 EBADF (Bad file descriptor) [pid 3711] close(24) = -1 EBADF (Bad file descriptor) [pid 3711] close(25) = -1 EBADF (Bad file descriptor) [pid 3711] close(26) = -1 EBADF (Bad file descriptor) [pid 3711] close(27) = -1 EBADF (Bad file descriptor) [pid 3711] close(28) = -1 EBADF (Bad file descriptor) [pid 3711] close(29) = -1 EBADF (Bad file descriptor) [pid 3711] exit_group(0) = ? [pid 3711] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 94 ./strace-static-x86_64: Process 3712 attached [pid 3712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3712] setpgid(0, 0) = 0 [pid 3712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3712] write(3, "1000", 4) = 4 [pid 3712] close(3) = 0 [pid 3712] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3712] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3712] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3712] write(4, "5", 1) = 1 [pid 3712] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 70.852754][ T3712] FAULT_INJECTION: forcing a failure. [ 70.852754][ T3712] name failslab, interval 1, probability 0, space 0, times 0 [ 70.865833][ T3712] CPU: 0 PID: 3712 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 70.876075][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.886216][ T3712] Call Trace: [ 70.889494][ T3712] [ 70.892417][ T3712] dump_stack_lvl+0xcd/0x134 [ 70.897016][ T3712] should_fail.cold+0x5/0xa [ 70.901519][ T3712] should_failslab+0x5/0x10 [ 70.906017][ T3712] kmem_cache_alloc_trace+0x60/0x3f0 [ 70.911298][ T3712] ? ref_tracker_alloc+0x14c/0x550 [ 70.916413][ T3712] ref_tracker_alloc+0x14c/0x550 [ 70.921362][ T3712] ? ref_tracker_free+0x6b0/0x6b0 [ 70.926386][ T3712] ? lock_release+0x720/0x720 [ 70.931069][ T3712] ? do_raw_spin_lock+0x120/0x2a0 [ 70.936096][ T3712] ? rwlock_bug.part.0+0x90/0x90 [ 70.941036][ T3712] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 70.946443][ T3712] linkwatch_fire_event+0x202/0x260 [ 70.951654][ T3712] netif_carrier_off+0x96/0xb0 [ 70.956417][ T3712] __tun_detach+0xfe7/0x13e0 [ 70.961025][ T3712] tun_chr_close+0xc4/0x180 [ 70.965527][ T3712] __fput+0x277/0x9d0 [ 70.969505][ T3712] ? __tun_detach+0x13e0/0x13e0 [ 70.974467][ T3712] task_work_run+0xdd/0x1a0 [ 70.978973][ T3712] ptrace_notify+0x114/0x140 [ 70.983566][ T3712] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 70.989810][ T3712] syscall_exit_to_user_mode+0x9/0x60 [ 70.995200][ T3712] do_syscall_64+0x42/0xb0 [ 70.999639][ T3712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.005541][ T3712] RIP: 0033:0x7fc6cd2767a3 [ 71.009952][ T3712] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 71.029566][ T3712] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.037999][ T3712] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 71.045970][ T3712] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3712] close(3) = 0 [pid 3712] close(4) = 0 [pid 3712] close(5) = -1 EBADF (Bad file descriptor) [pid 3712] close(6) = -1 EBADF (Bad file descriptor) [pid 3712] close(7) = -1 EBADF (Bad file descriptor) [pid 3712] close(8) = -1 EBADF (Bad file descriptor) [pid 3712] close(9) = -1 EBADF (Bad file descriptor) [pid 3712] close(10) = -1 EBADF (Bad file descriptor) [pid 3712] close(11) = -1 EBADF (Bad file descriptor) [pid 3712] close(12) = -1 EBADF (Bad file descriptor) [pid 3712] close(13) = -1 EBADF (Bad file descriptor) [pid 3712] close(14) = -1 EBADF (Bad file descriptor) [pid 3712] close(15) = -1 EBADF (Bad file descriptor) [pid 3712] close(16) = -1 EBADF (Bad file descriptor) [pid 3712] close(17) = -1 EBADF (Bad file descriptor) [pid 3712] close(18) = -1 EBADF (Bad file descriptor) [pid 3712] close(19) = -1 EBADF (Bad file descriptor) [pid 3712] close(20) = -1 EBADF (Bad file descriptor) [pid 3712] close(21) = -1 EBADF (Bad file descriptor) [pid 3712] close(22) = -1 EBADF (Bad file descriptor) [pid 3712] close(23) = -1 EBADF (Bad file descriptor) [pid 3712] close(24) = -1 EBADF (Bad file descriptor) [pid 3712] close(25) = -1 EBADF (Bad file descriptor) [pid 3712] close(26) = -1 EBADF (Bad file descriptor) [pid 3712] close(27) = -1 EBADF (Bad file descriptor) [pid 3712] close(28) = -1 EBADF (Bad file descriptor) [pid 3712] close(29) = -1 EBADF (Bad file descriptor) [pid 3712] exit_group(0) = ? [pid 3712] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 95 ./strace-static-x86_64: Process 3713 attached [pid 3713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3713] setpgid(0, 0) = 0 [pid 3713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3713] write(3, "1000", 4) = 4 [pid 3713] close(3) = 0 [pid 3713] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3713] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3713] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3713] write(4, "5", 1) = 1 [pid 3713] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 71.053940][ T3712] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 71.061912][ T3712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 71.069871][ T3712] R13: 00000000000f4240 R14: 0000000000011356 R15: 00007ffdc49a5924 [ 71.078319][ T3712] [ 71.135147][ T3713] FAULT_INJECTION: forcing a failure. [ 71.135147][ T3713] name failslab, interval 1, probability 0, space 0, times 0 [ 71.148109][ T3713] CPU: 0 PID: 3713 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 71.158961][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.169178][ T3713] Call Trace: [ 71.172545][ T3713] [ 71.175484][ T3713] dump_stack_lvl+0xcd/0x134 [ 71.180192][ T3713] should_fail.cold+0x5/0xa [ 71.184703][ T3713] should_failslab+0x5/0x10 [ 71.191519][ T3713] kmem_cache_alloc_trace+0x60/0x3f0 [ 71.196805][ T3713] ? ref_tracker_alloc+0x14c/0x550 [ 71.201907][ T3713] ref_tracker_alloc+0x14c/0x550 [ 71.206833][ T3713] ? ref_tracker_free+0x6b0/0x6b0 [ 71.211871][ T3713] ? lock_release+0x720/0x720 [ 71.216552][ T3713] ? do_raw_spin_lock+0x120/0x2a0 [ 71.221566][ T3713] ? rwlock_bug.part.0+0x90/0x90 [ 71.226775][ T3713] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 71.232146][ T3713] linkwatch_fire_event+0x202/0x260 [ 71.237352][ T3713] netif_carrier_off+0x96/0xb0 [ 71.242105][ T3713] __tun_detach+0xfe7/0x13e0 [ 71.246790][ T3713] tun_chr_close+0xc4/0x180 [ 71.251279][ T3713] __fput+0x277/0x9d0 [ 71.255251][ T3713] ? __tun_detach+0x13e0/0x13e0 [ 71.260104][ T3713] task_work_run+0xdd/0x1a0 [ 71.264796][ T3713] ptrace_notify+0x114/0x140 [ 71.269474][ T3713] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 71.275722][ T3713] syscall_exit_to_user_mode+0x9/0x60 [ 71.281084][ T3713] do_syscall_64+0x42/0xb0 [ 71.285487][ T3713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.291373][ T3713] RIP: 0033:0x7fc6cd2767a3 [ 71.295805][ T3713] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 71.315487][ T3713] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.323991][ T3713] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3713] close(3) = 0 [ 71.332068][ T3713] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 71.340052][ T3713] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 71.348028][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 71.356006][ T3713] R13: 00000000000f4240 R14: 0000000000011497 R15: 00007ffdc49a5924 [ 71.363971][ T3713] [pid 3713] close(4) = 0 [pid 3713] close(5) = -1 EBADF (Bad file descriptor) [pid 3713] close(6) = -1 EBADF (Bad file descriptor) [pid 3713] close(7) = -1 EBADF (Bad file descriptor) [pid 3713] close(8) = -1 EBADF (Bad file descriptor) [pid 3713] close(9) = -1 EBADF (Bad file descriptor) [pid 3713] close(10) = -1 EBADF (Bad file descriptor) [pid 3713] close(11) = -1 EBADF (Bad file descriptor) [pid 3713] close(12) = -1 EBADF (Bad file descriptor) [pid 3713] close(13) = -1 EBADF (Bad file descriptor) [pid 3713] close(14) = -1 EBADF (Bad file descriptor) [pid 3713] close(15) = -1 EBADF (Bad file descriptor) [pid 3713] close(16) = -1 EBADF (Bad file descriptor) [pid 3713] close(17) = -1 EBADF (Bad file descriptor) [pid 3713] close(18) = -1 EBADF (Bad file descriptor) [pid 3713] close(19) = -1 EBADF (Bad file descriptor) [pid 3713] close(20) = -1 EBADF (Bad file descriptor) [pid 3713] close(21) = -1 EBADF (Bad file descriptor) [pid 3713] close(22) = -1 EBADF (Bad file descriptor) [pid 3713] close(23) = -1 EBADF (Bad file descriptor) [pid 3713] close(24) = -1 EBADF (Bad file descriptor) [pid 3713] close(25) = -1 EBADF (Bad file descriptor) [pid 3713] close(26) = -1 EBADF (Bad file descriptor) [pid 3713] close(27) = -1 EBADF (Bad file descriptor) [pid 3713] close(28) = -1 EBADF (Bad file descriptor) [pid 3713] close(29) = -1 EBADF (Bad file descriptor) [pid 3713] exit_group(0) = ? [pid 3713] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 96 ./strace-static-x86_64: Process 3714 attached [pid 3714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3714] setpgid(0, 0) = 0 [pid 3714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3714] write(3, "1000", 4) = 4 [pid 3714] close(3) = 0 [pid 3714] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3714] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3714] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3714] write(4, "5", 1) = 1 [pid 3714] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 71.435721][ T3714] FAULT_INJECTION: forcing a failure. [ 71.435721][ T3714] name failslab, interval 1, probability 0, space 0, times 0 [ 71.448800][ T3714] CPU: 0 PID: 3714 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 71.458950][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.469007][ T3714] Call Trace: [ 71.472293][ T3714] [ 71.475215][ T3714] dump_stack_lvl+0xcd/0x134 [ 71.480415][ T3714] should_fail.cold+0x5/0xa [ 71.484947][ T3714] should_failslab+0x5/0x10 [ 71.489469][ T3714] kmem_cache_alloc_trace+0x60/0x3f0 [ 71.494770][ T3714] ? ref_tracker_alloc+0x14c/0x550 [ 71.499884][ T3714] ref_tracker_alloc+0x14c/0x550 [ 71.505142][ T3714] ? ref_tracker_free+0x6b0/0x6b0 [ 71.510188][ T3714] ? lock_release+0x720/0x720 [ 71.514870][ T3714] ? do_raw_spin_lock+0x120/0x2a0 [ 71.519893][ T3714] ? rwlock_bug.part.0+0x90/0x90 [ 71.524830][ T3714] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 71.530205][ T3714] linkwatch_fire_event+0x202/0x260 [ 71.535408][ T3714] netif_carrier_off+0x96/0xb0 [ 71.542360][ T3714] __tun_detach+0xfe7/0x13e0 [ 71.546977][ T3714] tun_chr_close+0xc4/0x180 [ 71.551474][ T3714] __fput+0x277/0x9d0 [ 71.555547][ T3714] ? __tun_detach+0x13e0/0x13e0 [ 71.560396][ T3714] task_work_run+0xdd/0x1a0 [ 71.564912][ T3714] ptrace_notify+0x114/0x140 [ 71.569504][ T3714] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 71.575745][ T3714] syscall_exit_to_user_mode+0x9/0x60 [ 71.581114][ T3714] do_syscall_64+0x42/0xb0 [ 71.585521][ T3714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.591419][ T3714] RIP: 0033:0x7fc6cd2767a3 [ 71.595856][ T3714] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 71.615463][ T3714] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.623874][ T3714] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3714] close(3) = 0 [pid 3714] close(4) = 0 [pid 3714] close(5) = -1 EBADF (Bad file descriptor) [pid 3714] close(6) = -1 EBADF (Bad file descriptor) [pid 3714] close(7) = -1 EBADF (Bad file descriptor) [pid 3714] close(8) = -1 EBADF (Bad file descriptor) [pid 3714] close(9) = -1 EBADF (Bad file descriptor) [pid 3714] close(10) = -1 EBADF (Bad file descriptor) [pid 3714] close(11) = -1 EBADF (Bad file descriptor) [pid 3714] close(12) = -1 EBADF (Bad file descriptor) [pid 3714] close(13) = -1 EBADF (Bad file descriptor) [pid 3714] close(14) = -1 EBADF (Bad file descriptor) [pid 3714] close(15) = -1 EBADF (Bad file descriptor) [pid 3714] close(16) = -1 EBADF (Bad file descriptor) [pid 3714] close(17) = -1 EBADF (Bad file descriptor) [pid 3714] close(18) = -1 EBADF (Bad file descriptor) [pid 3714] close(19) = -1 EBADF (Bad file descriptor) [pid 3714] close(20) = -1 EBADF (Bad file descriptor) [pid 3714] close(21) = -1 EBADF (Bad file descriptor) [pid 3714] close(22) = -1 EBADF (Bad file descriptor) [pid 3714] close(23) = -1 EBADF (Bad file descriptor) [pid 3714] close(24) = -1 EBADF (Bad file descriptor) [pid 3714] close(25) = -1 EBADF (Bad file descriptor) [pid 3714] close(26) = -1 EBADF (Bad file descriptor) [pid 3714] close(27) = -1 EBADF (Bad file descriptor) [pid 3714] close(28) = -1 EBADF (Bad file descriptor) [pid 3714] close(29) = -1 EBADF (Bad file descriptor) [pid 3714] exit_group(0) = ? [pid 3714] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3715 attached , child_tidptr=0x5555570bd5d0) = 97 [pid 3715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3715] setpgid(0, 0) = 0 [pid 3715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3715] write(3, "1000", 4) = 4 [ 71.631855][ T3714] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 71.639823][ T3714] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 71.647785][ T3714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 71.655745][ T3714] R13: 00000000000f4240 R14: 00000000000115c0 R15: 00007ffdc49a5924 [ 71.663717][ T3714] [pid 3715] close(3) = 0 [pid 3715] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3715] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3715] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3715] write(4, "5", 1) = 1 [pid 3715] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 71.723592][ T3715] FAULT_INJECTION: forcing a failure. [ 71.723592][ T3715] name failslab, interval 1, probability 0, space 0, times 0 [ 71.736830][ T3715] CPU: 0 PID: 3715 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 71.746964][ T3715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.757183][ T3715] Call Trace: [ 71.760440][ T3715] [ 71.763351][ T3715] dump_stack_lvl+0xcd/0x134 [ 71.767927][ T3715] should_fail.cold+0x5/0xa [ 71.772412][ T3715] should_failslab+0x5/0x10 [ 71.776897][ T3715] kmem_cache_alloc_trace+0x60/0x3f0 [ 71.782259][ T3715] ? ref_tracker_alloc+0x14c/0x550 [ 71.787360][ T3715] ref_tracker_alloc+0x14c/0x550 [ 71.792367][ T3715] ? ref_tracker_free+0x6b0/0x6b0 [ 71.797640][ T3715] ? lock_release+0x720/0x720 [ 71.802310][ T3715] ? do_raw_spin_lock+0x120/0x2a0 [ 71.807323][ T3715] ? rwlock_bug.part.0+0x90/0x90 [ 71.812262][ T3715] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 71.817645][ T3715] linkwatch_fire_event+0x202/0x260 [ 71.822841][ T3715] netif_carrier_off+0x96/0xb0 [ 71.827611][ T3715] __tun_detach+0xfe7/0x13e0 [ 71.832200][ T3715] tun_chr_close+0xc4/0x180 [ 71.836687][ T3715] __fput+0x277/0x9d0 [ 71.840653][ T3715] ? __tun_detach+0x13e0/0x13e0 [ 71.845497][ T3715] task_work_run+0xdd/0x1a0 [ 71.850166][ T3715] ptrace_notify+0x114/0x140 [ 71.854743][ T3715] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 71.861083][ T3715] syscall_exit_to_user_mode+0x9/0x60 [ 71.866727][ T3715] do_syscall_64+0x42/0xb0 [ 71.871239][ T3715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.877123][ T3715] RIP: 0033:0x7fc6cd2767a3 [ 71.881527][ T3715] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 71.901568][ T3715] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.909984][ T3715] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 71.918148][ T3715] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 71.926134][ T3715] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 71.934113][ T3715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 71.942095][ T3715] R13: 00000000000f4240 R14: 00000000000116ec R15: 00007ffdc49a5924 [ 71.950169][ T3715] [pid 3715] close(3) = 0 [pid 3715] close(4) = 0 [pid 3715] close(5) = -1 EBADF (Bad file descriptor) [pid 3715] close(6) = -1 EBADF (Bad file descriptor) [pid 3715] close(7) = -1 EBADF (Bad file descriptor) [pid 3715] close(8) = -1 EBADF (Bad file descriptor) [pid 3715] close(9) = -1 EBADF (Bad file descriptor) [pid 3715] close(10) = -1 EBADF (Bad file descriptor) [pid 3715] close(11) = -1 EBADF (Bad file descriptor) [pid 3715] close(12) = -1 EBADF (Bad file descriptor) [pid 3715] close(13) = -1 EBADF (Bad file descriptor) [pid 3715] close(14) = -1 EBADF (Bad file descriptor) [pid 3715] close(15) = -1 EBADF (Bad file descriptor) [pid 3715] close(16) = -1 EBADF (Bad file descriptor) [pid 3715] close(17) = -1 EBADF (Bad file descriptor) [pid 3715] close(18) = -1 EBADF (Bad file descriptor) [pid 3715] close(19) = -1 EBADF (Bad file descriptor) [pid 3715] close(20) = -1 EBADF (Bad file descriptor) [pid 3715] close(21) = -1 EBADF (Bad file descriptor) [pid 3715] close(22) = -1 EBADF (Bad file descriptor) [pid 3715] close(23) = -1 EBADF (Bad file descriptor) [pid 3715] close(24) = -1 EBADF (Bad file descriptor) [pid 3715] close(25) = -1 EBADF (Bad file descriptor) [pid 3715] close(26) = -1 EBADF (Bad file descriptor) [pid 3715] close(27) = -1 EBADF (Bad file descriptor) [pid 3715] close(28) = -1 EBADF (Bad file descriptor) [pid 3715] close(29) = -1 EBADF (Bad file descriptor) [pid 3715] exit_group(0) = ? [pid 3715] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3716 attached , child_tidptr=0x5555570bd5d0) = 98 [pid 3716] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3716] setpgid(0, 0) = 0 [pid 3716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3716] write(3, "1000", 4) = 4 [pid 3716] close(3) = 0 [pid 3716] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3716] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3716] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3716] write(4, "5", 1) = 1 [pid 3716] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 72.030410][ T3716] FAULT_INJECTION: forcing a failure. [ 72.030410][ T3716] name failslab, interval 1, probability 0, space 0, times 0 [ 72.043152][ T3716] CPU: 0 PID: 3716 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 72.053492][ T3716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.063558][ T3716] Call Trace: [ 72.067041][ T3716] [ 72.069957][ T3716] dump_stack_lvl+0xcd/0x134 [ 72.074567][ T3716] should_fail.cold+0x5/0xa [ 72.079063][ T3716] should_failslab+0x5/0x10 [ 72.083554][ T3716] kmem_cache_alloc_trace+0x60/0x3f0 [ 72.088850][ T3716] ? ref_tracker_alloc+0x14c/0x550 [ 72.093967][ T3716] ref_tracker_alloc+0x14c/0x550 [ 72.098895][ T3716] ? ref_tracker_free+0x6b0/0x6b0 [ 72.103906][ T3716] ? lock_release+0x720/0x720 [ 72.108579][ T3716] ? do_raw_spin_lock+0x120/0x2a0 [ 72.113610][ T3716] ? rwlock_bug.part.0+0x90/0x90 [ 72.118541][ T3716] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 72.123919][ T3716] linkwatch_fire_event+0x202/0x260 [ 72.129235][ T3716] netif_carrier_off+0x96/0xb0 [ 72.134006][ T3716] __tun_detach+0xfe7/0x13e0 [ 72.138605][ T3716] tun_chr_close+0xc4/0x180 [ 72.143111][ T3716] __fput+0x277/0x9d0 [ 72.147106][ T3716] ? __tun_detach+0x13e0/0x13e0 [ 72.152047][ T3716] task_work_run+0xdd/0x1a0 [ 72.156551][ T3716] ptrace_notify+0x114/0x140 [ 72.161138][ T3716] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 72.167389][ T3716] syscall_exit_to_user_mode+0x9/0x60 [ 72.172758][ T3716] do_syscall_64+0x42/0xb0 [ 72.177175][ T3716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.183156][ T3716] RIP: 0033:0x7fc6cd2767a3 [ 72.187588][ T3716] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 72.207486][ T3716] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.215915][ T3716] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 72.224056][ T3716] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 72.232023][ T3716] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 72.239995][ T3716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 72.247965][ T3716] R13: 00000000000f4240 R14: 0000000000011810 R15: 00007ffdc49a5924 [ 72.255949][ T3716] [pid 3716] close(3) = 0 [pid 3716] close(4) = 0 [pid 3716] close(5) = -1 EBADF (Bad file descriptor) [pid 3716] close(6) = -1 EBADF (Bad file descriptor) [pid 3716] close(7) = -1 EBADF (Bad file descriptor) [pid 3716] close(8) = -1 EBADF (Bad file descriptor) [pid 3716] close(9) = -1 EBADF (Bad file descriptor) [pid 3716] close(10) = -1 EBADF (Bad file descriptor) [pid 3716] close(11) = -1 EBADF (Bad file descriptor) [pid 3716] close(12) = -1 EBADF (Bad file descriptor) [pid 3716] close(13) = -1 EBADF (Bad file descriptor) [pid 3716] close(14) = -1 EBADF (Bad file descriptor) [pid 3716] close(15) = -1 EBADF (Bad file descriptor) [pid 3716] close(16) = -1 EBADF (Bad file descriptor) [pid 3716] close(17) = -1 EBADF (Bad file descriptor) [pid 3716] close(18) = -1 EBADF (Bad file descriptor) [pid 3716] close(19) = -1 EBADF (Bad file descriptor) [pid 3716] close(20) = -1 EBADF (Bad file descriptor) [pid 3716] close(21) = -1 EBADF (Bad file descriptor) [pid 3716] close(22) = -1 EBADF (Bad file descriptor) [pid 3716] close(23) = -1 EBADF (Bad file descriptor) [pid 3716] close(24) = -1 EBADF (Bad file descriptor) [pid 3716] close(25) = -1 EBADF (Bad file descriptor) [pid 3716] close(26) = -1 EBADF (Bad file descriptor) [pid 3716] close(27) = -1 EBADF (Bad file descriptor) [pid 3716] close(28) = -1 EBADF (Bad file descriptor) [pid 3716] close(29) = -1 EBADF (Bad file descriptor) [pid 3716] exit_group(0) = ? [pid 3716] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3717 attached , child_tidptr=0x5555570bd5d0) = 99 [pid 3717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3717] setpgid(0, 0) = 0 [pid 3717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3717] write(3, "1000", 4) = 4 [pid 3717] close(3) = 0 [pid 3717] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3717] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3717] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3717] write(4, "5", 1) = 1 [pid 3717] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 72.340394][ T3717] FAULT_INJECTION: forcing a failure. [ 72.340394][ T3717] name failslab, interval 1, probability 0, space 0, times 0 [ 72.353203][ T3717] CPU: 0 PID: 3717 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 72.363356][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.373445][ T3717] Call Trace: [ 72.376743][ T3717] [ 72.379666][ T3717] dump_stack_lvl+0xcd/0x134 [ 72.384432][ T3717] should_fail.cold+0x5/0xa [ 72.388955][ T3717] should_failslab+0x5/0x10 [ 72.393455][ T3717] kmem_cache_alloc_trace+0x60/0x3f0 [ 72.398765][ T3717] ? ref_tracker_alloc+0x14c/0x550 [ 72.403938][ T3717] ref_tracker_alloc+0x14c/0x550 [ 72.408906][ T3717] ? ref_tracker_free+0x6b0/0x6b0 [ 72.413959][ T3717] ? lock_release+0x720/0x720 [ 72.418701][ T3717] ? do_raw_spin_lock+0x120/0x2a0 [ 72.423740][ T3717] ? rwlock_bug.part.0+0x90/0x90 [ 72.428689][ T3717] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 72.434081][ T3717] linkwatch_fire_event+0x202/0x260 [ 72.439286][ T3717] netif_carrier_off+0x96/0xb0 [ 72.444141][ T3717] __tun_detach+0xfe7/0x13e0 [ 72.448751][ T3717] tun_chr_close+0xc4/0x180 [ 72.453259][ T3717] __fput+0x277/0x9d0 [ 72.457243][ T3717] ? __tun_detach+0x13e0/0x13e0 [ 72.462121][ T3717] task_work_run+0xdd/0x1a0 [ 72.466834][ T3717] ptrace_notify+0x114/0x140 [ 72.471425][ T3717] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 72.477670][ T3717] syscall_exit_to_user_mode+0x9/0x60 [ 72.483033][ T3717] do_syscall_64+0x42/0xb0 [ 72.487540][ T3717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.493452][ T3717] RIP: 0033:0x7fc6cd2767a3 [ 72.497868][ T3717] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 72.517490][ T3717] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.526215][ T3717] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 72.534352][ T3717] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 72.542343][ T3717] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 72.550433][ T3717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 72.558429][ T3717] R13: 00000000000f4240 R14: 0000000000011943 R15: 00007ffdc49a5924 [ 72.566598][ T3717] [pid 3717] close(3) = 0 [pid 3717] close(4) = 0 [pid 3717] close(5) = -1 EBADF (Bad file descriptor) [pid 3717] close(6) = -1 EBADF (Bad file descriptor) [pid 3717] close(7) = -1 EBADF (Bad file descriptor) [pid 3717] close(8) = -1 EBADF (Bad file descriptor) [pid 3717] close(9) = -1 EBADF (Bad file descriptor) [pid 3717] close(10) = -1 EBADF (Bad file descriptor) [pid 3717] close(11) = -1 EBADF (Bad file descriptor) [pid 3717] close(12) = -1 EBADF (Bad file descriptor) [pid 3717] close(13) = -1 EBADF (Bad file descriptor) [pid 3717] close(14) = -1 EBADF (Bad file descriptor) [pid 3717] close(15) = -1 EBADF (Bad file descriptor) [pid 3717] close(16) = -1 EBADF (Bad file descriptor) [pid 3717] close(17) = -1 EBADF (Bad file descriptor) [pid 3717] close(18) = -1 EBADF (Bad file descriptor) [pid 3717] close(19) = -1 EBADF (Bad file descriptor) [pid 3717] close(20) = -1 EBADF (Bad file descriptor) [pid 3717] close(21) = -1 EBADF (Bad file descriptor) [pid 3717] close(22) = -1 EBADF (Bad file descriptor) [pid 3717] close(23) = -1 EBADF (Bad file descriptor) [pid 3717] close(24) = -1 EBADF (Bad file descriptor) [pid 3717] close(25) = -1 EBADF (Bad file descriptor) [pid 3717] close(26) = -1 EBADF (Bad file descriptor) [pid 3717] close(27) = -1 EBADF (Bad file descriptor) [pid 3717] close(28) = -1 EBADF (Bad file descriptor) [pid 3717] close(29) = -1 EBADF (Bad file descriptor) [pid 3717] exit_group(0) = ? [pid 3717] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3718 attached [pid 3718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 100 [pid 3718] <... prctl resumed>) = 0 [pid 3718] setpgid(0, 0) = 0 [pid 3718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3718] write(3, "1000", 4) = 4 [pid 3718] close(3) = 0 [pid 3718] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3718] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3718] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3718] write(4, "5", 1) = 1 [ 72.649511][ T3718] FAULT_INJECTION: forcing a failure. [ 72.649511][ T3718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.663416][ T3718] CPU: 1 PID: 3718 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 72.673797][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.683887][ T3718] Call Trace: [ 72.687185][ T3718] [ 72.690137][ T3718] dump_stack_lvl+0xcd/0x134 [ 72.694759][ T3718] should_fail.cold+0x5/0xa [ 72.699296][ T3718] prepare_alloc_pages+0x17b/0x570 [ 72.704449][ T3718] __alloc_pages+0x12f/0x500 [ 72.709068][ T3718] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 72.715982][ T3718] ? ___slab_alloc+0x47e/0xf20 [ 72.720804][ T3718] alloc_pages+0x1aa/0x310 [ 72.725259][ T3718] ? mark_held_locks+0x9f/0xe0 [ 72.730046][ T3718] allocate_slab+0x26c/0x3c0 [ 72.734659][ T3718] ___slab_alloc+0x8df/0xf20 [ 72.739280][ T3718] ? napi_skb_cache_get+0xeb/0x170 [ 72.744453][ T3718] ? mark_held_locks+0x9f/0xe0 [ 72.749243][ T3718] kmem_cache_alloc_bulk+0x21c/0x720 [ 72.754570][ T3718] napi_skb_cache_get+0xeb/0x170 [ 72.759543][ T3718] __alloc_skb+0x9b/0x340 [ 72.763889][ T3718] ? __lock_acquire+0xbca/0x56c0 [ 72.768864][ T3718] __napi_alloc_skb+0x70/0x310 [ 72.773782][ T3718] napi_get_frags+0x5e/0x140 [ 72.778424][ T3718] tun_get_user+0xa07/0x3b00 [ 72.783215][ T3718] ? tun_build_skb+0x1170/0x1170 [ 72.788248][ T3718] ? lock_downgrade+0x6e0/0x6e0 [ 72.793133][ T3718] ? find_held_lock+0x2d/0x110 [ 72.797984][ T3718] tun_chr_write_iter+0xdb/0x200 [ 72.802942][ T3718] do_iter_readv_writev+0x3d1/0x640 [ 72.808171][ T3718] ? new_sync_write+0x560/0x560 [ 72.813070][ T3718] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.819482][ T3718] ? security_file_permission+0xab/0xd0 [ 72.825126][ T3718] do_iter_write+0x182/0x700 [ 72.829749][ T3718] ? import_iovec+0x10c/0x150 [ 72.834451][ T3718] vfs_writev+0x1aa/0x630 [ 72.838819][ T3718] ? vfs_iter_write+0xa0/0xa0 [ 72.843552][ T3718] ? do_raw_spin_lock+0x120/0x2a0 [ 72.848659][ T3718] ? rwlock_bug.part.0+0x90/0x90 [ 72.853706][ T3718] ? _raw_spin_lock_irq+0x41/0x50 [ 72.858755][ T3718] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.865062][ T3718] ? find_held_lock+0x2d/0x110 [ 72.869898][ T3718] ? ptrace_notify+0xfa/0x140 [ 72.874643][ T3718] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.880926][ T3718] ? __fget_light+0x20f/0x270 [ 72.885635][ T3718] do_writev+0x133/0x2f0 [ 72.889974][ T3718] ? vfs_writev+0x630/0x630 [ 72.894616][ T3718] ? lockdep_hardirqs_on+0x79/0x100 [ 72.899888][ T3718] ? _raw_spin_unlock_irq+0x2a/0x40 [ 72.905127][ T3718] ? ptrace_notify+0xfa/0x140 [ 72.909860][ T3718] do_syscall_64+0x35/0xb0 [ 72.914317][ T3718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.920276][ T3718] RIP: 0033:0x7fc6cd2b4c39 [ 72.924709][ T3718] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3718] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 72.944381][ T3718] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 72.952809][ T3718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 72.960804][ T3718] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 72.969130][ T3718] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 72.977162][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 72.985231][ T3718] R13: 00000000000f4240 R14: 0000000000011a75 R15: 00007ffdc49a5924 [ 72.993265][ T3718] [pid 3718] close(3) = 0 [pid 3718] close(4) = 0 [pid 3718] close(5) = -1 EBADF (Bad file descriptor) [pid 3718] close(6) = -1 EBADF (Bad file descriptor) [pid 3718] close(7) = -1 EBADF (Bad file descriptor) [pid 3718] close(8) = -1 EBADF (Bad file descriptor) [pid 3718] close(9) = -1 EBADF (Bad file descriptor) [pid 3718] close(10) = -1 EBADF (Bad file descriptor) [pid 3718] close(11) = -1 EBADF (Bad file descriptor) [pid 3718] close(12) = -1 EBADF (Bad file descriptor) [pid 3718] close(13) = -1 EBADF (Bad file descriptor) [pid 3718] close(14) = -1 EBADF (Bad file descriptor) [pid 3718] close(15) = -1 EBADF (Bad file descriptor) [pid 3718] close(16) = -1 EBADF (Bad file descriptor) [pid 3718] close(17) = -1 EBADF (Bad file descriptor) [pid 3718] close(18) = -1 EBADF (Bad file descriptor) [pid 3718] close(19) = -1 EBADF (Bad file descriptor) [pid 3718] close(20) = -1 EBADF (Bad file descriptor) [pid 3718] close(21) = -1 EBADF (Bad file descriptor) [pid 3718] close(22) = -1 EBADF (Bad file descriptor) [pid 3718] close(23) = -1 EBADF (Bad file descriptor) [pid 3718] close(24) = -1 EBADF (Bad file descriptor) [pid 3718] close(25) = -1 EBADF (Bad file descriptor) [pid 3718] close(26) = -1 EBADF (Bad file descriptor) [pid 3718] close(27) = -1 EBADF (Bad file descriptor) [pid 3718] close(28) = -1 EBADF (Bad file descriptor) [pid 3718] close(29) = -1 EBADF (Bad file descriptor) [pid 3718] exit_group(0) = ? [pid 3718] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3719 attached , child_tidptr=0x5555570bd5d0) = 101 [pid 3719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3719] setpgid(0, 0) = 0 [pid 3719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3719] write(3, "1000", 4) = 4 [pid 3719] close(3) = 0 [pid 3719] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3719] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3719] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3719] write(4, "5", 1) = 1 [ 73.054899][ T3719] FAULT_INJECTION: forcing a failure. [ 73.054899][ T3719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.069400][ T3719] CPU: 0 PID: 3719 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 73.079581][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.089642][ T3719] Call Trace: [ 73.092925][ T3719] [ 73.095853][ T3719] dump_stack_lvl+0xcd/0x134 [ 73.100479][ T3719] should_fail.cold+0x5/0xa [ 73.105003][ T3719] prepare_alloc_pages+0x17b/0x570 [ 73.110127][ T3719] __alloc_pages+0x12f/0x500 [ 73.114814][ T3719] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 73.121706][ T3719] ? ___slab_alloc+0x47e/0xf20 [ 73.126484][ T3719] alloc_pages+0x1aa/0x310 [ 73.130928][ T3719] ? mark_held_locks+0x9f/0xe0 [ 73.135715][ T3719] allocate_slab+0x26c/0x3c0 [ 73.140317][ T3719] ___slab_alloc+0x8df/0xf20 [ 73.144929][ T3719] ? napi_skb_cache_get+0xeb/0x170 [ 73.150137][ T3719] ? mark_held_locks+0x9f/0xe0 [ 73.154913][ T3719] kmem_cache_alloc_bulk+0x21c/0x720 [ 73.160210][ T3719] napi_skb_cache_get+0xeb/0x170 [ 73.165171][ T3719] __alloc_skb+0x9b/0x340 [ 73.169506][ T3719] ? __lock_acquire+0xbca/0x56c0 [ 73.174473][ T3719] __napi_alloc_skb+0x70/0x310 [ 73.179265][ T3719] napi_get_frags+0x5e/0x140 [ 73.183883][ T3719] tun_get_user+0xa07/0x3b00 [ 73.188488][ T3719] ? tun_build_skb+0x1170/0x1170 [ 73.193450][ T3719] ? lock_downgrade+0x6e0/0x6e0 [ 73.198327][ T3719] ? find_held_lock+0x2d/0x110 [ 73.203113][ T3719] tun_chr_write_iter+0xdb/0x200 [ 73.208070][ T3719] do_iter_readv_writev+0x3d1/0x640 [ 73.213357][ T3719] ? new_sync_write+0x560/0x560 [ 73.218213][ T3719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.224484][ T3719] ? security_file_permission+0xab/0xd0 [ 73.230058][ T3719] do_iter_write+0x182/0x700 [ 73.234648][ T3719] ? import_iovec+0x10c/0x150 [ 73.239316][ T3719] vfs_writev+0x1aa/0x630 [ 73.243673][ T3719] ? vfs_iter_write+0xa0/0xa0 [ 73.248344][ T3719] ? do_raw_spin_lock+0x120/0x2a0 [ 73.253372][ T3719] ? rwlock_bug.part.0+0x90/0x90 [ 73.258314][ T3719] ? _raw_spin_lock_irq+0x41/0x50 [ 73.263347][ T3719] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 73.270082][ T3719] ? find_held_lock+0x2d/0x110 [ 73.274957][ T3719] ? ptrace_notify+0xfa/0x140 [ 73.279664][ T3719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.285910][ T3719] ? __fget_light+0x20f/0x270 [ 73.290598][ T3719] do_writev+0x133/0x2f0 [ 73.294868][ T3719] ? vfs_writev+0x630/0x630 [ 73.299386][ T3719] ? lockdep_hardirqs_on+0x79/0x100 [ 73.304577][ T3719] ? _raw_spin_unlock_irq+0x2a/0x40 [ 73.309769][ T3719] ? ptrace_notify+0xfa/0x140 [ 73.314464][ T3719] do_syscall_64+0x35/0xb0 [ 73.319084][ T3719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.324989][ T3719] RIP: 0033:0x7fc6cd2b4c39 [ 73.329413][ T3719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3719] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 73.349021][ T3719] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 73.357435][ T3719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 73.365506][ T3719] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 73.373490][ T3719] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 73.381469][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 73.389444][ T3719] R13: 00000000000f4240 R14: 0000000000011bac R15: 00007ffdc49a5924 [ 73.397436][ T3719] [pid 3719] close(3) = 0 [pid 3719] close(4) = 0 [pid 3719] close(5) = -1 EBADF (Bad file descriptor) [pid 3719] close(6) = -1 EBADF (Bad file descriptor) [pid 3719] close(7) = -1 EBADF (Bad file descriptor) [pid 3719] close(8) = -1 EBADF (Bad file descriptor) [pid 3719] close(9) = -1 EBADF (Bad file descriptor) [pid 3719] close(10) = -1 EBADF (Bad file descriptor) [pid 3719] close(11) = -1 EBADF (Bad file descriptor) [pid 3719] close(12) = -1 EBADF (Bad file descriptor) [pid 3719] close(13) = -1 EBADF (Bad file descriptor) [pid 3719] close(14) = -1 EBADF (Bad file descriptor) [pid 3719] close(15) = -1 EBADF (Bad file descriptor) [pid 3719] close(16) = -1 EBADF (Bad file descriptor) [pid 3719] close(17) = -1 EBADF (Bad file descriptor) [pid 3719] close(18) = -1 EBADF (Bad file descriptor) [pid 3719] close(19) = -1 EBADF (Bad file descriptor) [pid 3719] close(20) = -1 EBADF (Bad file descriptor) [pid 3719] close(21) = -1 EBADF (Bad file descriptor) [pid 3719] close(22) = -1 EBADF (Bad file descriptor) [pid 3719] close(23) = -1 EBADF (Bad file descriptor) [pid 3719] close(24) = -1 EBADF (Bad file descriptor) [pid 3719] close(25) = -1 EBADF (Bad file descriptor) [pid 3719] close(26) = -1 EBADF (Bad file descriptor) [pid 3719] close(27) = -1 EBADF (Bad file descriptor) [pid 3719] close(28) = -1 EBADF (Bad file descriptor) [pid 3719] close(29) = -1 EBADF (Bad file descriptor) [pid 3719] exit_group(0) = ? [pid 3719] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3720 attached , child_tidptr=0x5555570bd5d0) = 102 [pid 3720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3720] setpgid(0, 0) = 0 [pid 3720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3720] write(3, "1000", 4) = 4 [pid 3720] close(3) = 0 [pid 3720] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3720] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3720] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3720] write(4, "5", 1) = 1 [pid 3720] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 73.474587][ T3720] FAULT_INJECTION: forcing a failure. [ 73.474587][ T3720] name failslab, interval 1, probability 0, space 0, times 0 [ 73.488524][ T3720] CPU: 0 PID: 3720 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 73.498663][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.508703][ T3720] Call Trace: [ 73.511965][ T3720] [ 73.514875][ T3720] dump_stack_lvl+0xcd/0x134 [ 73.519464][ T3720] should_fail.cold+0x5/0xa [ 73.523968][ T3720] should_failslab+0x5/0x10 [ 73.528547][ T3720] kmem_cache_alloc_trace+0x60/0x3f0 [ 73.533820][ T3720] ? ref_tracker_alloc+0x14c/0x550 [ 73.538928][ T3720] ref_tracker_alloc+0x14c/0x550 [ 73.543856][ T3720] ? ref_tracker_free+0x6b0/0x6b0 [ 73.548869][ T3720] ? lock_release+0x720/0x720 [ 73.553714][ T3720] ? do_raw_spin_lock+0x120/0x2a0 [ 73.558734][ T3720] ? rwlock_bug.part.0+0x90/0x90 [ 73.563839][ T3720] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 73.569210][ T3720] linkwatch_fire_event+0x202/0x260 [ 73.574440][ T3720] netif_carrier_off+0x96/0xb0 [ 73.579200][ T3720] __tun_detach+0xfe7/0x13e0 [ 73.583965][ T3720] tun_chr_close+0xc4/0x180 [ 73.588632][ T3720] __fput+0x277/0x9d0 [ 73.592603][ T3720] ? __tun_detach+0x13e0/0x13e0 [ 73.597442][ T3720] task_work_run+0xdd/0x1a0 [ 73.601942][ T3720] ptrace_notify+0x114/0x140 [ 73.606520][ T3720] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 73.612755][ T3720] syscall_exit_to_user_mode+0x9/0x60 [ 73.618133][ T3720] do_syscall_64+0x42/0xb0 [ 73.622540][ T3720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.628425][ T3720] RIP: 0033:0x7fc6cd2767a3 [ 73.632829][ T3720] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 73.652607][ T3720] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 73.661196][ T3720] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 73.669168][ T3720] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 73.677128][ T3720] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 73.685083][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 73.693134][ T3720] R13: 00000000000f4240 R14: 0000000000011d3f R15: 00007ffdc49a5924 [ 73.701111][ T3720] [pid 3720] close(3) = 0 [pid 3720] close(4) = 0 [pid 3720] close(5) = -1 EBADF (Bad file descriptor) [pid 3720] close(6) = -1 EBADF (Bad file descriptor) [pid 3720] close(7) = -1 EBADF (Bad file descriptor) [pid 3720] close(8) = -1 EBADF (Bad file descriptor) [pid 3720] close(9) = -1 EBADF (Bad file descriptor) [pid 3720] close(10) = -1 EBADF (Bad file descriptor) [pid 3720] close(11) = -1 EBADF (Bad file descriptor) [pid 3720] close(12) = -1 EBADF (Bad file descriptor) [pid 3720] close(13) = -1 EBADF (Bad file descriptor) [pid 3720] close(14) = -1 EBADF (Bad file descriptor) [pid 3720] close(15) = -1 EBADF (Bad file descriptor) [pid 3720] close(16) = -1 EBADF (Bad file descriptor) [pid 3720] close(17) = -1 EBADF (Bad file descriptor) [pid 3720] close(18) = -1 EBADF (Bad file descriptor) [pid 3720] close(19) = -1 EBADF (Bad file descriptor) [pid 3720] close(20) = -1 EBADF (Bad file descriptor) [pid 3720] close(21) = -1 EBADF (Bad file descriptor) [pid 3720] close(22) = -1 EBADF (Bad file descriptor) [pid 3720] close(23) = -1 EBADF (Bad file descriptor) [pid 3720] close(24) = -1 EBADF (Bad file descriptor) [pid 3720] close(25) = -1 EBADF (Bad file descriptor) [pid 3720] close(26) = -1 EBADF (Bad file descriptor) [pid 3720] close(27) = -1 EBADF (Bad file descriptor) [pid 3720] close(28) = -1 EBADF (Bad file descriptor) [pid 3720] close(29) = -1 EBADF (Bad file descriptor) [pid 3720] exit_group(0) = ? [pid 3720] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 103 ./strace-static-x86_64: Process 3721 attached [pid 3721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3721] setpgid(0, 0) = 0 [pid 3721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3721] write(3, "1000", 4) = 4 [pid 3721] close(3) = 0 [pid 3721] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3721] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3721] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3721] write(4, "5", 1) = 1 [pid 3721] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 73.778860][ T3721] FAULT_INJECTION: forcing a failure. [ 73.778860][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 73.792450][ T3721] CPU: 1 PID: 3721 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 73.802811][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.812861][ T3721] Call Trace: [ 73.816139][ T3721] [ 73.819078][ T3721] dump_stack_lvl+0xcd/0x134 [ 73.823668][ T3721] should_fail.cold+0x5/0xa [ 73.828168][ T3721] should_failslab+0x5/0x10 [ 73.832662][ T3721] kmem_cache_alloc_trace+0x60/0x3f0 [ 73.837967][ T3721] ? ref_tracker_alloc+0x14c/0x550 [ 73.843097][ T3721] ref_tracker_alloc+0x14c/0x550 [ 73.848030][ T3721] ? ref_tracker_free+0x6b0/0x6b0 [ 73.853056][ T3721] ? lock_release+0x720/0x720 [ 73.857742][ T3721] ? do_raw_spin_lock+0x120/0x2a0 [ 73.862779][ T3721] ? rwlock_bug.part.0+0x90/0x90 [ 73.867708][ T3721] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 73.873093][ T3721] linkwatch_fire_event+0x202/0x260 [ 73.878293][ T3721] netif_carrier_off+0x96/0xb0 [ 73.883064][ T3721] __tun_detach+0xfe7/0x13e0 [ 73.887645][ T3721] tun_chr_close+0xc4/0x180 [ 73.892138][ T3721] __fput+0x277/0x9d0 [ 73.896115][ T3721] ? __tun_detach+0x13e0/0x13e0 [ 73.900986][ T3721] task_work_run+0xdd/0x1a0 [ 73.905502][ T3721] ptrace_notify+0x114/0x140 [ 73.910092][ T3721] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 73.916336][ T3721] syscall_exit_to_user_mode+0x9/0x60 [ 73.921751][ T3721] do_syscall_64+0x42/0xb0 [ 73.926195][ T3721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.932091][ T3721] RIP: 0033:0x7fc6cd2767a3 [ 73.936508][ T3721] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 73.956262][ T3721] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 73.964689][ T3721] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3721] close(3) = 0 [pid 3721] close(4) = 0 [pid 3721] close(5) = -1 EBADF (Bad file descriptor) [pid 3721] close(6) = -1 EBADF (Bad file descriptor) [pid 3721] close(7) = -1 EBADF (Bad file descriptor) [pid 3721] close(8) = -1 EBADF (Bad file descriptor) [pid 3721] close(9) = -1 EBADF (Bad file descriptor) [pid 3721] close(10) = -1 EBADF (Bad file descriptor) [pid 3721] close(11) = -1 EBADF (Bad file descriptor) [pid 3721] close(12) = -1 EBADF (Bad file descriptor) [pid 3721] close(13) = -1 EBADF (Bad file descriptor) [pid 3721] close(14) = -1 EBADF (Bad file descriptor) [pid 3721] close(15) = -1 EBADF (Bad file descriptor) [pid 3721] close(16) = -1 EBADF (Bad file descriptor) [pid 3721] close(17) = -1 EBADF (Bad file descriptor) [pid 3721] close(18) = -1 EBADF (Bad file descriptor) [pid 3721] close(19) = -1 EBADF (Bad file descriptor) [pid 3721] close(20) = -1 EBADF (Bad file descriptor) [pid 3721] close(21) = -1 EBADF (Bad file descriptor) [pid 3721] close(22) = -1 EBADF (Bad file descriptor) [pid 3721] close(23) = -1 EBADF (Bad file descriptor) [pid 3721] close(24) = -1 EBADF (Bad file descriptor) [pid 3721] close(25) = -1 EBADF (Bad file descriptor) [pid 3721] close(26) = -1 EBADF (Bad file descriptor) [pid 3721] close(27) = -1 EBADF (Bad file descriptor) [pid 3721] close(28) = -1 EBADF (Bad file descriptor) [pid 3721] close(29) = -1 EBADF (Bad file descriptor) [pid 3721] exit_group(0) = ? [pid 3721] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 104 ./strace-static-x86_64: Process 3722 attached [pid 3722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3722] setpgid(0, 0) = 0 [pid 3722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3722] write(3, "1000", 4) = 4 [pid 3722] close(3) = 0 [pid 3722] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3722] ioctl(3, TUNSETIFF, 0x20000000) = 0 [ 73.972655][ T3721] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 73.980625][ T3721] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 73.988590][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 73.996638][ T3721] R13: 00000000000f4240 R14: 0000000000011ee2 R15: 00007ffdc49a5924 [ 74.004714][ T3721] [pid 3722] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3722] write(4, "5", 1) = 1 [pid 3722] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 74.063169][ T3722] FAULT_INJECTION: forcing a failure. [ 74.063169][ T3722] name failslab, interval 1, probability 0, space 0, times 0 [ 74.076247][ T3722] CPU: 0 PID: 3722 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 74.086396][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.096443][ T3722] Call Trace: [ 74.099711][ T3722] [ 74.102739][ T3722] dump_stack_lvl+0xcd/0x134 [ 74.107416][ T3722] should_fail.cold+0x5/0xa [ 74.112006][ T3722] should_failslab+0x5/0x10 [ 74.116675][ T3722] kmem_cache_alloc_trace+0x60/0x3f0 [ 74.121971][ T3722] ? ref_tracker_alloc+0x14c/0x550 [ 74.127096][ T3722] ref_tracker_alloc+0x14c/0x550 [ 74.132393][ T3722] ? ref_tracker_free+0x6b0/0x6b0 [ 74.137403][ T3722] ? lock_release+0x720/0x720 [ 74.142595][ T3722] ? do_raw_spin_lock+0x120/0x2a0 [ 74.147830][ T3722] ? rwlock_bug.part.0+0x90/0x90 [ 74.152772][ T3722] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 74.158150][ T3722] linkwatch_fire_event+0x202/0x260 [ 74.163452][ T3722] netif_carrier_off+0x96/0xb0 [ 74.168253][ T3722] __tun_detach+0xfe7/0x13e0 [ 74.172855][ T3722] tun_chr_close+0xc4/0x180 [ 74.177363][ T3722] __fput+0x277/0x9d0 [ 74.181448][ T3722] ? __tun_detach+0x13e0/0x13e0 [ 74.186322][ T3722] task_work_run+0xdd/0x1a0 [ 74.190822][ T3722] ptrace_notify+0x114/0x140 [ 74.195411][ T3722] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 74.201674][ T3722] syscall_exit_to_user_mode+0x9/0x60 [ 74.207056][ T3722] do_syscall_64+0x42/0xb0 [ 74.211468][ T3722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.217355][ T3722] RIP: 0033:0x7fc6cd2767a3 [ 74.221771][ T3722] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 74.241393][ T3722] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 74.249807][ T3722] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3722] close(3) = 0 [pid 3722] close(4) = 0 [pid 3722] close(5) = -1 EBADF (Bad file descriptor) [pid 3722] close(6) = -1 EBADF (Bad file descriptor) [pid 3722] close(7) = -1 EBADF (Bad file descriptor) [pid 3722] close(8) = -1 EBADF (Bad file descriptor) [pid 3722] close(9) = -1 EBADF (Bad file descriptor) [pid 3722] close(10) = -1 EBADF (Bad file descriptor) [pid 3722] close(11) = -1 EBADF (Bad file descriptor) [pid 3722] close(12) = -1 EBADF (Bad file descriptor) [pid 3722] close(13) = -1 EBADF (Bad file descriptor) [pid 3722] close(14) = -1 EBADF (Bad file descriptor) [pid 3722] close(15) = -1 EBADF (Bad file descriptor) [pid 3722] close(16) = -1 EBADF (Bad file descriptor) [pid 3722] close(17) = -1 EBADF (Bad file descriptor) [pid 3722] close(18) = -1 EBADF (Bad file descriptor) [pid 3722] close(19) = -1 EBADF (Bad file descriptor) [pid 3722] close(20) = -1 EBADF (Bad file descriptor) [pid 3722] close(21) = -1 EBADF (Bad file descriptor) [pid 3722] close(22) = -1 EBADF (Bad file descriptor) [pid 3722] close(23) = -1 EBADF (Bad file descriptor) [pid 3722] close(24) = -1 EBADF (Bad file descriptor) [pid 3722] close(25) = -1 EBADF (Bad file descriptor) [pid 3722] close(26) = -1 EBADF (Bad file descriptor) [pid 3722] close(27) = -1 EBADF (Bad file descriptor) [pid 3722] close(28) = -1 EBADF (Bad file descriptor) [pid 3722] close(29) = -1 EBADF (Bad file descriptor) [pid 3722] exit_group(0) = ? [pid 3722] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 74.257778][ T3722] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 74.265948][ T3722] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 74.273929][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 74.281909][ T3722] R13: 00000000000f4240 R14: 0000000000012015 R15: 00007ffdc49a5924 [ 74.289884][ T3722] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3723 attached , child_tidptr=0x5555570bd5d0) = 105 [pid 3723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3723] setpgid(0, 0) = 0 [pid 3723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3723] write(3, "1000", 4) = 4 [pid 3723] close(3) = 0 [pid 3723] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3723] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3723] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3723] write(4, "5", 1) = 1 [pid 3723] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 74.354538][ T3723] FAULT_INJECTION: forcing a failure. [ 74.354538][ T3723] name failslab, interval 1, probability 0, space 0, times 0 [ 74.367241][ T3723] CPU: 1 PID: 3723 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 74.377395][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.387541][ T3723] Call Trace: [ 74.391141][ T3723] [ 74.394075][ T3723] dump_stack_lvl+0xcd/0x134 [ 74.398906][ T3723] should_fail.cold+0x5/0xa [ 74.403653][ T3723] should_failslab+0x5/0x10 [ 74.408373][ T3723] kmem_cache_alloc_trace+0x60/0x3f0 [ 74.413697][ T3723] ? ref_tracker_alloc+0x14c/0x550 [ 74.418834][ T3723] ref_tracker_alloc+0x14c/0x550 [ 74.423780][ T3723] ? ref_tracker_free+0x6b0/0x6b0 [ 74.428880][ T3723] ? lock_release+0x720/0x720 [ 74.433678][ T3723] ? do_raw_spin_lock+0x120/0x2a0 [ 74.438745][ T3723] ? rwlock_bug.part.0+0x90/0x90 [ 74.443696][ T3723] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 74.449185][ T3723] linkwatch_fire_event+0x202/0x260 [ 74.454438][ T3723] netif_carrier_off+0x96/0xb0 [ 74.459225][ T3723] __tun_detach+0xfe7/0x13e0 [ 74.463846][ T3723] tun_chr_close+0xc4/0x180 [ 74.468365][ T3723] __fput+0x277/0x9d0 [ 74.472368][ T3723] ? __tun_detach+0x13e0/0x13e0 [ 74.477239][ T3723] task_work_run+0xdd/0x1a0 [ 74.481758][ T3723] ptrace_notify+0x114/0x140 [ 74.486376][ T3723] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 74.492626][ T3723] syscall_exit_to_user_mode+0x9/0x60 [ 74.498016][ T3723] do_syscall_64+0x42/0xb0 [ 74.502459][ T3723] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.508359][ T3723] RIP: 0033:0x7fc6cd2767a3 [ 74.513733][ T3723] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 74.533533][ T3723] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 74.542239][ T3723] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3723] close(3) = 0 [pid 3723] close(4) = 0 [pid 3723] close(5) = -1 EBADF (Bad file descriptor) [pid 3723] close(6) = -1 EBADF (Bad file descriptor) [pid 3723] close(7) = -1 EBADF (Bad file descriptor) [pid 3723] close(8) = -1 EBADF (Bad file descriptor) [pid 3723] close(9) = -1 EBADF (Bad file descriptor) [pid 3723] close(10) = -1 EBADF (Bad file descriptor) [pid 3723] close(11) = -1 EBADF (Bad file descriptor) [pid 3723] close(12) = -1 EBADF (Bad file descriptor) [pid 3723] close(13) = -1 EBADF (Bad file descriptor) [pid 3723] close(14) = -1 EBADF (Bad file descriptor) [pid 3723] close(15) = -1 EBADF (Bad file descriptor) [pid 3723] close(16) = -1 EBADF (Bad file descriptor) [pid 3723] close(17) = -1 EBADF (Bad file descriptor) [pid 3723] close(18) = -1 EBADF (Bad file descriptor) [pid 3723] close(19) = -1 EBADF (Bad file descriptor) [pid 3723] close(20) = -1 EBADF (Bad file descriptor) [pid 3723] close(21) = -1 EBADF (Bad file descriptor) [pid 3723] close(22) = -1 EBADF (Bad file descriptor) [pid 3723] close(23) = -1 EBADF (Bad file descriptor) [pid 3723] close(24) = -1 EBADF (Bad file descriptor) [pid 3723] close(25) = -1 EBADF (Bad file descriptor) [pid 3723] close(26) = -1 EBADF (Bad file descriptor) [pid 3723] close(27) = -1 EBADF (Bad file descriptor) [pid 3723] close(28) = -1 EBADF (Bad file descriptor) [pid 3723] close(29) = -1 EBADF (Bad file descriptor) [pid 3723] exit_group(0) = ? [pid 3723] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 106 ./strace-static-x86_64: Process 3724 attached [pid 3724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3724] setpgid(0, 0) = 0 [pid 3724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3724] write(3, "1000", 4) = 4 [pid 3724] close(3) = 0 [pid 3724] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3724] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3724] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3724] write(4, "5", 1) = 1 [pid 3724] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 74.550472][ T3723] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 74.558443][ T3723] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 74.566696][ T3723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 74.574666][ T3723] R13: 00000000000f4240 R14: 0000000000012135 R15: 00007ffdc49a5924 [ 74.582660][ T3723] [ 74.636267][ T3724] FAULT_INJECTION: forcing a failure. [ 74.636267][ T3724] name failslab, interval 1, probability 0, space 0, times 0 [ 74.649095][ T3724] CPU: 0 PID: 3724 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 74.659655][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.669707][ T3724] Call Trace: [ 74.672973][ T3724] [ 74.675887][ T3724] dump_stack_lvl+0xcd/0x134 [ 74.680480][ T3724] should_fail.cold+0x5/0xa [ 74.684983][ T3724] should_failslab+0x5/0x10 [ 74.689477][ T3724] kmem_cache_alloc_trace+0x60/0x3f0 [ 74.694754][ T3724] ? ref_tracker_alloc+0x14c/0x550 [ 74.699865][ T3724] ref_tracker_alloc+0x14c/0x550 [ 74.704804][ T3724] ? ref_tracker_free+0x6b0/0x6b0 [ 74.709827][ T3724] ? lock_release+0x720/0x720 [ 74.714519][ T3724] ? do_raw_spin_lock+0x120/0x2a0 [ 74.719550][ T3724] ? rwlock_bug.part.0+0x90/0x90 [ 74.724482][ T3724] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 74.729848][ T3724] linkwatch_fire_event+0x202/0x260 [ 74.735044][ T3724] netif_carrier_off+0x96/0xb0 [ 74.739806][ T3724] __tun_detach+0xfe7/0x13e0 [ 74.744392][ T3724] tun_chr_close+0xc4/0x180 [ 74.748891][ T3724] __fput+0x277/0x9d0 [ 74.752952][ T3724] ? __tun_detach+0x13e0/0x13e0 [ 74.757788][ T3724] task_work_run+0xdd/0x1a0 [ 74.762282][ T3724] ptrace_notify+0x114/0x140 [ 74.766864][ T3724] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 74.773270][ T3724] syscall_exit_to_user_mode+0x9/0x60 [ 74.778639][ T3724] do_syscall_64+0x42/0xb0 [ 74.783050][ T3724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.788933][ T3724] RIP: 0033:0x7fc6cd2767a3 [ 74.793428][ T3724] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 74.813031][ T3724] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 74.821436][ T3724] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3724] close(3) = 0 [pid 3724] close(4) = 0 [pid 3724] close(5) = -1 EBADF (Bad file descriptor) [pid 3724] close(6) = -1 EBADF (Bad file descriptor) [pid 3724] close(7) = -1 EBADF (Bad file descriptor) [pid 3724] close(8) = -1 EBADF (Bad file descriptor) [pid 3724] close(9) = -1 EBADF (Bad file descriptor) [pid 3724] close(10) = -1 EBADF (Bad file descriptor) [pid 3724] close(11) = -1 EBADF (Bad file descriptor) [pid 3724] close(12) = -1 EBADF (Bad file descriptor) [pid 3724] close(13) = -1 EBADF (Bad file descriptor) [pid 3724] close(14) = -1 EBADF (Bad file descriptor) [pid 3724] close(15) = -1 EBADF (Bad file descriptor) [pid 3724] close(16) = -1 EBADF (Bad file descriptor) [pid 3724] close(17) = -1 EBADF (Bad file descriptor) [ 74.829760][ T3724] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 74.837902][ T3724] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 74.845870][ T3724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 74.853859][ T3724] R13: 00000000000f4240 R14: 0000000000012254 R15: 00007ffdc49a5924 [ 74.861835][ T3724] [pid 3724] close(18) = -1 EBADF (Bad file descriptor) [pid 3724] close(19) = -1 EBADF (Bad file descriptor) [pid 3724] close(20) = -1 EBADF (Bad file descriptor) [pid 3724] close(21) = -1 EBADF (Bad file descriptor) [pid 3724] close(22) = -1 EBADF (Bad file descriptor) [pid 3724] close(23) = -1 EBADF (Bad file descriptor) [pid 3724] close(24) = -1 EBADF (Bad file descriptor) [pid 3724] close(25) = -1 EBADF (Bad file descriptor) [pid 3724] close(26) = -1 EBADF (Bad file descriptor) [pid 3724] close(27) = -1 EBADF (Bad file descriptor) [pid 3724] close(28) = -1 EBADF (Bad file descriptor) [pid 3724] close(29) = -1 EBADF (Bad file descriptor) [pid 3724] exit_group(0) = ? [pid 3724] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3725 attached , child_tidptr=0x5555570bd5d0) = 107 [pid 3725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3725] setpgid(0, 0) = 0 [pid 3725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3725] write(3, "1000", 4) = 4 [pid 3725] close(3) = 0 [pid 3725] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3725] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3725] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3725] write(4, "5", 1) = 1 [pid 3725] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 74.938379][ T3725] FAULT_INJECTION: forcing a failure. [ 74.938379][ T3725] name failslab, interval 1, probability 0, space 0, times 0 [ 74.951042][ T3725] CPU: 0 PID: 3725 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 74.961559][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.971620][ T3725] Call Trace: [ 74.974910][ T3725] [ 74.977830][ T3725] dump_stack_lvl+0xcd/0x134 [ 74.982415][ T3725] should_fail.cold+0x5/0xa [ 74.986913][ T3725] should_failslab+0x5/0x10 [ 74.991404][ T3725] kmem_cache_alloc_trace+0x60/0x3f0 [ 74.996765][ T3725] ? ref_tracker_alloc+0x14c/0x550 [ 75.001876][ T3725] ref_tracker_alloc+0x14c/0x550 [ 75.006819][ T3725] ? ref_tracker_free+0x6b0/0x6b0 [ 75.011848][ T3725] ? lock_release+0x720/0x720 [ 75.016520][ T3725] ? do_raw_spin_lock+0x120/0x2a0 [ 75.021549][ T3725] ? rwlock_bug.part.0+0x90/0x90 [ 75.026649][ T3725] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 75.032020][ T3725] linkwatch_fire_event+0x202/0x260 [ 75.037319][ T3725] netif_carrier_off+0x96/0xb0 [ 75.042096][ T3725] __tun_detach+0xfe7/0x13e0 [ 75.046693][ T3725] tun_chr_close+0xc4/0x180 [ 75.051197][ T3725] __fput+0x277/0x9d0 [ 75.055175][ T3725] ? __tun_detach+0x13e0/0x13e0 [ 75.060030][ T3725] task_work_run+0xdd/0x1a0 [ 75.064544][ T3725] ptrace_notify+0x114/0x140 [ 75.069135][ T3725] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 75.075386][ T3725] syscall_exit_to_user_mode+0x9/0x60 [ 75.080784][ T3725] do_syscall_64+0x42/0xb0 [ 75.085207][ T3725] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.091277][ T3725] RIP: 0033:0x7fc6cd2767a3 [ 75.095694][ T3725] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 75.115586][ T3725] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.124001][ T3725] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3725] close(3) = 0 [pid 3725] close(4) = 0 [pid 3725] close(5) = -1 EBADF (Bad file descriptor) [pid 3725] close(6) = -1 EBADF (Bad file descriptor) [pid 3725] close(7) = -1 EBADF (Bad file descriptor) [pid 3725] close(8) = -1 EBADF (Bad file descriptor) [pid 3725] close(9) = -1 EBADF (Bad file descriptor) [pid 3725] close(10) = -1 EBADF (Bad file descriptor) [pid 3725] close(11) = -1 EBADF (Bad file descriptor) [pid 3725] close(12) = -1 EBADF (Bad file descriptor) [pid 3725] close(13) = -1 EBADF (Bad file descriptor) [ 75.132074][ T3725] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 75.140214][ T3725] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 75.149686][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.157656][ T3725] R13: 00000000000f4240 R14: 000000000001236c R15: 00007ffdc49a5924 [ 75.165723][ T3725] [pid 3725] close(14) = -1 EBADF (Bad file descriptor) [pid 3725] close(15) = -1 EBADF (Bad file descriptor) [pid 3725] close(16) = -1 EBADF (Bad file descriptor) [pid 3725] close(17) = -1 EBADF (Bad file descriptor) [pid 3725] close(18) = -1 EBADF (Bad file descriptor) [pid 3725] close(19) = -1 EBADF (Bad file descriptor) [pid 3725] close(20) = -1 EBADF (Bad file descriptor) [pid 3725] close(21) = -1 EBADF (Bad file descriptor) [pid 3725] close(22) = -1 EBADF (Bad file descriptor) [pid 3725] close(23) = -1 EBADF (Bad file descriptor) [pid 3725] close(24) = -1 EBADF (Bad file descriptor) [pid 3725] close(25) = -1 EBADF (Bad file descriptor) [pid 3725] close(26) = -1 EBADF (Bad file descriptor) [pid 3725] close(27) = -1 EBADF (Bad file descriptor) [pid 3725] close(28) = -1 EBADF (Bad file descriptor) [pid 3725] close(29) = -1 EBADF (Bad file descriptor) [pid 3725] exit_group(0) = ? [pid 3725] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3726 attached [pid 3726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 108 [pid 3726] <... prctl resumed>) = 0 [pid 3726] setpgid(0, 0) = 0 [pid 3726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3726] write(3, "1000", 4) = 4 [pid 3726] close(3) = 0 [pid 3726] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3726] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3726] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3726] write(4, "5", 1) = 1 [pid 3726] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 75.241144][ T3726] FAULT_INJECTION: forcing a failure. [ 75.241144][ T3726] name failslab, interval 1, probability 0, space 0, times 0 [ 75.253775][ T3726] CPU: 0 PID: 3726 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 75.263923][ T3726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.273978][ T3726] Call Trace: [ 75.277278][ T3726] [ 75.280216][ T3726] dump_stack_lvl+0xcd/0x134 [ 75.284804][ T3726] should_fail.cold+0x5/0xa [ 75.289308][ T3726] should_failslab+0x5/0x10 [ 75.293810][ T3726] kmem_cache_alloc_trace+0x60/0x3f0 [ 75.299268][ T3726] ? ref_tracker_alloc+0x14c/0x550 [ 75.304394][ T3726] ref_tracker_alloc+0x14c/0x550 [ 75.309324][ T3726] ? ref_tracker_free+0x6b0/0x6b0 [ 75.314351][ T3726] ? lock_release+0x720/0x720 [ 75.319016][ T3726] ? do_raw_spin_lock+0x120/0x2a0 [ 75.324030][ T3726] ? rwlock_bug.part.0+0x90/0x90 [ 75.328963][ T3726] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 75.334349][ T3726] linkwatch_fire_event+0x202/0x260 [ 75.339546][ T3726] netif_carrier_off+0x96/0xb0 [ 75.344393][ T3726] __tun_detach+0xfe7/0x13e0 [ 75.348979][ T3726] tun_chr_close+0xc4/0x180 [ 75.353472][ T3726] __fput+0x277/0x9d0 [ 75.357444][ T3726] ? __tun_detach+0x13e0/0x13e0 [ 75.362289][ T3726] task_work_run+0xdd/0x1a0 [ 75.366784][ T3726] ptrace_notify+0x114/0x140 [ 75.371449][ T3726] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 75.377702][ T3726] syscall_exit_to_user_mode+0x9/0x60 [ 75.383164][ T3726] do_syscall_64+0x42/0xb0 [ 75.387580][ T3726] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.393472][ T3726] RIP: 0033:0x7fc6cd2767a3 [ 75.397872][ T3726] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 75.417594][ T3726] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.426012][ T3726] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 75.433977][ T3726] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3726] close(3) = 0 [pid 3726] close(4) = 0 [pid 3726] close(5) = -1 EBADF (Bad file descriptor) [pid 3726] close(6) = -1 EBADF (Bad file descriptor) [pid 3726] close(7) = -1 EBADF (Bad file descriptor) [pid 3726] close(8) = -1 EBADF (Bad file descriptor) [pid 3726] close(9) = -1 EBADF (Bad file descriptor) [pid 3726] close(10) = -1 EBADF (Bad file descriptor) [pid 3726] close(11) = -1 EBADF (Bad file descriptor) [pid 3726] close(12) = -1 EBADF (Bad file descriptor) [pid 3726] close(13) = -1 EBADF (Bad file descriptor) [pid 3726] close(14) = -1 EBADF (Bad file descriptor) [pid 3726] close(15) = -1 EBADF (Bad file descriptor) [pid 3726] close(16) = -1 EBADF (Bad file descriptor) [pid 3726] close(17) = -1 EBADF (Bad file descriptor) [pid 3726] close(18) = -1 EBADF (Bad file descriptor) [pid 3726] close(19) = -1 EBADF (Bad file descriptor) [pid 3726] close(20) = -1 EBADF (Bad file descriptor) [pid 3726] close(21) = -1 EBADF (Bad file descriptor) [pid 3726] close(22) = -1 EBADF (Bad file descriptor) [pid 3726] close(23) = -1 EBADF (Bad file descriptor) [pid 3726] close(24) = -1 EBADF (Bad file descriptor) [pid 3726] close(25) = -1 EBADF (Bad file descriptor) [pid 3726] close(26) = -1 EBADF (Bad file descriptor) [pid 3726] close(27) = -1 EBADF (Bad file descriptor) [pid 3726] close(28) = -1 EBADF (Bad file descriptor) [pid 3726] close(29) = -1 EBADF (Bad file descriptor) [pid 3726] exit_group(0) = ? [pid 3726] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 109 ./strace-static-x86_64: Process 3727 attached [pid 3727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3727] setpgid(0, 0) = 0 [pid 3727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3727] write(3, "1000", 4) = 4 [pid 3727] close(3) = 0 [pid 3727] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3727] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3727] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 75.441937][ T3726] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 75.449905][ T3726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.457882][ T3726] R13: 00000000000f4240 R14: 000000000001249b R15: 00007ffdc49a5924 [ 75.465863][ T3726] [pid 3727] write(4, "5", 1) = 1 [pid 3727] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 75.524925][ T3727] FAULT_INJECTION: forcing a failure. [ 75.524925][ T3727] name failslab, interval 1, probability 0, space 0, times 0 [ 75.537793][ T3727] CPU: 0 PID: 3727 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 75.548598][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.559075][ T3727] Call Trace: [ 75.562774][ T3727] [ 75.566003][ T3727] dump_stack_lvl+0xcd/0x134 [ 75.570592][ T3727] should_fail.cold+0x5/0xa [ 75.575097][ T3727] should_failslab+0x5/0x10 [ 75.579591][ T3727] kmem_cache_alloc_trace+0x60/0x3f0 [ 75.584874][ T3727] ? ref_tracker_alloc+0x14c/0x550 [ 75.589982][ T3727] ref_tracker_alloc+0x14c/0x550 [ 75.595298][ T3727] ? ref_tracker_free+0x6b0/0x6b0 [ 75.600335][ T3727] ? lock_release+0x720/0x720 [ 75.605022][ T3727] ? do_raw_spin_lock+0x120/0x2a0 [ 75.610045][ T3727] ? rwlock_bug.part.0+0x90/0x90 [ 75.614974][ T3727] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 75.620362][ T3727] linkwatch_fire_event+0x202/0x260 [ 75.625562][ T3727] netif_carrier_off+0x96/0xb0 [ 75.630356][ T3727] __tun_detach+0xfe7/0x13e0 [ 75.634971][ T3727] tun_chr_close+0xc4/0x180 [ 75.639475][ T3727] __fput+0x277/0x9d0 [ 75.643471][ T3727] ? __tun_detach+0x13e0/0x13e0 [ 75.648332][ T3727] task_work_run+0xdd/0x1a0 [ 75.652824][ T3727] ptrace_notify+0x114/0x140 [ 75.657425][ T3727] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 75.663662][ T3727] syscall_exit_to_user_mode+0x9/0x60 [ 75.669128][ T3727] do_syscall_64+0x42/0xb0 [ 75.673535][ T3727] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.679441][ T3727] RIP: 0033:0x7fc6cd2767a3 [ 75.683869][ T3727] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 75.703472][ T3727] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.711900][ T3727] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3727] close(3) = 0 [ 75.720138][ T3727] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 75.728097][ T3727] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 75.736068][ T3727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.744041][ T3727] R13: 00000000000f4240 R14: 00000000000125c9 R15: 00007ffdc49a5924 [ 75.752025][ T3727] [pid 3727] close(4) = 0 [pid 3727] close(5) = -1 EBADF (Bad file descriptor) [pid 3727] close(6) = -1 EBADF (Bad file descriptor) [pid 3727] close(7) = -1 EBADF (Bad file descriptor) [pid 3727] close(8) = -1 EBADF (Bad file descriptor) [pid 3727] close(9) = -1 EBADF (Bad file descriptor) [pid 3727] close(10) = -1 EBADF (Bad file descriptor) [pid 3727] close(11) = -1 EBADF (Bad file descriptor) [pid 3727] close(12) = -1 EBADF (Bad file descriptor) [pid 3727] close(13) = -1 EBADF (Bad file descriptor) [pid 3727] close(14) = -1 EBADF (Bad file descriptor) [pid 3727] close(15) = -1 EBADF (Bad file descriptor) [pid 3727] close(16) = -1 EBADF (Bad file descriptor) [pid 3727] close(17) = -1 EBADF (Bad file descriptor) [pid 3727] close(18) = -1 EBADF (Bad file descriptor) [pid 3727] close(19) = -1 EBADF (Bad file descriptor) [pid 3727] close(20) = -1 EBADF (Bad file descriptor) [pid 3727] close(21) = -1 EBADF (Bad file descriptor) [pid 3727] close(22) = -1 EBADF (Bad file descriptor) [pid 3727] close(23) = -1 EBADF (Bad file descriptor) [pid 3727] close(24) = -1 EBADF (Bad file descriptor) [pid 3727] close(25) = -1 EBADF (Bad file descriptor) [pid 3727] close(26) = -1 EBADF (Bad file descriptor) [pid 3727] close(27) = -1 EBADF (Bad file descriptor) [pid 3727] close(28) = -1 EBADF (Bad file descriptor) [pid 3727] close(29) = -1 EBADF (Bad file descriptor) [pid 3727] exit_group(0) = ? [pid 3727] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=109, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 110 ./strace-static-x86_64: Process 3728 attached [pid 3728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3728] setpgid(0, 0) = 0 [pid 3728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3728] write(3, "1000", 4) = 4 [pid 3728] close(3) = 0 [pid 3728] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3728] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3728] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3728] write(4, "5", 1) = 1 [ 75.824982][ T3728] FAULT_INJECTION: forcing a failure. [ 75.824982][ T3728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.838503][ T3728] CPU: 1 PID: 3728 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 75.848860][ T3728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.858910][ T3728] Call Trace: [ 75.862213][ T3728] [ 75.865138][ T3728] dump_stack_lvl+0xcd/0x134 [ 75.869739][ T3728] should_fail.cold+0x5/0xa [ 75.874247][ T3728] prepare_alloc_pages+0x17b/0x570 [ 75.879350][ T3728] __alloc_pages+0x12f/0x500 [ 75.884014][ T3728] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 75.890796][ T3728] ? ___slab_alloc+0x47e/0xf20 [ 75.895568][ T3728] alloc_pages+0x1aa/0x310 [ 75.899985][ T3728] ? mark_held_locks+0x9f/0xe0 [ 75.904759][ T3728] allocate_slab+0x26c/0x3c0 [ 75.909427][ T3728] ___slab_alloc+0x8df/0xf20 [ 75.914004][ T3728] ? napi_skb_cache_get+0xeb/0x170 [ 75.919121][ T3728] ? mark_held_locks+0x9f/0xe0 [ 75.923905][ T3728] kmem_cache_alloc_bulk+0x21c/0x720 [ 75.929176][ T3728] napi_skb_cache_get+0xeb/0x170 [ 75.934101][ T3728] __alloc_skb+0x9b/0x340 [ 75.938431][ T3728] ? __lock_acquire+0xbca/0x56c0 [ 75.943371][ T3728] __napi_alloc_skb+0x70/0x310 [ 75.948125][ T3728] napi_get_frags+0x5e/0x140 [ 75.952698][ T3728] tun_get_user+0xa07/0x3b00 [ 75.957386][ T3728] ? tun_build_skb+0x1170/0x1170 [ 75.962314][ T3728] ? lock_downgrade+0x6e0/0x6e0 [ 75.967152][ T3728] ? find_held_lock+0x2d/0x110 [ 75.971943][ T3728] tun_chr_write_iter+0xdb/0x200 [ 75.976869][ T3728] do_iter_readv_writev+0x3d1/0x640 [ 75.982056][ T3728] ? new_sync_write+0x560/0x560 [ 75.986904][ T3728] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.993426][ T3728] ? security_file_permission+0xab/0xd0 [ 75.999374][ T3728] do_iter_write+0x182/0x700 [ 76.004058][ T3728] ? import_iovec+0x10c/0x150 [ 76.008954][ T3728] vfs_writev+0x1aa/0x630 [ 76.013361][ T3728] ? vfs_iter_write+0xa0/0xa0 [ 76.018042][ T3728] ? do_raw_spin_lock+0x120/0x2a0 [ 76.023082][ T3728] ? rwlock_bug.part.0+0x90/0x90 [ 76.028043][ T3728] ? _raw_spin_lock_irq+0x41/0x50 [ 76.033077][ T3728] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 76.039324][ T3728] ? find_held_lock+0x2d/0x110 [ 76.044103][ T3728] ? ptrace_notify+0xfa/0x140 [ 76.049050][ T3728] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 76.055403][ T3728] ? __fget_light+0x20f/0x270 [ 76.060110][ T3728] do_writev+0x133/0x2f0 [ 76.064394][ T3728] ? vfs_writev+0x630/0x630 [ 76.069036][ T3728] ? lockdep_hardirqs_on+0x79/0x100 [ 76.074339][ T3728] ? _raw_spin_unlock_irq+0x2a/0x40 [ 76.079759][ T3728] ? ptrace_notify+0xfa/0x140 [ 76.084552][ T3728] do_syscall_64+0x35/0xb0 [ 76.088982][ T3728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.094873][ T3728] RIP: 0033:0x7fc6cd2b4c39 [ 76.099279][ T3728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.118969][ T3728] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 76.127392][ T3728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 76.135381][ T3728] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 76.143357][ T3728] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 76.151355][ T3728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.159325][ T3728] R13: 00000000000f4240 R14: 00000000000126e8 R15: 00007ffdc49a5924 [ 76.167305][ T3728] [pid 3728] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 76.173611][ T22] cfg80211: failed to load regulatory.db [pid 3728] close(3) = 0 [pid 3728] close(4) = 0 [pid 3728] close(5) = -1 EBADF (Bad file descriptor) [pid 3728] close(6) = -1 EBADF (Bad file descriptor) [pid 3728] close(7) = -1 EBADF (Bad file descriptor) [pid 3728] close(8) = -1 EBADF (Bad file descriptor) [pid 3728] close(9) = -1 EBADF (Bad file descriptor) [pid 3728] close(10) = -1 EBADF (Bad file descriptor) [pid 3728] close(11) = -1 EBADF (Bad file descriptor) [pid 3728] close(12) = -1 EBADF (Bad file descriptor) [pid 3728] close(13) = -1 EBADF (Bad file descriptor) [pid 3728] close(14) = -1 EBADF (Bad file descriptor) [pid 3728] close(15) = -1 EBADF (Bad file descriptor) [pid 3728] close(16) = -1 EBADF (Bad file descriptor) [pid 3728] close(17) = -1 EBADF (Bad file descriptor) [pid 3728] close(18) = -1 EBADF (Bad file descriptor) [pid 3728] close(19) = -1 EBADF (Bad file descriptor) [pid 3728] close(20) = -1 EBADF (Bad file descriptor) [pid 3728] close(21) = -1 EBADF (Bad file descriptor) [pid 3728] close(22) = -1 EBADF (Bad file descriptor) [pid 3728] close(23) = -1 EBADF (Bad file descriptor) [pid 3728] close(24) = -1 EBADF (Bad file descriptor) [pid 3728] close(25) = -1 EBADF (Bad file descriptor) [pid 3728] close(26) = -1 EBADF (Bad file descriptor) [pid 3728] close(27) = -1 EBADF (Bad file descriptor) [pid 3728] close(28) = -1 EBADF (Bad file descriptor) [pid 3728] close(29) = -1 EBADF (Bad file descriptor) [pid 3728] exit_group(0) = ? [pid 3728] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 111 ./strace-static-x86_64: Process 3730 attached [pid 3730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3730] setpgid(0, 0) = 0 [pid 3730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3730] write(3, "1000", 4) = 4 [pid 3730] close(3) = 0 [pid 3730] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3730] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3730] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3730] write(4, "5", 1) = 1 [pid 3730] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 76.246853][ T3730] FAULT_INJECTION: forcing a failure. [ 76.246853][ T3730] name failslab, interval 1, probability 0, space 0, times 0 [ 76.259468][ T3730] CPU: 0 PID: 3730 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 76.269611][ T3730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.279642][ T3730] Call Trace: [ 76.282897][ T3730] [ 76.285808][ T3730] dump_stack_lvl+0xcd/0x134 [ 76.290384][ T3730] should_fail.cold+0x5/0xa [ 76.294864][ T3730] should_failslab+0x5/0x10 [ 76.299345][ T3730] kmem_cache_alloc_trace+0x60/0x3f0 [ 76.304607][ T3730] ? ref_tracker_alloc+0x14c/0x550 [ 76.309703][ T3730] ref_tracker_alloc+0x14c/0x550 [ 76.314632][ T3730] ? ref_tracker_free+0x6b0/0x6b0 [ 76.319642][ T3730] ? lock_release+0x720/0x720 [ 76.324307][ T3730] ? do_raw_spin_lock+0x120/0x2a0 [ 76.329509][ T3730] ? rwlock_bug.part.0+0x90/0x90 [ 76.334434][ T3730] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 76.339802][ T3730] linkwatch_fire_event+0x202/0x260 [ 76.344993][ T3730] netif_carrier_off+0x96/0xb0 [ 76.349746][ T3730] __tun_detach+0xfe7/0x13e0 [ 76.354336][ T3730] tun_chr_close+0xc4/0x180 [ 76.358825][ T3730] __fput+0x277/0x9d0 [ 76.362798][ T3730] ? __tun_detach+0x13e0/0x13e0 [ 76.367653][ T3730] task_work_run+0xdd/0x1a0 [ 76.372234][ T3730] ptrace_notify+0x114/0x140 [ 76.376816][ T3730] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 76.383046][ T3730] syscall_exit_to_user_mode+0x9/0x60 [ 76.388405][ T3730] do_syscall_64+0x42/0xb0 [ 76.392812][ T3730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.398706][ T3730] RIP: 0033:0x7fc6cd2767a3 [ 76.403105][ T3730] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 76.422704][ T3730] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 76.431115][ T3730] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 76.439098][ T3730] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3730] close(3) = 0 [pid 3730] close(4) = 0 [pid 3730] close(5) = -1 EBADF (Bad file descriptor) [pid 3730] close(6) = -1 EBADF (Bad file descriptor) [pid 3730] close(7) = -1 EBADF (Bad file descriptor) [pid 3730] close(8) = -1 EBADF (Bad file descriptor) [pid 3730] close(9) = -1 EBADF (Bad file descriptor) [pid 3730] close(10) = -1 EBADF (Bad file descriptor) [pid 3730] close(11) = -1 EBADF (Bad file descriptor) [pid 3730] close(12) = -1 EBADF (Bad file descriptor) [pid 3730] close(13) = -1 EBADF (Bad file descriptor) [pid 3730] close(14) = -1 EBADF (Bad file descriptor) [pid 3730] close(15) = -1 EBADF (Bad file descriptor) [pid 3730] close(16) = -1 EBADF (Bad file descriptor) [pid 3730] close(17) = -1 EBADF (Bad file descriptor) [pid 3730] close(18) = -1 EBADF (Bad file descriptor) [pid 3730] close(19) = -1 EBADF (Bad file descriptor) [pid 3730] close(20) = -1 EBADF (Bad file descriptor) [pid 3730] close(21) = -1 EBADF (Bad file descriptor) [pid 3730] close(22) = -1 EBADF (Bad file descriptor) [pid 3730] close(23) = -1 EBADF (Bad file descriptor) [pid 3730] close(24) = -1 EBADF (Bad file descriptor) [pid 3730] close(25) = -1 EBADF (Bad file descriptor) [pid 3730] close(26) = -1 EBADF (Bad file descriptor) [pid 3730] close(27) = -1 EBADF (Bad file descriptor) [pid 3730] close(28) = -1 EBADF (Bad file descriptor) [pid 3730] close(29) = -1 EBADF (Bad file descriptor) [pid 3730] exit_group(0) = ? [pid 3730] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 112 ./strace-static-x86_64: Process 3731 attached [ 76.447058][ T3730] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 76.455019][ T3730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.462988][ T3730] R13: 00000000000f4240 R14: 0000000000012812 R15: 00007ffdc49a5924 [ 76.470968][ T3730] [pid 3731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3731] setpgid(0, 0) = 0 [pid 3731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3731] write(3, "1000", 4) = 4 [pid 3731] close(3) = 0 [pid 3731] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3731] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3731] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3731] write(4, "5", 1) = 1 [pid 3731] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 76.535688][ T3731] FAULT_INJECTION: forcing a failure. [ 76.535688][ T3731] name failslab, interval 1, probability 0, space 0, times 0 [ 76.548770][ T3731] CPU: 1 PID: 3731 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 76.558994][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.569028][ T3731] Call Trace: [ 76.572391][ T3731] [ 76.575301][ T3731] dump_stack_lvl+0xcd/0x134 [ 76.579894][ T3731] should_fail.cold+0x5/0xa [ 76.584397][ T3731] should_failslab+0x5/0x10 [ 76.588886][ T3731] kmem_cache_alloc_trace+0x60/0x3f0 [ 76.594166][ T3731] ? ref_tracker_alloc+0x14c/0x550 [ 76.599288][ T3731] ref_tracker_alloc+0x14c/0x550 [ 76.604217][ T3731] ? ref_tracker_free+0x6b0/0x6b0 [ 76.609229][ T3731] ? lock_release+0x720/0x720 [ 76.613899][ T3731] ? do_raw_spin_lock+0x120/0x2a0 [ 76.618919][ T3731] ? rwlock_bug.part.0+0x90/0x90 [ 76.623855][ T3731] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 76.629251][ T3731] linkwatch_fire_event+0x202/0x260 [ 76.634457][ T3731] netif_carrier_off+0x96/0xb0 [ 76.639306][ T3731] __tun_detach+0xfe7/0x13e0 [ 76.643901][ T3731] tun_chr_close+0xc4/0x180 [ 76.648400][ T3731] __fput+0x277/0x9d0 [ 76.652428][ T3731] ? __tun_detach+0x13e0/0x13e0 [ 76.657276][ T3731] task_work_run+0xdd/0x1a0 [ 76.661776][ T3731] ptrace_notify+0x114/0x140 [ 76.666363][ T3731] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 76.672597][ T3731] syscall_exit_to_user_mode+0x9/0x60 [ 76.677963][ T3731] do_syscall_64+0x42/0xb0 [ 76.682371][ T3731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.688251][ T3731] RIP: 0033:0x7fc6cd2767a3 [ 76.692652][ T3731] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 76.712340][ T3731] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 76.720855][ T3731] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 76.728820][ T3731] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3731] close(3) = 0 [ 76.736779][ T3731] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 76.744737][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.752697][ T3731] R13: 00000000000f4240 R14: 00000000000129b9 R15: 00007ffdc49a5924 [ 76.760680][ T3731] [pid 3731] close(4) = 0 [pid 3731] close(5) = -1 EBADF (Bad file descriptor) [pid 3731] close(6) = -1 EBADF (Bad file descriptor) [pid 3731] close(7) = -1 EBADF (Bad file descriptor) [pid 3731] close(8) = -1 EBADF (Bad file descriptor) [pid 3731] close(9) = -1 EBADF (Bad file descriptor) [pid 3731] close(10) = -1 EBADF (Bad file descriptor) [pid 3731] close(11) = -1 EBADF (Bad file descriptor) [pid 3731] close(12) = -1 EBADF (Bad file descriptor) [pid 3731] close(13) = -1 EBADF (Bad file descriptor) [pid 3731] close(14) = -1 EBADF (Bad file descriptor) [pid 3731] close(15) = -1 EBADF (Bad file descriptor) [pid 3731] close(16) = -1 EBADF (Bad file descriptor) [pid 3731] close(17) = -1 EBADF (Bad file descriptor) [pid 3731] close(18) = -1 EBADF (Bad file descriptor) [pid 3731] close(19) = -1 EBADF (Bad file descriptor) [pid 3731] close(20) = -1 EBADF (Bad file descriptor) [pid 3731] close(21) = -1 EBADF (Bad file descriptor) [pid 3731] close(22) = -1 EBADF (Bad file descriptor) [pid 3731] close(23) = -1 EBADF (Bad file descriptor) [pid 3731] close(24) = -1 EBADF (Bad file descriptor) [pid 3731] close(25) = -1 EBADF (Bad file descriptor) [pid 3731] close(26) = -1 EBADF (Bad file descriptor) [pid 3731] close(27) = -1 EBADF (Bad file descriptor) [pid 3731] close(28) = -1 EBADF (Bad file descriptor) [pid 3731] close(29) = -1 EBADF (Bad file descriptor) [pid 3731] exit_group(0) = ? [pid 3731] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 113 ./strace-static-x86_64: Process 3732 attached [pid 3732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3732] setpgid(0, 0) = 0 [pid 3732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3732] write(3, "1000", 4) = 4 [pid 3732] close(3) = 0 [pid 3732] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3732] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3732] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3732] write(4, "5", 1) = 1 [pid 3732] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 76.844971][ T3732] FAULT_INJECTION: forcing a failure. [ 76.844971][ T3732] name failslab, interval 1, probability 0, space 0, times 0 [ 76.857606][ T3732] CPU: 0 PID: 3732 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 76.867766][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.877927][ T3732] Call Trace: [ 76.881826][ T3732] [ 76.884746][ T3732] dump_stack_lvl+0xcd/0x134 [ 76.889353][ T3732] should_fail.cold+0x5/0xa [ 76.893852][ T3732] should_failslab+0x5/0x10 [ 76.898342][ T3732] kmem_cache_alloc_trace+0x60/0x3f0 [ 76.903615][ T3732] ? ref_tracker_alloc+0x14c/0x550 [ 76.908820][ T3732] ref_tracker_alloc+0x14c/0x550 [ 76.913854][ T3732] ? ref_tracker_free+0x6b0/0x6b0 [ 76.918865][ T3732] ? lock_release+0x720/0x720 [ 76.923531][ T3732] ? do_raw_spin_lock+0x120/0x2a0 [ 76.928545][ T3732] ? rwlock_bug.part.0+0x90/0x90 [ 76.933486][ T3732] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 76.938847][ T3732] linkwatch_fire_event+0x202/0x260 [ 76.944055][ T3732] netif_carrier_off+0x96/0xb0 [ 76.949070][ T3732] __tun_detach+0xfe7/0x13e0 [ 76.953666][ T3732] tun_chr_close+0xc4/0x180 [ 76.958243][ T3732] __fput+0x277/0x9d0 [ 76.962332][ T3732] ? __tun_detach+0x13e0/0x13e0 [ 76.967567][ T3732] task_work_run+0xdd/0x1a0 [ 76.972175][ T3732] ptrace_notify+0x114/0x140 [ 76.976759][ T3732] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 76.983019][ T3732] syscall_exit_to_user_mode+0x9/0x60 [ 76.988385][ T3732] do_syscall_64+0x42/0xb0 [ 76.992799][ T3732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.998703][ T3732] RIP: 0033:0x7fc6cd2767a3 [ 77.003108][ T3732] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 77.022731][ T3732] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 77.031151][ T3732] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 77.039110][ T3732] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 77.047069][ T3732] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 77.055037][ T3732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.062991][ T3732] R13: 00000000000f4240 R14: 0000000000012adb R15: 00007ffdc49a5924 [ 77.071041][ T3732] [pid 3732] close(3) = 0 [pid 3732] close(4) = 0 [pid 3732] close(5) = -1 EBADF (Bad file descriptor) [pid 3732] close(6) = -1 EBADF (Bad file descriptor) [pid 3732] close(7) = -1 EBADF (Bad file descriptor) [pid 3732] close(8) = -1 EBADF (Bad file descriptor) [pid 3732] close(9) = -1 EBADF (Bad file descriptor) [pid 3732] close(10) = -1 EBADF (Bad file descriptor) [pid 3732] close(11) = -1 EBADF (Bad file descriptor) [pid 3732] close(12) = -1 EBADF (Bad file descriptor) [pid 3732] close(13) = -1 EBADF (Bad file descriptor) [pid 3732] close(14) = -1 EBADF (Bad file descriptor) [pid 3732] close(15) = -1 EBADF (Bad file descriptor) [pid 3732] close(16) = -1 EBADF (Bad file descriptor) [pid 3732] close(17) = -1 EBADF (Bad file descriptor) [pid 3732] close(18) = -1 EBADF (Bad file descriptor) [pid 3732] close(19) = -1 EBADF (Bad file descriptor) [pid 3732] close(20) = -1 EBADF (Bad file descriptor) [pid 3732] close(21) = -1 EBADF (Bad file descriptor) [pid 3732] close(22) = -1 EBADF (Bad file descriptor) [pid 3732] close(23) = -1 EBADF (Bad file descriptor) [pid 3732] close(24) = -1 EBADF (Bad file descriptor) [pid 3732] close(25) = -1 EBADF (Bad file descriptor) [pid 3732] close(26) = -1 EBADF (Bad file descriptor) [pid 3732] close(27) = -1 EBADF (Bad file descriptor) [pid 3732] close(28) = -1 EBADF (Bad file descriptor) [pid 3732] close(29) = -1 EBADF (Bad file descriptor) [pid 3732] exit_group(0) = ? [pid 3732] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3733 attached , child_tidptr=0x5555570bd5d0) = 114 [pid 3733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3733] setpgid(0, 0) = 0 [pid 3733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3733] write(3, "1000", 4) = 4 [pid 3733] close(3) = 0 [pid 3733] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3733] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3733] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3733] write(4, "5", 1) = 1 [ 77.151120][ T3733] FAULT_INJECTION: forcing a failure. [ 77.151120][ T3733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.164810][ T3733] CPU: 0 PID: 3733 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 77.174965][ T3733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.185540][ T3733] Call Trace: [ 77.188819][ T3733] [ 77.191766][ T3733] dump_stack_lvl+0xcd/0x134 [ 77.196357][ T3733] should_fail.cold+0x5/0xa [ 77.200864][ T3733] prepare_alloc_pages+0x17b/0x570 [ 77.206002][ T3733] __alloc_pages+0x12f/0x500 [ 77.210615][ T3733] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 77.217426][ T3733] ? ___slab_alloc+0x47e/0xf20 [ 77.222328][ T3733] alloc_pages+0x1aa/0x310 [ 77.226750][ T3733] ? mark_held_locks+0x9f/0xe0 [ 77.231619][ T3733] allocate_slab+0x26c/0x3c0 [ 77.236209][ T3733] ___slab_alloc+0x8df/0xf20 [ 77.240791][ T3733] ? __napi_alloc_skb+0x70/0x310 [ 77.245734][ T3733] ? __napi_alloc_skb+0x70/0x310 [ 77.250667][ T3733] __slab_alloc.constprop.0+0x4d/0xa0 [ 77.256035][ T3733] __kmalloc_node_track_caller+0x2cb/0x360 [ 77.261836][ T3733] ? __napi_alloc_skb+0x70/0x310 [ 77.266966][ T3733] __alloc_skb+0xde/0x340 [ 77.271313][ T3733] ? __lock_acquire+0xbca/0x56c0 [ 77.276251][ T3733] __napi_alloc_skb+0x70/0x310 [ 77.281030][ T3733] napi_get_frags+0x5e/0x140 [ 77.285613][ T3733] tun_get_user+0xa07/0x3b00 [ 77.290206][ T3733] ? tun_build_skb+0x1170/0x1170 [ 77.295138][ T3733] ? lock_downgrade+0x6e0/0x6e0 [ 77.299980][ T3733] ? find_held_lock+0x2d/0x110 [ 77.304744][ T3733] tun_chr_write_iter+0xdb/0x200 [ 77.309699][ T3733] do_iter_readv_writev+0x3d1/0x640 [ 77.315000][ T3733] ? new_sync_write+0x560/0x560 [ 77.319851][ T3733] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.326108][ T3733] ? security_file_permission+0xab/0xd0 [ 77.331661][ T3733] do_iter_write+0x182/0x700 [ 77.336247][ T3733] ? import_iovec+0x10c/0x150 [ 77.340921][ T3733] vfs_writev+0x1aa/0x630 [ 77.345248][ T3733] ? vfs_iter_write+0xa0/0xa0 [ 77.349923][ T3733] ? do_raw_spin_lock+0x120/0x2a0 [ 77.354952][ T3733] ? rwlock_bug.part.0+0x90/0x90 [ 77.359896][ T3733] ? _raw_spin_lock_irq+0x41/0x50 [ 77.364946][ T3733] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 77.371193][ T3733] ? find_held_lock+0x2d/0x110 [ 77.375960][ T3733] ? ptrace_notify+0xfa/0x140 [ 77.380657][ T3733] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.386886][ T3733] ? __fget_light+0x20f/0x270 [ 77.391579][ T3733] do_writev+0x133/0x2f0 [ 77.395832][ T3733] ? vfs_writev+0x630/0x630 [ 77.400315][ T3733] ? lockdep_hardirqs_on+0x79/0x100 [ 77.405500][ T3733] ? _raw_spin_unlock_irq+0x2a/0x40 [ 77.410695][ T3733] ? ptrace_notify+0xfa/0x140 [ 77.415375][ T3733] do_syscall_64+0x35/0xb0 [ 77.420042][ T3733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.425920][ T3733] RIP: 0033:0x7fc6cd2b4c39 [ 77.430316][ T3733] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3733] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 77.450092][ T3733] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 77.458520][ T3733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 77.466489][ T3733] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 77.474474][ T3733] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 77.482430][ T3733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.490390][ T3733] R13: 00000000000f4240 R14: 0000000000012c10 R15: 00007ffdc49a5924 [ 77.498366][ T3733] [pid 3733] close(3) = 0 [pid 3733] close(4) = 0 [pid 3733] close(5) = -1 EBADF (Bad file descriptor) [pid 3733] close(6) = -1 EBADF (Bad file descriptor) [pid 3733] close(7) = -1 EBADF (Bad file descriptor) [pid 3733] close(8) = -1 EBADF (Bad file descriptor) [pid 3733] close(9) = -1 EBADF (Bad file descriptor) [pid 3733] close(10) = -1 EBADF (Bad file descriptor) [pid 3733] close(11) = -1 EBADF (Bad file descriptor) [pid 3733] close(12) = -1 EBADF (Bad file descriptor) [pid 3733] close(13) = -1 EBADF (Bad file descriptor) [pid 3733] close(14) = -1 EBADF (Bad file descriptor) [pid 3733] close(15) = -1 EBADF (Bad file descriptor) [pid 3733] close(16) = -1 EBADF (Bad file descriptor) [pid 3733] close(17) = -1 EBADF (Bad file descriptor) [pid 3733] close(18) = -1 EBADF (Bad file descriptor) [pid 3733] close(19) = -1 EBADF (Bad file descriptor) [pid 3733] close(20) = -1 EBADF (Bad file descriptor) [pid 3733] close(21) = -1 EBADF (Bad file descriptor) [pid 3733] close(22) = -1 EBADF (Bad file descriptor) [pid 3733] close(23) = -1 EBADF (Bad file descriptor) [pid 3733] close(24) = -1 EBADF (Bad file descriptor) [pid 3733] close(25) = -1 EBADF (Bad file descriptor) [pid 3733] close(26) = -1 EBADF (Bad file descriptor) [pid 3733] close(27) = -1 EBADF (Bad file descriptor) [pid 3733] close(28) = -1 EBADF (Bad file descriptor) [pid 3733] close(29) = -1 EBADF (Bad file descriptor) [pid 3733] exit_group(0) = ? [pid 3733] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3734 attached , child_tidptr=0x5555570bd5d0) = 115 [pid 3734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3734] setpgid(0, 0) = 0 [pid 3734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3734] write(3, "1000", 4) = 4 [pid 3734] close(3) = 0 [pid 3734] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3734] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3734] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3734] write(4, "5", 1) = 1 [pid 3734] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 77.563985][ T3734] FAULT_INJECTION: forcing a failure. [ 77.563985][ T3734] name failslab, interval 1, probability 0, space 0, times 0 [ 77.577190][ T3734] CPU: 1 PID: 3734 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 77.588201][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.598648][ T3734] Call Trace: [ 77.602136][ T3734] [ 77.605058][ T3734] dump_stack_lvl+0xcd/0x134 [ 77.609673][ T3734] should_fail.cold+0x5/0xa [ 77.614196][ T3734] should_failslab+0x5/0x10 [ 77.618693][ T3734] kmem_cache_alloc_trace+0x60/0x3f0 [ 77.623975][ T3734] ? ref_tracker_alloc+0x14c/0x550 [ 77.629307][ T3734] ref_tracker_alloc+0x14c/0x550 [ 77.634239][ T3734] ? ref_tracker_free+0x6b0/0x6b0 [ 77.639258][ T3734] ? lock_release+0x720/0x720 [ 77.643951][ T3734] ? do_raw_spin_lock+0x120/0x2a0 [ 77.648985][ T3734] ? rwlock_bug.part.0+0x90/0x90 [ 77.653912][ T3734] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 77.659296][ T3734] linkwatch_fire_event+0x202/0x260 [ 77.664496][ T3734] netif_carrier_off+0x96/0xb0 [ 77.669259][ T3734] __tun_detach+0xfe7/0x13e0 [ 77.673851][ T3734] tun_chr_close+0xc4/0x180 [ 77.678341][ T3734] __fput+0x277/0x9d0 [ 77.682309][ T3734] ? __tun_detach+0x13e0/0x13e0 [ 77.687150][ T3734] task_work_run+0xdd/0x1a0 [ 77.691648][ T3734] ptrace_notify+0x114/0x140 [ 77.696230][ T3734] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 77.702465][ T3734] syscall_exit_to_user_mode+0x9/0x60 [ 77.707828][ T3734] do_syscall_64+0x42/0xb0 [ 77.712236][ T3734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.718118][ T3734] RIP: 0033:0x7fc6cd2767a3 [ 77.722524][ T3734] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 77.742126][ T3734] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 77.750538][ T3734] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3734] close(3) = 0 [pid 3734] close(4) = 0 [pid 3734] close(5) = -1 EBADF (Bad file descriptor) [pid 3734] close(6) = -1 EBADF (Bad file descriptor) [pid 3734] close(7) = -1 EBADF (Bad file descriptor) [pid 3734] close(8) = -1 EBADF (Bad file descriptor) [pid 3734] close(9) = -1 EBADF (Bad file descriptor) [pid 3734] close(10) = -1 EBADF (Bad file descriptor) [pid 3734] close(11) = -1 EBADF (Bad file descriptor) [pid 3734] close(12) = -1 EBADF (Bad file descriptor) [pid 3734] close(13) = -1 EBADF (Bad file descriptor) [pid 3734] close(14) = -1 EBADF (Bad file descriptor) [pid 3734] close(15) = -1 EBADF (Bad file descriptor) [pid 3734] close(16) = -1 EBADF (Bad file descriptor) [pid 3734] close(17) = -1 EBADF (Bad file descriptor) [pid 3734] close(18) = -1 EBADF (Bad file descriptor) [ 77.758504][ T3734] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 77.766463][ T3734] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 77.774421][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.782381][ T3734] R13: 00000000000f4240 R14: 0000000000012d41 R15: 00007ffdc49a5924 [ 77.790445][ T3734] [pid 3734] close(19) = -1 EBADF (Bad file descriptor) [pid 3734] close(20) = -1 EBADF (Bad file descriptor) [pid 3734] close(21) = -1 EBADF (Bad file descriptor) [pid 3734] close(22) = -1 EBADF (Bad file descriptor) [pid 3734] close(23) = -1 EBADF (Bad file descriptor) [pid 3734] close(24) = -1 EBADF (Bad file descriptor) [pid 3734] close(25) = -1 EBADF (Bad file descriptor) [pid 3734] close(26) = -1 EBADF (Bad file descriptor) [pid 3734] close(27) = -1 EBADF (Bad file descriptor) [pid 3734] close(28) = -1 EBADF (Bad file descriptor) [pid 3734] close(29) = -1 EBADF (Bad file descriptor) [pid 3734] exit_group(0) = ? [pid 3734] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=115, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 116 ./strace-static-x86_64: Process 3735 attached [pid 3735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3735] setpgid(0, 0) = 0 [pid 3735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3735] write(3, "1000", 4) = 4 [pid 3735] close(3) = 0 [pid 3735] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3735] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3735] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3735] write(4, "5", 1) = 1 [pid 3735] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 77.862780][ T3735] FAULT_INJECTION: forcing a failure. [ 77.862780][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 77.875397][ T3735] CPU: 0 PID: 3735 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 77.885582][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.895657][ T3735] Call Trace: [ 77.898950][ T3735] [ 77.901878][ T3735] dump_stack_lvl+0xcd/0x134 [ 77.906481][ T3735] should_fail.cold+0x5/0xa [ 77.911023][ T3735] should_failslab+0x5/0x10 [ 77.915536][ T3735] kmem_cache_alloc_trace+0x60/0x3f0 [ 77.920850][ T3735] ? ref_tracker_alloc+0x14c/0x550 [ 77.925989][ T3735] ref_tracker_alloc+0x14c/0x550 [ 77.931114][ T3735] ? ref_tracker_free+0x6b0/0x6b0 [ 77.936160][ T3735] ? lock_release+0x720/0x720 [ 77.940853][ T3735] ? do_raw_spin_lock+0x120/0x2a0 [ 77.945900][ T3735] ? rwlock_bug.part.0+0x90/0x90 [ 77.950858][ T3735] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 77.956244][ T3735] linkwatch_fire_event+0x202/0x260 [ 77.961465][ T3735] netif_carrier_off+0x96/0xb0 [ 77.966240][ T3735] __tun_detach+0xfe7/0x13e0 [ 77.970853][ T3735] tun_chr_close+0xc4/0x180 [ 77.975627][ T3735] __fput+0x277/0x9d0 [ 77.979632][ T3735] ? __tun_detach+0x13e0/0x13e0 [ 77.984507][ T3735] task_work_run+0xdd/0x1a0 [ 77.989026][ T3735] ptrace_notify+0x114/0x140 [ 77.993642][ T3735] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 77.999890][ T3735] syscall_exit_to_user_mode+0x9/0x60 [ 78.005366][ T3735] do_syscall_64+0x42/0xb0 [ 78.009789][ T3735] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.015686][ T3735] RIP: 0033:0x7fc6cd2767a3 [ 78.020115][ T3735] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 78.039931][ T3735] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.048350][ T3735] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 78.056632][ T3735] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 78.064887][ T3735] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 78.072855][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 78.081237][ T3735] R13: 00000000000f4240 R14: 0000000000012edc R15: 00007ffdc49a5924 [ 78.089227][ T3735] [pid 3735] close(3) = 0 [pid 3735] close(4) = 0 [pid 3735] close(5) = -1 EBADF (Bad file descriptor) [pid 3735] close(6) = -1 EBADF (Bad file descriptor) [pid 3735] close(7) = -1 EBADF (Bad file descriptor) [pid 3735] close(8) = -1 EBADF (Bad file descriptor) [pid 3735] close(9) = -1 EBADF (Bad file descriptor) [pid 3735] close(10) = -1 EBADF (Bad file descriptor) [pid 3735] close(11) = -1 EBADF (Bad file descriptor) [pid 3735] close(12) = -1 EBADF (Bad file descriptor) [pid 3735] close(13) = -1 EBADF (Bad file descriptor) [pid 3735] close(14) = -1 EBADF (Bad file descriptor) [pid 3735] close(15) = -1 EBADF (Bad file descriptor) [pid 3735] close(16) = -1 EBADF (Bad file descriptor) [pid 3735] close(17) = -1 EBADF (Bad file descriptor) [pid 3735] close(18) = -1 EBADF (Bad file descriptor) [pid 3735] close(19) = -1 EBADF (Bad file descriptor) [pid 3735] close(20) = -1 EBADF (Bad file descriptor) [pid 3735] close(21) = -1 EBADF (Bad file descriptor) [pid 3735] close(22) = -1 EBADF (Bad file descriptor) [pid 3735] close(23) = -1 EBADF (Bad file descriptor) [pid 3735] close(24) = -1 EBADF (Bad file descriptor) [pid 3735] close(25) = -1 EBADF (Bad file descriptor) [pid 3735] close(26) = -1 EBADF (Bad file descriptor) [pid 3735] close(27) = -1 EBADF (Bad file descriptor) [pid 3735] close(28) = -1 EBADF (Bad file descriptor) [pid 3735] close(29) = -1 EBADF (Bad file descriptor) [pid 3735] exit_group(0) = ? [pid 3735] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 117 ./strace-static-x86_64: Process 3736 attached [pid 3736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3736] setpgid(0, 0) = 0 [pid 3736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3736] write(3, "1000", 4) = 4 [pid 3736] close(3) = 0 [pid 3736] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3736] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3736] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3736] write(4, "5", 1) = 1 [pid 3736] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 78.164404][ T3736] FAULT_INJECTION: forcing a failure. [ 78.164404][ T3736] name failslab, interval 1, probability 0, space 0, times 0 [ 78.177374][ T3736] CPU: 0 PID: 3736 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 78.187517][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.197564][ T3736] Call Trace: [ 78.200826][ T3736] [ 78.203739][ T3736] dump_stack_lvl+0xcd/0x134 [ 78.208408][ T3736] should_fail.cold+0x5/0xa [ 78.212908][ T3736] should_failslab+0x5/0x10 [ 78.217397][ T3736] kmem_cache_alloc_trace+0x60/0x3f0 [ 78.222691][ T3736] ? ref_tracker_alloc+0x14c/0x550 [ 78.227795][ T3736] ref_tracker_alloc+0x14c/0x550 [ 78.232720][ T3736] ? ref_tracker_free+0x6b0/0x6b0 [ 78.237739][ T3736] ? lock_release+0x720/0x720 [ 78.242423][ T3736] ? do_raw_spin_lock+0x120/0x2a0 [ 78.247440][ T3736] ? rwlock_bug.part.0+0x90/0x90 [ 78.252372][ T3736] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 78.257740][ T3736] linkwatch_fire_event+0x202/0x260 [ 78.262934][ T3736] netif_carrier_off+0x96/0xb0 [ 78.267684][ T3736] __tun_detach+0xfe7/0x13e0 [ 78.272269][ T3736] tun_chr_close+0xc4/0x180 [ 78.276767][ T3736] __fput+0x277/0x9d0 [ 78.280733][ T3736] ? __tun_detach+0x13e0/0x13e0 [ 78.285572][ T3736] task_work_run+0xdd/0x1a0 [ 78.290084][ T3736] ptrace_notify+0x114/0x140 [ 78.294678][ T3736] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 78.300922][ T3736] syscall_exit_to_user_mode+0x9/0x60 [ 78.306294][ T3736] do_syscall_64+0x42/0xb0 [ 78.310714][ T3736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.316593][ T3736] RIP: 0033:0x7fc6cd2767a3 [ 78.320991][ T3736] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 78.340584][ T3736] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.348996][ T3736] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 78.357298][ T3736] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3736] close(3) = 0 [pid 3736] close(4) = 0 [pid 3736] close(5) = -1 EBADF (Bad file descriptor) [pid 3736] close(6) = -1 EBADF (Bad file descriptor) [pid 3736] close(7) = -1 EBADF (Bad file descriptor) [pid 3736] close(8) = -1 EBADF (Bad file descriptor) [pid 3736] close(9) = -1 EBADF (Bad file descriptor) [pid 3736] close(10) = -1 EBADF (Bad file descriptor) [pid 3736] close(11) = -1 EBADF (Bad file descriptor) [pid 3736] close(12) = -1 EBADF (Bad file descriptor) [pid 3736] close(13) = -1 EBADF (Bad file descriptor) [pid 3736] close(14) = -1 EBADF (Bad file descriptor) [pid 3736] close(15) = -1 EBADF (Bad file descriptor) [pid 3736] close(16) = -1 EBADF (Bad file descriptor) [pid 3736] close(17) = -1 EBADF (Bad file descriptor) [pid 3736] close(18) = -1 EBADF (Bad file descriptor) [pid 3736] close(19) = -1 EBADF (Bad file descriptor) [pid 3736] close(20) = -1 EBADF (Bad file descriptor) [pid 3736] close(21) = -1 EBADF (Bad file descriptor) [pid 3736] close(22) = -1 EBADF (Bad file descriptor) [pid 3736] close(23) = -1 EBADF (Bad file descriptor) [pid 3736] close(24) = -1 EBADF (Bad file descriptor) [pid 3736] close(25) = -1 EBADF (Bad file descriptor) [pid 3736] close(26) = -1 EBADF (Bad file descriptor) [pid 3736] close(27) = -1 EBADF (Bad file descriptor) [pid 3736] close(28) = -1 EBADF (Bad file descriptor) [pid 3736] close(29) = -1 EBADF (Bad file descriptor) [pid 3736] exit_group(0) = ? [pid 3736] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3737 attached , child_tidptr=0x5555570bd5d0) = 118 [pid 3737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3737] setpgid(0, 0) = 0 [ 78.365267][ T3736] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 78.373222][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 78.381177][ T3736] R13: 00000000000f4240 R14: 0000000000013008 R15: 00007ffdc49a5924 [ 78.389144][ T3736] [pid 3737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3737] write(3, "1000", 4) = 4 [pid 3737] close(3) = 0 [pid 3737] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3737] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3737] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3737] write(4, "5", 1) = 1 [pid 3737] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 78.451662][ T3737] FAULT_INJECTION: forcing a failure. [ 78.451662][ T3737] name failslab, interval 1, probability 0, space 0, times 0 [ 78.464319][ T3737] CPU: 0 PID: 3737 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 78.474488][ T3737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.484711][ T3737] Call Trace: [ 78.487991][ T3737] [ 78.490903][ T3737] dump_stack_lvl+0xcd/0x134 [ 78.495485][ T3737] should_fail.cold+0x5/0xa [ 78.499977][ T3737] should_failslab+0x5/0x10 [ 78.504460][ T3737] kmem_cache_alloc_trace+0x60/0x3f0 [ 78.509739][ T3737] ? ref_tracker_alloc+0x14c/0x550 [ 78.514854][ T3737] ref_tracker_alloc+0x14c/0x550 [ 78.519792][ T3737] ? ref_tracker_free+0x6b0/0x6b0 [ 78.524810][ T3737] ? lock_release+0x720/0x720 [ 78.529487][ T3737] ? do_raw_spin_lock+0x120/0x2a0 [ 78.534513][ T3737] ? rwlock_bug.part.0+0x90/0x90 [ 78.539455][ T3737] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 78.545027][ T3737] linkwatch_fire_event+0x202/0x260 [ 78.550250][ T3737] netif_carrier_off+0x96/0xb0 [ 78.555014][ T3737] __tun_detach+0xfe7/0x13e0 [ 78.559708][ T3737] tun_chr_close+0xc4/0x180 [ 78.564303][ T3737] __fput+0x277/0x9d0 [ 78.568280][ T3737] ? __tun_detach+0x13e0/0x13e0 [ 78.573485][ T3737] task_work_run+0xdd/0x1a0 [ 78.577987][ T3737] ptrace_notify+0x114/0x140 [ 78.582575][ T3737] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 78.588817][ T3737] syscall_exit_to_user_mode+0x9/0x60 [ 78.594186][ T3737] do_syscall_64+0x42/0xb0 [ 78.598598][ T3737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.604487][ T3737] RIP: 0033:0x7fc6cd2767a3 [ 78.609091][ T3737] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 78.628699][ T3737] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.637104][ T3737] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3737] close(3) = 0 [pid 3737] close(4) = 0 [pid 3737] close(5) = -1 EBADF (Bad file descriptor) [pid 3737] close(6) = -1 EBADF (Bad file descriptor) [pid 3737] close(7) = -1 EBADF (Bad file descriptor) [pid 3737] close(8) = -1 EBADF (Bad file descriptor) [pid 3737] close(9) = -1 EBADF (Bad file descriptor) [pid 3737] close(10) = -1 EBADF (Bad file descriptor) [pid 3737] close(11) = -1 EBADF (Bad file descriptor) [pid 3737] close(12) = -1 EBADF (Bad file descriptor) [pid 3737] close(13) = -1 EBADF (Bad file descriptor) [pid 3737] close(14) = -1 EBADF (Bad file descriptor) [pid 3737] close(15) = -1 EBADF (Bad file descriptor) [pid 3737] close(16) = -1 EBADF (Bad file descriptor) [pid 3737] close(17) = -1 EBADF (Bad file descriptor) [pid 3737] close(18) = -1 EBADF (Bad file descriptor) [pid 3737] close(19) = -1 EBADF (Bad file descriptor) [pid 3737] close(20) = -1 EBADF (Bad file descriptor) [pid 3737] close(21) = -1 EBADF (Bad file descriptor) [pid 3737] close(22) = -1 EBADF (Bad file descriptor) [pid 3737] close(23) = -1 EBADF (Bad file descriptor) [pid 3737] close(24) = -1 EBADF (Bad file descriptor) [pid 3737] close(25) = -1 EBADF (Bad file descriptor) [pid 3737] close(26) = -1 EBADF (Bad file descriptor) [pid 3737] close(27) = -1 EBADF (Bad file descriptor) [pid 3737] close(28) = -1 EBADF (Bad file descriptor) [pid 3737] close(29) = -1 EBADF (Bad file descriptor) [pid 3737] exit_group(0) = ? [pid 3737] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=118, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 119 ./strace-static-x86_64: Process 3738 attached [pid 3738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3738] setpgid(0, 0) = 0 [pid 3738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3738] write(3, "1000", 4) = 4 [pid 3738] close(3) = 0 [pid 3738] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3738] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3738] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3738] write(4, "5", 1) = 1 [pid 3738] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 78.645061][ T3737] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 78.653021][ T3737] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 78.660989][ T3737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 78.668952][ T3737] R13: 00000000000f4240 R14: 0000000000013135 R15: 00007ffdc49a5924 [ 78.676950][ T3737] [ 78.721123][ T3738] FAULT_INJECTION: forcing a failure. [ 78.721123][ T3738] name failslab, interval 1, probability 0, space 0, times 0 [ 78.734066][ T3738] CPU: 0 PID: 3738 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 78.744673][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.754946][ T3738] Call Trace: [ 78.758224][ T3738] [ 78.761140][ T3738] dump_stack_lvl+0xcd/0x134 [ 78.765728][ T3738] should_fail.cold+0x5/0xa [ 78.770223][ T3738] should_failslab+0x5/0x10 [ 78.774712][ T3738] kmem_cache_alloc_trace+0x60/0x3f0 [ 78.779991][ T3738] ? ref_tracker_alloc+0x14c/0x550 [ 78.785104][ T3738] ref_tracker_alloc+0x14c/0x550 [ 78.790025][ T3738] ? ref_tracker_free+0x6b0/0x6b0 [ 78.795031][ T3738] ? lock_release+0x720/0x720 [ 78.799694][ T3738] ? do_raw_spin_lock+0x120/0x2a0 [ 78.804703][ T3738] ? rwlock_bug.part.0+0x90/0x90 [ 78.809629][ T3738] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 78.815016][ T3738] linkwatch_fire_event+0x202/0x260 [ 78.820223][ T3738] netif_carrier_off+0x96/0xb0 [ 78.825072][ T3738] __tun_detach+0xfe7/0x13e0 [ 78.829666][ T3738] tun_chr_close+0xc4/0x180 [ 78.834160][ T3738] __fput+0x277/0x9d0 [ 78.838130][ T3738] ? __tun_detach+0x13e0/0x13e0 [ 78.842973][ T3738] task_work_run+0xdd/0x1a0 [ 78.847561][ T3738] ptrace_notify+0x114/0x140 [ 78.852160][ T3738] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 78.858573][ T3738] syscall_exit_to_user_mode+0x9/0x60 [ 78.863949][ T3738] do_syscall_64+0x42/0xb0 [ 78.868356][ T3738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.874254][ T3738] RIP: 0033:0x7fc6cd2767a3 [ 78.878655][ T3738] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 78.898252][ T3738] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.906671][ T3738] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3738] close(3) = 0 [pid 3738] close(4) = 0 [pid 3738] close(5) = -1 EBADF (Bad file descriptor) [pid 3738] close(6) = -1 EBADF (Bad file descriptor) [pid 3738] close(7) = -1 EBADF (Bad file descriptor) [pid 3738] close(8) = -1 EBADF (Bad file descriptor) [pid 3738] close(9) = -1 EBADF (Bad file descriptor) [pid 3738] close(10) = -1 EBADF (Bad file descriptor) [pid 3738] close(11) = -1 EBADF (Bad file descriptor) [ 78.914629][ T3738] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 78.922761][ T3738] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 78.930735][ T3738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 78.938697][ T3738] R13: 00000000000f4240 R14: 0000000000013257 R15: 00007ffdc49a5924 [ 78.946687][ T3738] [pid 3738] close(12) = -1 EBADF (Bad file descriptor) [pid 3738] close(13) = -1 EBADF (Bad file descriptor) [pid 3738] close(14) = -1 EBADF (Bad file descriptor) [pid 3738] close(15) = -1 EBADF (Bad file descriptor) [pid 3738] close(16) = -1 EBADF (Bad file descriptor) [pid 3738] close(17) = -1 EBADF (Bad file descriptor) [pid 3738] close(18) = -1 EBADF (Bad file descriptor) [pid 3738] close(19) = -1 EBADF (Bad file descriptor) [pid 3738] close(20) = -1 EBADF (Bad file descriptor) [pid 3738] close(21) = -1 EBADF (Bad file descriptor) [pid 3738] close(22) = -1 EBADF (Bad file descriptor) [pid 3738] close(23) = -1 EBADF (Bad file descriptor) [pid 3738] close(24) = -1 EBADF (Bad file descriptor) [pid 3738] close(25) = -1 EBADF (Bad file descriptor) [pid 3738] close(26) = -1 EBADF (Bad file descriptor) [pid 3738] close(27) = -1 EBADF (Bad file descriptor) [pid 3738] close(28) = -1 EBADF (Bad file descriptor) [pid 3738] close(29) = -1 EBADF (Bad file descriptor) [pid 3738] exit_group(0) = ? [pid 3738] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 120 ./strace-static-x86_64: Process 3739 attached [pid 3739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3739] setpgid(0, 0) = 0 [pid 3739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3739] write(3, "1000", 4) = 4 [pid 3739] close(3) = 0 [pid 3739] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3739] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3739] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3739] write(4, "5", 1) = 1 [pid 3739] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 79.026770][ T3739] FAULT_INJECTION: forcing a failure. [ 79.026770][ T3739] name failslab, interval 1, probability 0, space 0, times 0 [ 79.040102][ T3739] CPU: 0 PID: 3739 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 79.050465][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.060520][ T3739] Call Trace: [ 79.063782][ T3739] [ 79.066691][ T3739] dump_stack_lvl+0xcd/0x134 [ 79.071282][ T3739] should_fail.cold+0x5/0xa [ 79.075764][ T3739] should_failslab+0x5/0x10 [ 79.080245][ T3739] kmem_cache_alloc_trace+0x60/0x3f0 [ 79.085597][ T3739] ? ref_tracker_alloc+0x14c/0x550 [ 79.090979][ T3739] ref_tracker_alloc+0x14c/0x550 [ 79.095910][ T3739] ? ref_tracker_free+0x6b0/0x6b0 [ 79.100924][ T3739] ? lock_release+0x720/0x720 [ 79.105681][ T3739] ? do_raw_spin_lock+0x120/0x2a0 [ 79.110697][ T3739] ? rwlock_bug.part.0+0x90/0x90 [ 79.115800][ T3739] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 79.121435][ T3739] linkwatch_fire_event+0x202/0x260 [ 79.126920][ T3739] netif_carrier_off+0x96/0xb0 [ 79.131680][ T3739] __tun_detach+0xfe7/0x13e0 [ 79.136366][ T3739] tun_chr_close+0xc4/0x180 [ 79.140861][ T3739] __fput+0x277/0x9d0 [ 79.144842][ T3739] ? __tun_detach+0x13e0/0x13e0 [ 79.149690][ T3739] task_work_run+0xdd/0x1a0 [ 79.154386][ T3739] ptrace_notify+0x114/0x140 [ 79.158970][ T3739] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 79.165202][ T3739] syscall_exit_to_user_mode+0x9/0x60 [ 79.170561][ T3739] do_syscall_64+0x42/0xb0 [ 79.174967][ T3739] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.180933][ T3739] RIP: 0033:0x7fc6cd2767a3 [ 79.185340][ T3739] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 79.205105][ T3739] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 79.213524][ T3739] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3739] close(3) = 0 [pid 3739] close(4) = 0 [pid 3739] close(5) = -1 EBADF (Bad file descriptor) [pid 3739] close(6) = -1 EBADF (Bad file descriptor) [pid 3739] close(7) = -1 EBADF (Bad file descriptor) [pid 3739] close(8) = -1 EBADF (Bad file descriptor) [pid 3739] close(9) = -1 EBADF (Bad file descriptor) [pid 3739] close(10) = -1 EBADF (Bad file descriptor) [pid 3739] close(11) = -1 EBADF (Bad file descriptor) [ 79.221484][ T3739] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 79.229448][ T3739] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 79.237494][ T3739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 79.245455][ T3739] R13: 00000000000f4240 R14: 0000000000013367 R15: 00007ffdc49a5924 [ 79.253433][ T3739] [pid 3739] close(12) = -1 EBADF (Bad file descriptor) [pid 3739] close(13) = -1 EBADF (Bad file descriptor) [pid 3739] close(14) = -1 EBADF (Bad file descriptor) [pid 3739] close(15) = -1 EBADF (Bad file descriptor) [pid 3739] close(16) = -1 EBADF (Bad file descriptor) [pid 3739] close(17) = -1 EBADF (Bad file descriptor) [pid 3739] close(18) = -1 EBADF (Bad file descriptor) [pid 3739] close(19) = -1 EBADF (Bad file descriptor) [pid 3739] close(20) = -1 EBADF (Bad file descriptor) [pid 3739] close(21) = -1 EBADF (Bad file descriptor) [pid 3739] close(22) = -1 EBADF (Bad file descriptor) [pid 3739] close(23) = -1 EBADF (Bad file descriptor) [pid 3739] close(24) = -1 EBADF (Bad file descriptor) [pid 3739] close(25) = -1 EBADF (Bad file descriptor) [pid 3739] close(26) = -1 EBADF (Bad file descriptor) [pid 3739] close(27) = -1 EBADF (Bad file descriptor) [pid 3739] close(28) = -1 EBADF (Bad file descriptor) [pid 3739] close(29) = -1 EBADF (Bad file descriptor) [pid 3739] exit_group(0) = ? [pid 3739] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3740 attached [pid 3740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3740] setpgid(0, 0) = 0 [pid 3740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3740] write(3, "1000", 4) = 4 [pid 3740] close(3) = 0 [pid 3740] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3740] ioctl(3, TUNSETIFF, 0x20000000 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 121 [pid 3740] <... ioctl resumed>) = 0 [pid 3740] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3740] write(4, "5", 1) = 1 [ 79.324166][ T3740] FAULT_INJECTION: forcing a failure. [ 79.324166][ T3740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.337451][ T3740] CPU: 0 PID: 3740 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 79.347595][ T3740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.358252][ T3740] Call Trace: [ 79.361521][ T3740] [ 79.364655][ T3740] dump_stack_lvl+0xcd/0x134 [ 79.369329][ T3740] should_fail.cold+0x5/0xa [ 79.374553][ T3740] prepare_alloc_pages+0x17b/0x570 [ 79.379910][ T3740] __alloc_pages+0x12f/0x500 [ 79.384864][ T3740] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 79.391635][ T3740] ? ___slab_alloc+0x47e/0xf20 [ 79.396424][ T3740] alloc_pages+0x1aa/0x310 [ 79.400842][ T3740] ? mark_held_locks+0x9f/0xe0 [ 79.405617][ T3740] allocate_slab+0x26c/0x3c0 [ 79.410203][ T3740] ___slab_alloc+0x8df/0xf20 [ 79.414804][ T3740] ? napi_skb_cache_get+0xeb/0x170 [ 79.419915][ T3740] ? mark_held_locks+0x9f/0xe0 [ 79.424703][ T3740] kmem_cache_alloc_bulk+0x21c/0x720 [ 79.429990][ T3740] napi_skb_cache_get+0xeb/0x170 [ 79.434924][ T3740] __alloc_skb+0x9b/0x340 [ 79.439272][ T3740] ? __lock_acquire+0xbca/0x56c0 [ 79.444230][ T3740] __napi_alloc_skb+0x70/0x310 [ 79.449000][ T3740] napi_get_frags+0x5e/0x140 [ 79.453700][ T3740] tun_get_user+0xa07/0x3b00 [ 79.458297][ T3740] ? tun_build_skb+0x1170/0x1170 [ 79.463406][ T3740] ? lock_downgrade+0x6e0/0x6e0 [ 79.468245][ T3740] ? find_held_lock+0x2d/0x110 [ 79.473004][ T3740] tun_chr_write_iter+0xdb/0x200 [ 79.477932][ T3740] do_iter_readv_writev+0x3d1/0x640 [ 79.483137][ T3740] ? new_sync_write+0x560/0x560 [ 79.488064][ T3740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.494314][ T3740] ? security_file_permission+0xab/0xd0 [ 79.499860][ T3740] do_iter_write+0x182/0x700 [ 79.504796][ T3740] ? import_iovec+0x10c/0x150 [ 79.509491][ T3740] vfs_writev+0x1aa/0x630 [ 79.513826][ T3740] ? vfs_iter_write+0xa0/0xa0 [ 79.518496][ T3740] ? do_raw_spin_lock+0x120/0x2a0 [ 79.523520][ T3740] ? rwlock_bug.part.0+0x90/0x90 [ 79.528448][ T3740] ? _raw_spin_lock_irq+0x41/0x50 [ 79.533564][ T3740] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 79.539809][ T3740] ? find_held_lock+0x2d/0x110 [ 79.544681][ T3740] ? ptrace_notify+0xfa/0x140 [ 79.549358][ T3740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.555611][ T3740] ? __fget_light+0x20f/0x270 [ 79.560288][ T3740] do_writev+0x133/0x2f0 [ 79.564523][ T3740] ? vfs_writev+0x630/0x630 [ 79.569186][ T3740] ? lockdep_hardirqs_on+0x79/0x100 [ 79.574470][ T3740] ? _raw_spin_unlock_irq+0x2a/0x40 [ 79.580032][ T3740] ? ptrace_notify+0xfa/0x140 [ 79.584720][ T3740] do_syscall_64+0x35/0xb0 [ 79.589314][ T3740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.595295][ T3740] RIP: 0033:0x7fc6cd2b4c39 [ 79.599730][ T3740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3740] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 79.619427][ T3740] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 79.628012][ T3740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 79.635988][ T3740] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 79.643952][ T3740] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 79.651931][ T3740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 79.659925][ T3740] R13: 00000000000f4240 R14: 0000000000013493 R15: 00007ffdc49a5924 [ 79.667908][ T3740] [pid 3740] close(3) = 0 [pid 3740] close(4) = 0 [pid 3740] close(5) = -1 EBADF (Bad file descriptor) [pid 3740] close(6) = -1 EBADF (Bad file descriptor) [pid 3740] close(7) = -1 EBADF (Bad file descriptor) [pid 3740] close(8) = -1 EBADF (Bad file descriptor) [pid 3740] close(9) = -1 EBADF (Bad file descriptor) [pid 3740] close(10) = -1 EBADF (Bad file descriptor) [pid 3740] close(11) = -1 EBADF (Bad file descriptor) [pid 3740] close(12) = -1 EBADF (Bad file descriptor) [pid 3740] close(13) = -1 EBADF (Bad file descriptor) [pid 3740] close(14) = -1 EBADF (Bad file descriptor) [pid 3740] close(15) = -1 EBADF (Bad file descriptor) [pid 3740] close(16) = -1 EBADF (Bad file descriptor) [pid 3740] close(17) = -1 EBADF (Bad file descriptor) [pid 3740] close(18) = -1 EBADF (Bad file descriptor) [pid 3740] close(19) = -1 EBADF (Bad file descriptor) [pid 3740] close(20) = -1 EBADF (Bad file descriptor) [pid 3740] close(21) = -1 EBADF (Bad file descriptor) [pid 3740] close(22) = -1 EBADF (Bad file descriptor) [pid 3740] close(23) = -1 EBADF (Bad file descriptor) [pid 3740] close(24) = -1 EBADF (Bad file descriptor) [pid 3740] close(25) = -1 EBADF (Bad file descriptor) [pid 3740] close(26) = -1 EBADF (Bad file descriptor) [pid 3740] close(27) = -1 EBADF (Bad file descriptor) [pid 3740] close(28) = -1 EBADF (Bad file descriptor) [pid 3740] close(29) = -1 EBADF (Bad file descriptor) [pid 3740] exit_group(0) = ? [pid 3740] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=121, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 122 ./strace-static-x86_64: Process 3742 attached [pid 3742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3742] setpgid(0, 0) = 0 [pid 3742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3742] write(3, "1000", 4) = 4 [pid 3742] close(3) = 0 [pid 3742] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3742] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3742] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3742] write(4, "5", 1) = 1 [pid 3742] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 79.744941][ T3742] FAULT_INJECTION: forcing a failure. [ 79.744941][ T3742] name failslab, interval 1, probability 0, space 0, times 0 [ 79.759075][ T3742] CPU: 0 PID: 3742 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 79.769216][ T3742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.779263][ T3742] Call Trace: [ 79.782545][ T3742] [ 79.785552][ T3742] dump_stack_lvl+0xcd/0x134 [ 79.790154][ T3742] should_fail.cold+0x5/0xa [ 79.795103][ T3742] should_failslab+0x5/0x10 [ 79.799605][ T3742] kmem_cache_alloc_trace+0x60/0x3f0 [ 79.804898][ T3742] ? ref_tracker_alloc+0x14c/0x550 [ 79.810028][ T3742] ref_tracker_alloc+0x14c/0x550 [ 79.814967][ T3742] ? ref_tracker_free+0x6b0/0x6b0 [ 79.819994][ T3742] ? lock_release+0x720/0x720 [ 79.824690][ T3742] ? do_raw_spin_lock+0x120/0x2a0 [ 79.829721][ T3742] ? rwlock_bug.part.0+0x90/0x90 [ 79.834661][ T3742] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 79.840045][ T3742] linkwatch_fire_event+0x202/0x260 [ 79.845251][ T3742] netif_carrier_off+0x96/0xb0 [ 79.850020][ T3742] __tun_detach+0xfe7/0x13e0 [ 79.854639][ T3742] tun_chr_close+0xc4/0x180 [ 79.859137][ T3742] __fput+0x277/0x9d0 [ 79.863117][ T3742] ? __tun_detach+0x13e0/0x13e0 [ 79.867981][ T3742] task_work_run+0xdd/0x1a0 [ 79.872502][ T3742] ptrace_notify+0x114/0x140 [ 79.877147][ T3742] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 79.883387][ T3742] syscall_exit_to_user_mode+0x9/0x60 [ 79.888760][ T3742] do_syscall_64+0x42/0xb0 [ 79.893185][ T3742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.899081][ T3742] RIP: 0033:0x7fc6cd2767a3 [ 79.903491][ T3742] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 79.923089][ T3742] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 79.931508][ T3742] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3742] close(3) = 0 [pid 3742] close(4) = 0 [pid 3742] close(5) = -1 EBADF (Bad file descriptor) [pid 3742] close(6) = -1 EBADF (Bad file descriptor) [pid 3742] close(7) = -1 EBADF (Bad file descriptor) [pid 3742] close(8) = -1 EBADF (Bad file descriptor) [pid 3742] close(9) = -1 EBADF (Bad file descriptor) [pid 3742] close(10) = -1 EBADF (Bad file descriptor) [pid 3742] close(11) = -1 EBADF (Bad file descriptor) [pid 3742] close(12) = -1 EBADF (Bad file descriptor) [pid 3742] close(13) = -1 EBADF (Bad file descriptor) [pid 3742] close(14) = -1 EBADF (Bad file descriptor) [pid 3742] close(15) = -1 EBADF (Bad file descriptor) [pid 3742] close(16) = -1 EBADF (Bad file descriptor) [pid 3742] close(17) = -1 EBADF (Bad file descriptor) [pid 3742] close(18) = -1 EBADF (Bad file descriptor) [pid 3742] close(19) = -1 EBADF (Bad file descriptor) [pid 3742] close(20) = -1 EBADF (Bad file descriptor) [pid 3742] close(21) = -1 EBADF (Bad file descriptor) [pid 3742] close(22) = -1 EBADF (Bad file descriptor) [pid 3742] close(23) = -1 EBADF (Bad file descriptor) [pid 3742] close(24) = -1 EBADF (Bad file descriptor) [pid 3742] close(25) = -1 EBADF (Bad file descriptor) [pid 3742] close(26) = -1 EBADF (Bad file descriptor) [pid 3742] close(27) = -1 EBADF (Bad file descriptor) [pid 3742] close(28) = -1 EBADF (Bad file descriptor) [pid 3742] close(29) = -1 EBADF (Bad file descriptor) [pid 3742] exit_group(0) = ? [pid 3742] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 123 ./strace-static-x86_64: Process 3743 attached [pid 3743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3743] setpgid(0, 0) = 0 [ 79.940031][ T3742] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 79.947997][ T3742] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 79.955960][ T3742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 79.963919][ T3742] R13: 00000000000f4240 R14: 00000000000135c3 R15: 00007ffdc49a5924 [ 79.971896][ T3742] [pid 3743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3743] write(3, "1000", 4) = 4 [pid 3743] close(3) = 0 [pid 3743] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3743] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3743] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3743] write(4, "5", 1) = 1 [pid 3743] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 80.035337][ T3743] FAULT_INJECTION: forcing a failure. [ 80.035337][ T3743] name failslab, interval 1, probability 0, space 0, times 0 [ 80.048521][ T3743] CPU: 0 PID: 3743 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 80.059834][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.070185][ T3743] Call Trace: [ 80.073464][ T3743] [ 80.076408][ T3743] dump_stack_lvl+0xcd/0x134 [ 80.081015][ T3743] should_fail.cold+0x5/0xa [ 80.085517][ T3743] should_failslab+0x5/0x10 [ 80.090026][ T3743] kmem_cache_alloc_trace+0x60/0x3f0 [ 80.095316][ T3743] ? ref_tracker_alloc+0x14c/0x550 [ 80.100442][ T3743] ref_tracker_alloc+0x14c/0x550 [ 80.105377][ T3743] ? ref_tracker_free+0x6b0/0x6b0 [ 80.110412][ T3743] ? lock_release+0x720/0x720 [ 80.115097][ T3743] ? do_raw_spin_lock+0x120/0x2a0 [ 80.120134][ T3743] ? rwlock_bug.part.0+0x90/0x90 [ 80.125077][ T3743] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 80.130465][ T3743] linkwatch_fire_event+0x202/0x260 [ 80.135671][ T3743] netif_carrier_off+0x96/0xb0 [ 80.140870][ T3743] __tun_detach+0xfe7/0x13e0 [ 80.145740][ T3743] tun_chr_close+0xc4/0x180 [ 80.150237][ T3743] __fput+0x277/0x9d0 [ 80.154207][ T3743] ? __tun_detach+0x13e0/0x13e0 [ 80.159055][ T3743] task_work_run+0xdd/0x1a0 [ 80.163559][ T3743] ptrace_notify+0x114/0x140 [ 80.168161][ T3743] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 80.174408][ T3743] syscall_exit_to_user_mode+0x9/0x60 [ 80.179784][ T3743] do_syscall_64+0x42/0xb0 [ 80.184204][ T3743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.190196][ T3743] RIP: 0033:0x7fc6cd2767a3 [ 80.194690][ T3743] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 80.214552][ T3743] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.222971][ T3743] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3743] close(3) = 0 [ 80.230957][ T3743] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 80.238925][ T3743] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 80.247094][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 80.255076][ T3743] R13: 00000000000f4240 R14: 0000000000013764 R15: 00007ffdc49a5924 [ 80.263058][ T3743] [pid 3743] close(4) = 0 [pid 3743] close(5) = -1 EBADF (Bad file descriptor) [pid 3743] close(6) = -1 EBADF (Bad file descriptor) [pid 3743] close(7) = -1 EBADF (Bad file descriptor) [pid 3743] close(8) = -1 EBADF (Bad file descriptor) [pid 3743] close(9) = -1 EBADF (Bad file descriptor) [pid 3743] close(10) = -1 EBADF (Bad file descriptor) [pid 3743] close(11) = -1 EBADF (Bad file descriptor) [pid 3743] close(12) = -1 EBADF (Bad file descriptor) [pid 3743] close(13) = -1 EBADF (Bad file descriptor) [pid 3743] close(14) = -1 EBADF (Bad file descriptor) [pid 3743] close(15) = -1 EBADF (Bad file descriptor) [pid 3743] close(16) = -1 EBADF (Bad file descriptor) [pid 3743] close(17) = -1 EBADF (Bad file descriptor) [pid 3743] close(18) = -1 EBADF (Bad file descriptor) [pid 3743] close(19) = -1 EBADF (Bad file descriptor) [pid 3743] close(20) = -1 EBADF (Bad file descriptor) [pid 3743] close(21) = -1 EBADF (Bad file descriptor) [pid 3743] close(22) = -1 EBADF (Bad file descriptor) [pid 3743] close(23) = -1 EBADF (Bad file descriptor) [pid 3743] close(24) = -1 EBADF (Bad file descriptor) [pid 3743] close(25) = -1 EBADF (Bad file descriptor) [pid 3743] close(26) = -1 EBADF (Bad file descriptor) [pid 3743] close(27) = -1 EBADF (Bad file descriptor) [pid 3743] close(28) = -1 EBADF (Bad file descriptor) [pid 3743] close(29) = -1 EBADF (Bad file descriptor) [pid 3743] exit_group(0) = ? [pid 3743] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=1, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3744 attached , child_tidptr=0x5555570bd5d0) = 124 [pid 3744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3744] setpgid(0, 0) = 0 [pid 3744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3744] write(3, "1000", 4) = 4 [pid 3744] close(3) = 0 [pid 3744] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3744] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3744] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3744] write(4, "5", 1) = 1 [pid 3744] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 80.335779][ T3744] FAULT_INJECTION: forcing a failure. [ 80.335779][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 80.350235][ T3744] CPU: 0 PID: 3744 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 80.360405][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.370484][ T3744] Call Trace: [ 80.373761][ T3744] [ 80.376684][ T3744] dump_stack_lvl+0xcd/0x134 [ 80.381278][ T3744] should_fail.cold+0x5/0xa [ 80.385884][ T3744] should_failslab+0x5/0x10 [ 80.390380][ T3744] kmem_cache_alloc_trace+0x60/0x3f0 [ 80.395748][ T3744] ? ref_tracker_alloc+0x14c/0x550 [ 80.400954][ T3744] ref_tracker_alloc+0x14c/0x550 [ 80.405887][ T3744] ? ref_tracker_free+0x6b0/0x6b0 [ 80.410904][ T3744] ? lock_release+0x720/0x720 [ 80.415581][ T3744] ? do_raw_spin_lock+0x120/0x2a0 [ 80.420600][ T3744] ? rwlock_bug.part.0+0x90/0x90 [ 80.425530][ T3744] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 80.430902][ T3744] linkwatch_fire_event+0x202/0x260 [ 80.436122][ T3744] netif_carrier_off+0x96/0xb0 [ 80.440904][ T3744] __tun_detach+0xfe7/0x13e0 [ 80.445516][ T3744] tun_chr_close+0xc4/0x180 [ 80.450012][ T3744] __fput+0x277/0x9d0 [ 80.453983][ T3744] ? __tun_detach+0x13e0/0x13e0 [ 80.458833][ T3744] task_work_run+0xdd/0x1a0 [ 80.463336][ T3744] ptrace_notify+0x114/0x140 [ 80.467921][ T3744] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 80.474161][ T3744] syscall_exit_to_user_mode+0x9/0x60 [ 80.479527][ T3744] do_syscall_64+0x42/0xb0 [ 80.483938][ T3744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.489830][ T3744] RIP: 0033:0x7fc6cd2767a3 [ 80.494252][ T3744] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 80.513875][ T3744] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.522306][ T3744] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3744] close(3) = 0 [pid 3744] close(4) = 0 [pid 3744] close(5) = -1 EBADF (Bad file descriptor) [pid 3744] close(6) = -1 EBADF (Bad file descriptor) [pid 3744] close(7) = -1 EBADF (Bad file descriptor) [ 80.530289][ T3744] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 80.538252][ T3744] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 80.546212][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 80.554171][ T3744] R13: 00000000000f4240 R14: 0000000000013884 R15: 00007ffdc49a5924 [ 80.562144][ T3744] [pid 3744] close(8) = -1 EBADF (Bad file descriptor) [pid 3744] close(9) = -1 EBADF (Bad file descriptor) [pid 3744] close(10) = -1 EBADF (Bad file descriptor) [pid 3744] close(11) = -1 EBADF (Bad file descriptor) [pid 3744] close(12) = -1 EBADF (Bad file descriptor) [pid 3744] close(13) = -1 EBADF (Bad file descriptor) [pid 3744] close(14) = -1 EBADF (Bad file descriptor) [pid 3744] close(15) = -1 EBADF (Bad file descriptor) [pid 3744] close(16) = -1 EBADF (Bad file descriptor) [pid 3744] close(17) = -1 EBADF (Bad file descriptor) [pid 3744] close(18) = -1 EBADF (Bad file descriptor) [pid 3744] close(19) = -1 EBADF (Bad file descriptor) [pid 3744] close(20) = -1 EBADF (Bad file descriptor) [pid 3744] close(21) = -1 EBADF (Bad file descriptor) [pid 3744] close(22) = -1 EBADF (Bad file descriptor) [pid 3744] close(23) = -1 EBADF (Bad file descriptor) [pid 3744] close(24) = -1 EBADF (Bad file descriptor) [pid 3744] close(25) = -1 EBADF (Bad file descriptor) [pid 3744] close(26) = -1 EBADF (Bad file descriptor) [pid 3744] close(27) = -1 EBADF (Bad file descriptor) [pid 3744] close(28) = -1 EBADF (Bad file descriptor) [pid 3744] close(29) = -1 EBADF (Bad file descriptor) [pid 3744] exit_group(0) = ? [pid 3744] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=124, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 125 ./strace-static-x86_64: Process 3745 attached [pid 3745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3745] setpgid(0, 0) = 0 [pid 3745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3745] write(3, "1000", 4) = 4 [pid 3745] close(3) = 0 [pid 3745] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3745] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3745] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3745] write(4, "5", 1) = 1 [pid 3745] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 80.636311][ T3745] FAULT_INJECTION: forcing a failure. [ 80.636311][ T3745] name failslab, interval 1, probability 0, space 0, times 0 [ 80.649060][ T3745] CPU: 1 PID: 3745 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 80.659204][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.669253][ T3745] Call Trace: [ 80.672536][ T3745] [ 80.675455][ T3745] dump_stack_lvl+0xcd/0x134 [ 80.680058][ T3745] should_fail.cold+0x5/0xa [ 80.684576][ T3745] should_failslab+0x5/0x10 [ 80.689085][ T3745] kmem_cache_alloc_trace+0x60/0x3f0 [ 80.694368][ T3745] ? ref_tracker_alloc+0x14c/0x550 [ 80.699477][ T3745] ref_tracker_alloc+0x14c/0x550 [ 80.704406][ T3745] ? ref_tracker_free+0x6b0/0x6b0 [ 80.709434][ T3745] ? lock_release+0x720/0x720 [ 80.714247][ T3745] ? do_raw_spin_lock+0x120/0x2a0 [ 80.719268][ T3745] ? rwlock_bug.part.0+0x90/0x90 [ 80.724289][ T3745] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 80.729666][ T3745] linkwatch_fire_event+0x202/0x260 [ 80.734865][ T3745] netif_carrier_off+0x96/0xb0 [ 80.739625][ T3745] __tun_detach+0xfe7/0x13e0 [ 80.744236][ T3745] tun_chr_close+0xc4/0x180 [ 80.748822][ T3745] __fput+0x277/0x9d0 [ 80.752798][ T3745] ? __tun_detach+0x13e0/0x13e0 [ 80.757645][ T3745] task_work_run+0xdd/0x1a0 [ 80.762151][ T3745] ptrace_notify+0x114/0x140 [ 80.766733][ T3745] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 80.772968][ T3745] syscall_exit_to_user_mode+0x9/0x60 [ 80.778331][ T3745] do_syscall_64+0x42/0xb0 [ 80.782739][ T3745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.788624][ T3745] RIP: 0033:0x7fc6cd2767a3 [ 80.793026][ T3745] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 80.812647][ T3745] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.821232][ T3745] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 80.829284][ T3745] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3745] close(3) = 0 [pid 3745] close(4) = 0 [pid 3745] close(5) = -1 EBADF (Bad file descriptor) [pid 3745] close(6) = -1 EBADF (Bad file descriptor) [pid 3745] close(7) = -1 EBADF (Bad file descriptor) [pid 3745] close(8) = -1 EBADF (Bad file descriptor) [pid 3745] close(9) = -1 EBADF (Bad file descriptor) [pid 3745] close(10) = -1 EBADF (Bad file descriptor) [pid 3745] close(11) = -1 EBADF (Bad file descriptor) [pid 3745] close(12) = -1 EBADF (Bad file descriptor) [pid 3745] close(13) = -1 EBADF (Bad file descriptor) [pid 3745] close(14) = -1 EBADF (Bad file descriptor) [pid 3745] close(15) = -1 EBADF (Bad file descriptor) [pid 3745] close(16) = -1 EBADF (Bad file descriptor) [pid 3745] close(17) = -1 EBADF (Bad file descriptor) [pid 3745] close(18) = -1 EBADF (Bad file descriptor) [pid 3745] close(19) = -1 EBADF (Bad file descriptor) [pid 3745] close(20) = -1 EBADF (Bad file descriptor) [pid 3745] close(21) = -1 EBADF (Bad file descriptor) [pid 3745] close(22) = -1 EBADF (Bad file descriptor) [pid 3745] close(23) = -1 EBADF (Bad file descriptor) [pid 3745] close(24) = -1 EBADF (Bad file descriptor) [pid 3745] close(25) = -1 EBADF (Bad file descriptor) [pid 3745] close(26) = -1 EBADF (Bad file descriptor) [pid 3745] close(27) = -1 EBADF (Bad file descriptor) [pid 3745] close(28) = -1 EBADF (Bad file descriptor) [pid 3745] close(29) = -1 EBADF (Bad file descriptor) [pid 3745] exit_group(0) = ? [pid 3745] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 126 ./strace-static-x86_64: Process 3746 attached [pid 3746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 80.837245][ T3745] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 80.845199][ T3745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 80.853155][ T3745] R13: 00000000000f4240 R14: 00000000000139b0 R15: 00007ffdc49a5924 [ 80.861659][ T3745] [pid 3746] setpgid(0, 0) = 0 [pid 3746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3746] write(3, "1000", 4) = 4 [pid 3746] close(3) = 0 [pid 3746] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3746] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3746] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3746] write(4, "5", 1) = 1 [pid 3746] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 80.926457][ T3746] FAULT_INJECTION: forcing a failure. [ 80.926457][ T3746] name failslab, interval 1, probability 0, space 0, times 0 [ 80.939175][ T3746] CPU: 0 PID: 3746 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 80.949601][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.959899][ T3746] Call Trace: [ 80.963170][ T3746] [ 80.966086][ T3746] dump_stack_lvl+0xcd/0x134 [ 80.970712][ T3746] should_fail.cold+0x5/0xa [ 80.975402][ T3746] should_failslab+0x5/0x10 [ 80.979922][ T3746] kmem_cache_alloc_trace+0x60/0x3f0 [ 80.985211][ T3746] ? ref_tracker_alloc+0x14c/0x550 [ 80.990328][ T3746] ref_tracker_alloc+0x14c/0x550 [ 80.995286][ T3746] ? ref_tracker_free+0x6b0/0x6b0 [ 81.000414][ T3746] ? lock_release+0x720/0x720 [ 81.005093][ T3746] ? do_raw_spin_lock+0x120/0x2a0 [ 81.010119][ T3746] ? rwlock_bug.part.0+0x90/0x90 [ 81.015064][ T3746] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 81.020443][ T3746] linkwatch_fire_event+0x202/0x260 [ 81.025651][ T3746] netif_carrier_off+0x96/0xb0 [ 81.030407][ T3746] __tun_detach+0xfe7/0x13e0 [ 81.034992][ T3746] tun_chr_close+0xc4/0x180 [ 81.039504][ T3746] __fput+0x277/0x9d0 [ 81.043493][ T3746] ? __tun_detach+0x13e0/0x13e0 [ 81.048349][ T3746] task_work_run+0xdd/0x1a0 [ 81.052866][ T3746] ptrace_notify+0x114/0x140 [ 81.057462][ T3746] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 81.063726][ T3746] syscall_exit_to_user_mode+0x9/0x60 [ 81.069089][ T3746] do_syscall_64+0x42/0xb0 [ 81.073501][ T3746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.079411][ T3746] RIP: 0033:0x7fc6cd2767a3 [ 81.083821][ T3746] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 81.103455][ T3746] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.111879][ T3746] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3746] close(3) = 0 [pid 3746] close(4) = 0 [pid 3746] close(5) = -1 EBADF (Bad file descriptor) [pid 3746] close(6) = -1 EBADF (Bad file descriptor) [pid 3746] close(7) = -1 EBADF (Bad file descriptor) [pid 3746] close(8) = -1 EBADF (Bad file descriptor) [pid 3746] close(9) = -1 EBADF (Bad file descriptor) [pid 3746] close(10) = -1 EBADF (Bad file descriptor) [pid 3746] close(11) = -1 EBADF (Bad file descriptor) [ 81.119862][ T3746] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 81.127938][ T3746] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 81.135908][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 81.143887][ T3746] R13: 00000000000f4240 R14: 0000000000013ae1 R15: 00007ffdc49a5924 [ 81.151865][ T3746] [pid 3746] close(12) = -1 EBADF (Bad file descriptor) [pid 3746] close(13) = -1 EBADF (Bad file descriptor) [pid 3746] close(14) = -1 EBADF (Bad file descriptor) [pid 3746] close(15) = -1 EBADF (Bad file descriptor) [pid 3746] close(16) = -1 EBADF (Bad file descriptor) [pid 3746] close(17) = -1 EBADF (Bad file descriptor) [pid 3746] close(18) = -1 EBADF (Bad file descriptor) [pid 3746] close(19) = -1 EBADF (Bad file descriptor) [pid 3746] close(20) = -1 EBADF (Bad file descriptor) [pid 3746] close(21) = -1 EBADF (Bad file descriptor) [pid 3746] close(22) = -1 EBADF (Bad file descriptor) [pid 3746] close(23) = -1 EBADF (Bad file descriptor) [pid 3746] close(24) = -1 EBADF (Bad file descriptor) [pid 3746] close(25) = -1 EBADF (Bad file descriptor) [pid 3746] close(26) = -1 EBADF (Bad file descriptor) [pid 3746] close(27) = -1 EBADF (Bad file descriptor) [pid 3746] close(28) = -1 EBADF (Bad file descriptor) [pid 3746] close(29) = -1 EBADF (Bad file descriptor) [pid 3746] exit_group(0) = ? [pid 3746] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 127 ./strace-static-x86_64: Process 3747 attached [pid 3747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3747] setpgid(0, 0) = 0 [pid 3747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3747] write(3, "1000", 4) = 4 [pid 3747] close(3) = 0 [pid 3747] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3747] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3747] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3747] write(4, "5", 1) = 1 [pid 3747] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 81.225238][ T3747] FAULT_INJECTION: forcing a failure. [ 81.225238][ T3747] name failslab, interval 1, probability 0, space 0, times 0 [ 81.238283][ T3747] CPU: 0 PID: 3747 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 81.248531][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.258572][ T3747] Call Trace: [ 81.261838][ T3747] [ 81.264751][ T3747] dump_stack_lvl+0xcd/0x134 [ 81.269330][ T3747] should_fail.cold+0x5/0xa [ 81.273910][ T3747] should_failslab+0x5/0x10 [ 81.278410][ T3747] kmem_cache_alloc_trace+0x60/0x3f0 [ 81.283688][ T3747] ? ref_tracker_alloc+0x14c/0x550 [ 81.288793][ T3747] ref_tracker_alloc+0x14c/0x550 [ 81.293727][ T3747] ? ref_tracker_free+0x6b0/0x6b0 [ 81.298832][ T3747] ? lock_release+0x720/0x720 [ 81.303505][ T3747] ? do_raw_spin_lock+0x120/0x2a0 [ 81.308542][ T3747] ? rwlock_bug.part.0+0x90/0x90 [ 81.313473][ T3747] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 81.318856][ T3747] linkwatch_fire_event+0x202/0x260 [ 81.324060][ T3747] netif_carrier_off+0x96/0xb0 [ 81.328822][ T3747] __tun_detach+0xfe7/0x13e0 [ 81.333505][ T3747] tun_chr_close+0xc4/0x180 [ 81.338022][ T3747] __fput+0x277/0x9d0 [ 81.342010][ T3747] ? __tun_detach+0x13e0/0x13e0 [ 81.346855][ T3747] task_work_run+0xdd/0x1a0 [ 81.351356][ T3747] ptrace_notify+0x114/0x140 [ 81.355940][ T3747] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 81.362178][ T3747] syscall_exit_to_user_mode+0x9/0x60 [ 81.367555][ T3747] do_syscall_64+0x42/0xb0 [ 81.371966][ T3747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.377851][ T3747] RIP: 0033:0x7fc6cd2767a3 [ 81.382267][ T3747] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 81.401954][ T3747] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.410363][ T3747] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 81.418326][ T3747] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3747] close(3) = 0 [pid 3747] close(4) = 0 [pid 3747] close(5) = -1 EBADF (Bad file descriptor) [pid 3747] close(6) = -1 EBADF (Bad file descriptor) [ 81.426301][ T3747] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 81.434269][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 81.442576][ T3747] R13: 00000000000f4240 R14: 0000000000013c00 R15: 00007ffdc49a5924 [ 81.450550][ T3747] [pid 3747] close(7) = -1 EBADF (Bad file descriptor) [pid 3747] close(8) = -1 EBADF (Bad file descriptor) [pid 3747] close(9) = -1 EBADF (Bad file descriptor) [pid 3747] close(10) = -1 EBADF (Bad file descriptor) [pid 3747] close(11) = -1 EBADF (Bad file descriptor) [pid 3747] close(12) = -1 EBADF (Bad file descriptor) [pid 3747] close(13) = -1 EBADF (Bad file descriptor) [pid 3747] close(14) = -1 EBADF (Bad file descriptor) [pid 3747] close(15) = -1 EBADF (Bad file descriptor) [pid 3747] close(16) = -1 EBADF (Bad file descriptor) [pid 3747] close(17) = -1 EBADF (Bad file descriptor) [pid 3747] close(18) = -1 EBADF (Bad file descriptor) [pid 3747] close(19) = -1 EBADF (Bad file descriptor) [pid 3747] close(20) = -1 EBADF (Bad file descriptor) [pid 3747] close(21) = -1 EBADF (Bad file descriptor) [pid 3747] close(22) = -1 EBADF (Bad file descriptor) [pid 3747] close(23) = -1 EBADF (Bad file descriptor) [pid 3747] close(24) = -1 EBADF (Bad file descriptor) [pid 3747] close(25) = -1 EBADF (Bad file descriptor) [pid 3747] close(26) = -1 EBADF (Bad file descriptor) [pid 3747] close(27) = -1 EBADF (Bad file descriptor) [pid 3747] close(28) = -1 EBADF (Bad file descriptor) [pid 3747] close(29) = -1 EBADF (Bad file descriptor) [pid 3747] exit_group(0) = ? [pid 3747] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=127, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 128 ./strace-static-x86_64: Process 3748 attached [pid 3748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3748] setpgid(0, 0) = 0 [pid 3748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3748] write(3, "1000", 4) = 4 [pid 3748] close(3) = 0 [pid 3748] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3748] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3748] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3748] write(4, "5", 1) = 1 [pid 3748] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 81.520963][ T3748] FAULT_INJECTION: forcing a failure. [ 81.520963][ T3748] name failslab, interval 1, probability 0, space 0, times 0 [ 81.533594][ T3748] CPU: 0 PID: 3748 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 81.543947][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.553995][ T3748] Call Trace: [ 81.557281][ T3748] [ 81.560198][ T3748] dump_stack_lvl+0xcd/0x134 [ 81.564776][ T3748] should_fail.cold+0x5/0xa [ 81.569265][ T3748] should_failslab+0x5/0x10 [ 81.573751][ T3748] kmem_cache_alloc_trace+0x60/0x3f0 [ 81.579022][ T3748] ? ref_tracker_alloc+0x14c/0x550 [ 81.584137][ T3748] ref_tracker_alloc+0x14c/0x550 [ 81.589072][ T3748] ? ref_tracker_free+0x6b0/0x6b0 [ 81.594096][ T3748] ? lock_release+0x720/0x720 [ 81.598766][ T3748] ? do_raw_spin_lock+0x120/0x2a0 [ 81.603786][ T3748] ? rwlock_bug.part.0+0x90/0x90 [ 81.608897][ T3748] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 81.614289][ T3748] linkwatch_fire_event+0x202/0x260 [ 81.619491][ T3748] netif_carrier_off+0x96/0xb0 [ 81.624337][ T3748] __tun_detach+0xfe7/0x13e0 [ 81.628958][ T3748] tun_chr_close+0xc4/0x180 [ 81.633473][ T3748] __fput+0x277/0x9d0 [ 81.637540][ T3748] ? __tun_detach+0x13e0/0x13e0 [ 81.642392][ T3748] task_work_run+0xdd/0x1a0 [ 81.646914][ T3748] ptrace_notify+0x114/0x140 [ 81.651499][ T3748] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 81.657746][ T3748] syscall_exit_to_user_mode+0x9/0x60 [ 81.663110][ T3748] do_syscall_64+0x42/0xb0 [ 81.667518][ T3748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.673403][ T3748] RIP: 0033:0x7fc6cd2767a3 [ 81.677811][ T3748] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 81.697411][ T3748] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.705823][ T3748] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 81.713784][ T3748] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3748] close(3) = 0 [pid 3748] close(4) = 0 [pid 3748] close(5) = -1 EBADF (Bad file descriptor) [pid 3748] close(6) = -1 EBADF (Bad file descriptor) [pid 3748] close(7) = -1 EBADF (Bad file descriptor) [pid 3748] close(8) = -1 EBADF (Bad file descriptor) [pid 3748] close(9) = -1 EBADF (Bad file descriptor) [pid 3748] close(10) = -1 EBADF (Bad file descriptor) [pid 3748] close(11) = -1 EBADF (Bad file descriptor) [pid 3748] close(12) = -1 EBADF (Bad file descriptor) [pid 3748] close(13) = -1 EBADF (Bad file descriptor) [pid 3748] close(14) = -1 EBADF (Bad file descriptor) [pid 3748] close(15) = -1 EBADF (Bad file descriptor) [pid 3748] close(16) = -1 EBADF (Bad file descriptor) [pid 3748] close(17) = -1 EBADF (Bad file descriptor) [pid 3748] close(18) = -1 EBADF (Bad file descriptor) [pid 3748] close(19) = -1 EBADF (Bad file descriptor) [pid 3748] close(20) = -1 EBADF (Bad file descriptor) [pid 3748] close(21) = -1 EBADF (Bad file descriptor) [pid 3748] close(22) = -1 EBADF (Bad file descriptor) [pid 3748] close(23) = -1 EBADF (Bad file descriptor) [pid 3748] close(24) = -1 EBADF (Bad file descriptor) [pid 3748] close(25) = -1 EBADF (Bad file descriptor) [pid 3748] close(26) = -1 EBADF (Bad file descriptor) [pid 3748] close(27) = -1 EBADF (Bad file descriptor) [pid 3748] close(28) = -1 EBADF (Bad file descriptor) [pid 3748] close(29) = -1 EBADF (Bad file descriptor) [pid 3748] exit_group(0) = ? [pid 3748] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 129 ./strace-static-x86_64: Process 3749 attached [pid 3749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3749] setpgid(0, 0) = 0 [pid 3749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3749] write(3, "1000", 4) = 4 [pid 3749] close(3) = 0 [pid 3749] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3749] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3749] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3749] write(4, "5", 1) = 1 [pid 3749] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 81.721746][ T3748] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 81.729716][ T3748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 81.737679][ T3748] R13: 00000000000f4240 R14: 0000000000013d2d R15: 00007ffdc49a5924 [ 81.745825][ T3748] [ 81.799342][ T3749] FAULT_INJECTION: forcing a failure. [ 81.799342][ T3749] name failslab, interval 1, probability 0, space 0, times 0 [ 81.812697][ T3749] CPU: 0 PID: 3749 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 81.822856][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.833149][ T3749] Call Trace: [ 81.836426][ T3749] [ 81.839352][ T3749] dump_stack_lvl+0xcd/0x134 [ 81.843956][ T3749] should_fail.cold+0x5/0xa [ 81.848460][ T3749] should_failslab+0x5/0x10 [ 81.852971][ T3749] kmem_cache_alloc_trace+0x60/0x3f0 [ 81.858545][ T3749] ? ref_tracker_alloc+0x14c/0x550 [ 81.863658][ T3749] ref_tracker_alloc+0x14c/0x550 [ 81.868615][ T3749] ? ref_tracker_free+0x6b0/0x6b0 [ 81.873635][ T3749] ? lock_release+0x720/0x720 [ 81.878306][ T3749] ? do_raw_spin_lock+0x120/0x2a0 [ 81.883329][ T3749] ? rwlock_bug.part.0+0x90/0x90 [ 81.888352][ T3749] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 81.893804][ T3749] linkwatch_fire_event+0x202/0x260 [ 81.898992][ T3749] netif_carrier_off+0x96/0xb0 [ 81.903746][ T3749] __tun_detach+0xfe7/0x13e0 [ 81.908329][ T3749] tun_chr_close+0xc4/0x180 [ 81.912839][ T3749] __fput+0x277/0x9d0 [ 81.916806][ T3749] ? __tun_detach+0x13e0/0x13e0 [ 81.921645][ T3749] task_work_run+0xdd/0x1a0 [ 81.926154][ T3749] ptrace_notify+0x114/0x140 [ 81.930745][ T3749] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 81.936976][ T3749] syscall_exit_to_user_mode+0x9/0x60 [ 81.942338][ T3749] do_syscall_64+0x42/0xb0 [ 81.946762][ T3749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.952641][ T3749] RIP: 0033:0x7fc6cd2767a3 [ 81.957042][ T3749] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 81.976743][ T3749] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.985327][ T3749] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3749] close(3) = 0 [pid 3749] close(4) = 0 [pid 3749] close(5) = -1 EBADF (Bad file descriptor) [pid 3749] close(6) = -1 EBADF (Bad file descriptor) [pid 3749] close(7) = -1 EBADF (Bad file descriptor) [pid 3749] close(8) = -1 EBADF (Bad file descriptor) [pid 3749] close(9) = -1 EBADF (Bad file descriptor) [pid 3749] close(10) = -1 EBADF (Bad file descriptor) [pid 3749] close(11) = -1 EBADF (Bad file descriptor) [pid 3749] close(12) = -1 EBADF (Bad file descriptor) [pid 3749] close(13) = -1 EBADF (Bad file descriptor) [pid 3749] close(14) = -1 EBADF (Bad file descriptor) [pid 3749] close(15) = -1 EBADF (Bad file descriptor) [pid 3749] close(16) = -1 EBADF (Bad file descriptor) [pid 3749] close(17) = -1 EBADF (Bad file descriptor) [pid 3749] close(18) = -1 EBADF (Bad file descriptor) [pid 3749] close(19) = -1 EBADF (Bad file descriptor) [pid 3749] close(20) = -1 EBADF (Bad file descriptor) [pid 3749] close(21) = -1 EBADF (Bad file descriptor) [pid 3749] close(22) = -1 EBADF (Bad file descriptor) [pid 3749] close(23) = -1 EBADF (Bad file descriptor) [pid 3749] close(24) = -1 EBADF (Bad file descriptor) [pid 3749] close(25) = -1 EBADF (Bad file descriptor) [pid 3749] close(26) = -1 EBADF (Bad file descriptor) [pid 3749] close(27) = -1 EBADF (Bad file descriptor) [pid 3749] close(28) = -1 EBADF (Bad file descriptor) [pid 3749] close(29) = -1 EBADF (Bad file descriptor) [pid 3749] exit_group(0) = ? [pid 3749] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3750 attached , child_tidptr=0x5555570bd5d0) = 130 [pid 3750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3750] setpgid(0, 0) = 0 [pid 3750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3750] write(3, "1000", 4) = 4 [pid 3750] close(3) = 0 [pid 3750] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 81.993291][ T3749] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 82.001342][ T3749] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 82.009326][ T3749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 82.017307][ T3749] R13: 00000000000f4240 R14: 0000000000013e55 R15: 00007ffdc49a5924 [ 82.025296][ T3749] [pid 3750] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3750] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3750] write(4, "5", 1) = 1 [pid 3750] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 82.086780][ T3750] FAULT_INJECTION: forcing a failure. [ 82.086780][ T3750] name failslab, interval 1, probability 0, space 0, times 0 [ 82.099417][ T3750] CPU: 0 PID: 3750 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 82.109739][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.119802][ T3750] Call Trace: [ 82.123100][ T3750] [ 82.126130][ T3750] dump_stack_lvl+0xcd/0x134 [ 82.130730][ T3750] should_fail.cold+0x5/0xa [ 82.135350][ T3750] should_failslab+0x5/0x10 [ 82.139856][ T3750] kmem_cache_alloc_trace+0x60/0x3f0 [ 82.145434][ T3750] ? ref_tracker_alloc+0x14c/0x550 [ 82.150839][ T3750] ref_tracker_alloc+0x14c/0x550 [ 82.155888][ T3750] ? ref_tracker_free+0x6b0/0x6b0 [ 82.160912][ T3750] ? lock_release+0x720/0x720 [ 82.165675][ T3750] ? do_raw_spin_lock+0x120/0x2a0 [ 82.170693][ T3750] ? rwlock_bug.part.0+0x90/0x90 [ 82.175627][ T3750] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 82.180999][ T3750] linkwatch_fire_event+0x202/0x260 [ 82.186201][ T3750] netif_carrier_off+0x96/0xb0 [ 82.190967][ T3750] __tun_detach+0xfe7/0x13e0 [ 82.195600][ T3750] tun_chr_close+0xc4/0x180 [ 82.200101][ T3750] __fput+0x277/0x9d0 [ 82.204077][ T3750] ? __tun_detach+0x13e0/0x13e0 [ 82.208941][ T3750] task_work_run+0xdd/0x1a0 [ 82.213467][ T3750] ptrace_notify+0x114/0x140 [ 82.218066][ T3750] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 82.224328][ T3750] syscall_exit_to_user_mode+0x9/0x60 [ 82.229726][ T3750] do_syscall_64+0x42/0xb0 [ 82.234164][ T3750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.240059][ T3750] RIP: 0033:0x7fc6cd2767a3 [ 82.244475][ T3750] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 82.264285][ T3750] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 82.272789][ T3750] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3750] close(3) = 0 [pid 3750] close(4) = 0 [pid 3750] close(5) = -1 EBADF (Bad file descriptor) [pid 3750] close(6) = -1 EBADF (Bad file descriptor) [pid 3750] close(7) = -1 EBADF (Bad file descriptor) [pid 3750] close(8) = -1 EBADF (Bad file descriptor) [pid 3750] close(9) = -1 EBADF (Bad file descriptor) [pid 3750] close(10) = -1 EBADF (Bad file descriptor) [pid 3750] close(11) = -1 EBADF (Bad file descriptor) [pid 3750] close(12) = -1 EBADF (Bad file descriptor) [pid 3750] close(13) = -1 EBADF (Bad file descriptor) [pid 3750] close(14) = -1 EBADF (Bad file descriptor) [pid 3750] close(15) = -1 EBADF (Bad file descriptor) [pid 3750] close(16) = -1 EBADF (Bad file descriptor) [pid 3750] close(17) = -1 EBADF (Bad file descriptor) [pid 3750] close(18) = -1 EBADF (Bad file descriptor) [pid 3750] close(19) = -1 EBADF (Bad file descriptor) [pid 3750] close(20) = -1 EBADF (Bad file descriptor) [pid 3750] close(21) = -1 EBADF (Bad file descriptor) [pid 3750] close(22) = -1 EBADF (Bad file descriptor) [pid 3750] close(23) = -1 EBADF (Bad file descriptor) [pid 3750] close(24) = -1 EBADF (Bad file descriptor) [pid 3750] close(25) = -1 EBADF (Bad file descriptor) [pid 3750] close(26) = -1 EBADF (Bad file descriptor) [pid 3750] close(27) = -1 EBADF (Bad file descriptor) [pid 3750] close(28) = -1 EBADF (Bad file descriptor) [pid 3750] close(29) = -1 EBADF (Bad file descriptor) [pid 3750] exit_group(0) = ? [pid 3750] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=130, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 131 [ 82.280752][ T3750] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 82.288717][ T3750] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 82.296680][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 82.304640][ T3750] R13: 00000000000f4240 R14: 0000000000013f69 R15: 00007ffdc49a5924 [ 82.312617][ T3750] ./strace-static-x86_64: Process 3751 attached [pid 3751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3751] setpgid(0, 0) = 0 [pid 3751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3751] write(3, "1000", 4) = 4 [pid 3751] close(3) = 0 [pid 3751] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3751] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3751] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3751] write(4, "5", 1) = 1 [pid 3751] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 82.377680][ T3751] FAULT_INJECTION: forcing a failure. [ 82.377680][ T3751] name failslab, interval 1, probability 0, space 0, times 0 [ 82.390781][ T3751] CPU: 0 PID: 3751 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 82.400918][ T3751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.410963][ T3751] Call Trace: [ 82.414228][ T3751] [ 82.417140][ T3751] dump_stack_lvl+0xcd/0x134 [ 82.421720][ T3751] should_fail.cold+0x5/0xa [ 82.426209][ T3751] should_failslab+0x5/0x10 [ 82.430722][ T3751] kmem_cache_alloc_trace+0x60/0x3f0 [ 82.436081][ T3751] ? ref_tracker_alloc+0x14c/0x550 [ 82.441187][ T3751] ref_tracker_alloc+0x14c/0x550 [ 82.446153][ T3751] ? ref_tracker_free+0x6b0/0x6b0 [ 82.451191][ T3751] ? lock_release+0x720/0x720 [ 82.455878][ T3751] ? do_raw_spin_lock+0x120/0x2a0 [ 82.461082][ T3751] ? rwlock_bug.part.0+0x90/0x90 [ 82.466013][ T3751] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 82.471392][ T3751] linkwatch_fire_event+0x202/0x260 [ 82.476607][ T3751] netif_carrier_off+0x96/0xb0 [ 82.481368][ T3751] __tun_detach+0xfe7/0x13e0 [ 82.485958][ T3751] tun_chr_close+0xc4/0x180 [ 82.490448][ T3751] __fput+0x277/0x9d0 [ 82.494420][ T3751] ? __tun_detach+0x13e0/0x13e0 [ 82.499268][ T3751] task_work_run+0xdd/0x1a0 [ 82.503769][ T3751] ptrace_notify+0x114/0x140 [ 82.508354][ T3751] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 82.514786][ T3751] syscall_exit_to_user_mode+0x9/0x60 [ 82.520193][ T3751] do_syscall_64+0x42/0xb0 [ 82.524602][ T3751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.530486][ T3751] RIP: 0033:0x7fc6cd2767a3 [ 82.534889][ T3751] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 82.554481][ T3751] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 82.562881][ T3751] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 82.570834][ T3751] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 82.578794][ T3751] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 82.586762][ T3751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 82.594714][ T3751] R13: 00000000000f4240 R14: 0000000000014088 R15: 00007ffdc49a5924 [ 82.602681][ T3751] [pid 3751] close(3) = 0 [pid 3751] close(4) = 0 [pid 3751] close(5) = -1 EBADF (Bad file descriptor) [pid 3751] close(6) = -1 EBADF (Bad file descriptor) [pid 3751] close(7) = -1 EBADF (Bad file descriptor) [pid 3751] close(8) = -1 EBADF (Bad file descriptor) [pid 3751] close(9) = -1 EBADF (Bad file descriptor) [pid 3751] close(10) = -1 EBADF (Bad file descriptor) [pid 3751] close(11) = -1 EBADF (Bad file descriptor) [pid 3751] close(12) = -1 EBADF (Bad file descriptor) [pid 3751] close(13) = -1 EBADF (Bad file descriptor) [pid 3751] close(14) = -1 EBADF (Bad file descriptor) [pid 3751] close(15) = -1 EBADF (Bad file descriptor) [pid 3751] close(16) = -1 EBADF (Bad file descriptor) [pid 3751] close(17) = -1 EBADF (Bad file descriptor) [pid 3751] close(18) = -1 EBADF (Bad file descriptor) [pid 3751] close(19) = -1 EBADF (Bad file descriptor) [pid 3751] close(20) = -1 EBADF (Bad file descriptor) [pid 3751] close(21) = -1 EBADF (Bad file descriptor) [pid 3751] close(22) = -1 EBADF (Bad file descriptor) [pid 3751] close(23) = -1 EBADF (Bad file descriptor) [pid 3751] close(24) = -1 EBADF (Bad file descriptor) [pid 3751] close(25) = -1 EBADF (Bad file descriptor) [pid 3751] close(26) = -1 EBADF (Bad file descriptor) [pid 3751] close(27) = -1 EBADF (Bad file descriptor) [pid 3751] close(28) = -1 EBADF (Bad file descriptor) [pid 3751] close(29) = -1 EBADF (Bad file descriptor) [pid 3751] exit_group(0) = ? [pid 3751] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3752 attached , child_tidptr=0x5555570bd5d0) = 132 [pid 3752] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3752] setpgid(0, 0) = 0 [pid 3752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3752] write(3, "1000", 4) = 4 [pid 3752] close(3) = 0 [pid 3752] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3752] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3752] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3752] write(4, "5", 1) = 1 [pid 3752] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 82.688478][ T3752] FAULT_INJECTION: forcing a failure. [ 82.688478][ T3752] name failslab, interval 1, probability 0, space 0, times 0 [ 82.701094][ T3752] CPU: 0 PID: 3752 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 82.711227][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.721270][ T3752] Call Trace: [ 82.724537][ T3752] [ 82.727457][ T3752] dump_stack_lvl+0xcd/0x134 [ 82.732038][ T3752] should_fail.cold+0x5/0xa [ 82.736530][ T3752] should_failslab+0x5/0x10 [ 82.741024][ T3752] kmem_cache_alloc_trace+0x60/0x3f0 [ 82.746295][ T3752] ? ref_tracker_alloc+0x14c/0x550 [ 82.751425][ T3752] ref_tracker_alloc+0x14c/0x550 [ 82.756359][ T3752] ? ref_tracker_free+0x6b0/0x6b0 [ 82.761459][ T3752] ? lock_release+0x720/0x720 [ 82.766143][ T3752] ? do_raw_spin_lock+0x120/0x2a0 [ 82.771157][ T3752] ? rwlock_bug.part.0+0x90/0x90 [ 82.776085][ T3752] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 82.781560][ T3752] linkwatch_fire_event+0x202/0x260 [ 82.786757][ T3752] netif_carrier_off+0x96/0xb0 [ 82.791510][ T3752] __tun_detach+0xfe7/0x13e0 [ 82.796114][ T3752] tun_chr_close+0xc4/0x180 [ 82.800618][ T3752] __fput+0x277/0x9d0 [ 82.804587][ T3752] ? __tun_detach+0x13e0/0x13e0 [ 82.809426][ T3752] task_work_run+0xdd/0x1a0 [ 82.813926][ T3752] ptrace_notify+0x114/0x140 [ 82.818520][ T3752] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 82.824752][ T3752] syscall_exit_to_user_mode+0x9/0x60 [ 82.830127][ T3752] do_syscall_64+0x42/0xb0 [ 82.834538][ T3752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.840522][ T3752] RIP: 0033:0x7fc6cd2767a3 [ 82.844926][ T3752] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 82.864528][ T3752] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 82.872956][ T3752] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 82.881245][ T3752] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3752] close(3) = 0 [pid 3752] close(4) = 0 [pid 3752] close(5) = -1 EBADF (Bad file descriptor) [pid 3752] close(6) = -1 EBADF (Bad file descriptor) [pid 3752] close(7) = -1 EBADF (Bad file descriptor) [pid 3752] close(8) = -1 EBADF (Bad file descriptor) [pid 3752] close(9) = -1 EBADF (Bad file descriptor) [pid 3752] close(10) = -1 EBADF (Bad file descriptor) [pid 3752] close(11) = -1 EBADF (Bad file descriptor) [pid 3752] close(12) = -1 EBADF (Bad file descriptor) [pid 3752] close(13) = -1 EBADF (Bad file descriptor) [pid 3752] close(14) = -1 EBADF (Bad file descriptor) [pid 3752] close(15) = -1 EBADF (Bad file descriptor) [ 82.889208][ T3752] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 82.897183][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 82.905236][ T3752] R13: 00000000000f4240 R14: 00000000000141ac R15: 00007ffdc49a5924 [ 82.913208][ T3752] [pid 3752] close(16) = -1 EBADF (Bad file descriptor) [pid 3752] close(17) = -1 EBADF (Bad file descriptor) [pid 3752] close(18) = -1 EBADF (Bad file descriptor) [pid 3752] close(19) = -1 EBADF (Bad file descriptor) [pid 3752] close(20) = -1 EBADF (Bad file descriptor) [pid 3752] close(21) = -1 EBADF (Bad file descriptor) [pid 3752] close(22) = -1 EBADF (Bad file descriptor) [pid 3752] close(23) = -1 EBADF (Bad file descriptor) [pid 3752] close(24) = -1 EBADF (Bad file descriptor) [pid 3752] close(25) = -1 EBADF (Bad file descriptor) [pid 3752] close(26) = -1 EBADF (Bad file descriptor) [pid 3752] close(27) = -1 EBADF (Bad file descriptor) [pid 3752] close(28) = -1 EBADF (Bad file descriptor) [pid 3752] close(29) = -1 EBADF (Bad file descriptor) [pid 3752] exit_group(0) = ? [pid 3752] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 133 ./strace-static-x86_64: Process 3754 attached [pid 3754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3754] setpgid(0, 0) = 0 [pid 3754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3754] write(3, "1000", 4) = 4 [pid 3754] close(3) = 0 [pid 3754] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3754] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3754] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3754] write(4, "5", 1) = 1 [pid 3754] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 82.982725][ T3754] FAULT_INJECTION: forcing a failure. [ 82.982725][ T3754] name failslab, interval 1, probability 0, space 0, times 0 [ 82.995908][ T3754] CPU: 0 PID: 3754 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 83.006834][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.016875][ T3754] Call Trace: [ 83.020149][ T3754] [ 83.023335][ T3754] dump_stack_lvl+0xcd/0x134 [ 83.027929][ T3754] should_fail.cold+0x5/0xa [ 83.032417][ T3754] should_failslab+0x5/0x10 [ 83.036903][ T3754] kmem_cache_alloc_trace+0x60/0x3f0 [ 83.042181][ T3754] ? ref_tracker_alloc+0x14c/0x550 [ 83.047307][ T3754] ref_tracker_alloc+0x14c/0x550 [ 83.052243][ T3754] ? ref_tracker_free+0x6b0/0x6b0 [ 83.057261][ T3754] ? lock_release+0x720/0x720 [ 83.061940][ T3754] ? do_raw_spin_lock+0x120/0x2a0 [ 83.067141][ T3754] ? rwlock_bug.part.0+0x90/0x90 [ 83.072079][ T3754] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 83.077466][ T3754] linkwatch_fire_event+0x202/0x260 [ 83.082661][ T3754] netif_carrier_off+0x96/0xb0 [ 83.087417][ T3754] __tun_detach+0xfe7/0x13e0 [ 83.092032][ T3754] tun_chr_close+0xc4/0x180 [ 83.096523][ T3754] __fput+0x277/0x9d0 [ 83.100505][ T3754] ? __tun_detach+0x13e0/0x13e0 [ 83.105540][ T3754] task_work_run+0xdd/0x1a0 [ 83.110035][ T3754] ptrace_notify+0x114/0x140 [ 83.114617][ T3754] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 83.121011][ T3754] syscall_exit_to_user_mode+0x9/0x60 [ 83.126385][ T3754] do_syscall_64+0x42/0xb0 [ 83.130792][ T3754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.136675][ T3754] RIP: 0033:0x7fc6cd2767a3 [ 83.141075][ T3754] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 83.161036][ T3754] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 83.169464][ T3754] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3754] close(3) = 0 [pid 3754] close(4) = 0 [pid 3754] close(5) = -1 EBADF (Bad file descriptor) [pid 3754] close(6) = -1 EBADF (Bad file descriptor) [pid 3754] close(7) = -1 EBADF (Bad file descriptor) [pid 3754] close(8) = -1 EBADF (Bad file descriptor) [pid 3754] close(9) = -1 EBADF (Bad file descriptor) [pid 3754] close(10) = -1 EBADF (Bad file descriptor) [pid 3754] close(11) = -1 EBADF (Bad file descriptor) [pid 3754] close(12) = -1 EBADF (Bad file descriptor) [pid 3754] close(13) = -1 EBADF (Bad file descriptor) [pid 3754] close(14) = -1 EBADF (Bad file descriptor) [pid 3754] close(15) = -1 EBADF (Bad file descriptor) [pid 3754] close(16) = -1 EBADF (Bad file descriptor) [pid 3754] close(17) = -1 EBADF (Bad file descriptor) [pid 3754] close(18) = -1 EBADF (Bad file descriptor) [pid 3754] close(19) = -1 EBADF (Bad file descriptor) [pid 3754] close(20) = -1 EBADF (Bad file descriptor) [pid 3754] close(21) = -1 EBADF (Bad file descriptor) [pid 3754] close(22) = -1 EBADF (Bad file descriptor) [ 83.177428][ T3754] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 83.185474][ T3754] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 83.193538][ T3754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 83.201760][ T3754] R13: 00000000000f4240 R14: 00000000000142dd R15: 00007ffdc49a5924 [ 83.209913][ T3754] [pid 3754] close(23) = -1 EBADF (Bad file descriptor) [pid 3754] close(24) = -1 EBADF (Bad file descriptor) [pid 3754] close(25) = -1 EBADF (Bad file descriptor) [pid 3754] close(26) = -1 EBADF (Bad file descriptor) [pid 3754] close(27) = -1 EBADF (Bad file descriptor) [pid 3754] close(28) = -1 EBADF (Bad file descriptor) [pid 3754] close(29) = -1 EBADF (Bad file descriptor) [pid 3754] exit_group(0) = ? [pid 3754] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=133, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 134 ./strace-static-x86_64: Process 3757 attached [pid 3757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3757] setpgid(0, 0) = 0 [pid 3757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3757] write(3, "1000", 4) = 4 [pid 3757] close(3) = 0 [pid 3757] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3757] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3757] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3757] write(4, "5", 1) = 1 [pid 3757] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 83.280471][ T3757] FAULT_INJECTION: forcing a failure. [ 83.280471][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 83.293096][ T3757] CPU: 0 PID: 3757 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 83.303239][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.313285][ T3757] Call Trace: [ 83.316551][ T3757] [ 83.319473][ T3757] dump_stack_lvl+0xcd/0x134 [ 83.324079][ T3757] should_fail.cold+0x5/0xa [ 83.328582][ T3757] should_failslab+0x5/0x10 [ 83.333085][ T3757] kmem_cache_alloc_trace+0x60/0x3f0 [ 83.338354][ T3757] ? ref_tracker_alloc+0x14c/0x550 [ 83.343473][ T3757] ref_tracker_alloc+0x14c/0x550 [ 83.348404][ T3757] ? ref_tracker_free+0x6b0/0x6b0 [ 83.353421][ T3757] ? lock_release+0x720/0x720 [ 83.358105][ T3757] ? do_raw_spin_lock+0x120/0x2a0 [ 83.363118][ T3757] ? rwlock_bug.part.0+0x90/0x90 [ 83.368044][ T3757] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 83.373410][ T3757] linkwatch_fire_event+0x202/0x260 [ 83.378608][ T3757] netif_carrier_off+0x96/0xb0 [ 83.383362][ T3757] __tun_detach+0xfe7/0x13e0 [ 83.387950][ T3757] tun_chr_close+0xc4/0x180 [ 83.392445][ T3757] __fput+0x277/0x9d0 [ 83.396419][ T3757] ? __tun_detach+0x13e0/0x13e0 [ 83.401434][ T3757] task_work_run+0xdd/0x1a0 [ 83.405943][ T3757] ptrace_notify+0x114/0x140 [ 83.410549][ T3757] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 83.416800][ T3757] syscall_exit_to_user_mode+0x9/0x60 [ 83.422165][ T3757] do_syscall_64+0x42/0xb0 [ 83.426575][ T3757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.432459][ T3757] RIP: 0033:0x7fc6cd2767a3 [ 83.436864][ T3757] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 83.456550][ T3757] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 83.464960][ T3757] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 83.472920][ T3757] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3757] close(3) = 0 [pid 3757] close(4) = 0 [pid 3757] close(5) = -1 EBADF (Bad file descriptor) [pid 3757] close(6) = -1 EBADF (Bad file descriptor) [pid 3757] close(7) = -1 EBADF (Bad file descriptor) [pid 3757] close(8) = -1 EBADF (Bad file descriptor) [pid 3757] close(9) = -1 EBADF (Bad file descriptor) [pid 3757] close(10) = -1 EBADF (Bad file descriptor) [pid 3757] close(11) = -1 EBADF (Bad file descriptor) [pid 3757] close(12) = -1 EBADF (Bad file descriptor) [ 83.480967][ T3757] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 83.488945][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 83.496903][ T3757] R13: 00000000000f4240 R14: 000000000001440a R15: 00007ffdc49a5924 [ 83.504873][ T3757] [pid 3757] close(13) = -1 EBADF (Bad file descriptor) [pid 3757] close(14) = -1 EBADF (Bad file descriptor) [pid 3757] close(15) = -1 EBADF (Bad file descriptor) [pid 3757] close(16) = -1 EBADF (Bad file descriptor) [pid 3757] close(17) = -1 EBADF (Bad file descriptor) [pid 3757] close(18) = -1 EBADF (Bad file descriptor) [pid 3757] close(19) = -1 EBADF (Bad file descriptor) [pid 3757] close(20) = -1 EBADF (Bad file descriptor) [pid 3757] close(21) = -1 EBADF (Bad file descriptor) [pid 3757] close(22) = -1 EBADF (Bad file descriptor) [pid 3757] close(23) = -1 EBADF (Bad file descriptor) [pid 3757] close(24) = -1 EBADF (Bad file descriptor) [pid 3757] close(25) = -1 EBADF (Bad file descriptor) [pid 3757] close(26) = -1 EBADF (Bad file descriptor) [pid 3757] close(27) = -1 EBADF (Bad file descriptor) [pid 3757] close(28) = -1 EBADF (Bad file descriptor) [pid 3757] close(29) = -1 EBADF (Bad file descriptor) [pid 3757] exit_group(0) = ? [pid 3757] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3759 attached , child_tidptr=0x5555570bd5d0) = 135 [pid 3759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3759] setpgid(0, 0) = 0 [pid 3759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3759] write(3, "1000", 4) = 4 [pid 3759] close(3) = 0 [pid 3759] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3759] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3759] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3759] write(4, "5", 1) = 1 [pid 3759] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 83.579421][ T3759] FAULT_INJECTION: forcing a failure. [ 83.579421][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 83.592128][ T3759] CPU: 0 PID: 3759 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 83.602461][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.612526][ T3759] Call Trace: [ 83.615795][ T3759] [ 83.618735][ T3759] dump_stack_lvl+0xcd/0x134 [ 83.623335][ T3759] should_fail.cold+0x5/0xa [ 83.627827][ T3759] should_failslab+0x5/0x10 [ 83.632318][ T3759] kmem_cache_alloc_trace+0x60/0x3f0 [ 83.637593][ T3759] ? ref_tracker_alloc+0x14c/0x550 [ 83.642806][ T3759] ref_tracker_alloc+0x14c/0x550 [ 83.647745][ T3759] ? ref_tracker_free+0x6b0/0x6b0 [ 83.652796][ T3759] ? lock_release+0x720/0x720 [ 83.657477][ T3759] ? do_raw_spin_lock+0x120/0x2a0 [ 83.662497][ T3759] ? rwlock_bug.part.0+0x90/0x90 [ 83.667425][ T3759] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 83.672812][ T3759] linkwatch_fire_event+0x202/0x260 [ 83.678006][ T3759] netif_carrier_off+0x96/0xb0 [ 83.682761][ T3759] __tun_detach+0xfe7/0x13e0 [ 83.687355][ T3759] tun_chr_close+0xc4/0x180 [ 83.691845][ T3759] __fput+0x277/0x9d0 [ 83.695827][ T3759] ? __tun_detach+0x13e0/0x13e0 [ 83.700681][ T3759] task_work_run+0xdd/0x1a0 [ 83.705178][ T3759] ptrace_notify+0x114/0x140 [ 83.709765][ T3759] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 83.716005][ T3759] syscall_exit_to_user_mode+0x9/0x60 [ 83.721371][ T3759] do_syscall_64+0x42/0xb0 [ 83.725782][ T3759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.731686][ T3759] RIP: 0033:0x7fc6cd2767a3 [ 83.736103][ T3759] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 83.756227][ T3759] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 83.764825][ T3759] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3759] close(3) = 0 [pid 3759] close(4) = 0 [pid 3759] close(5) = -1 EBADF (Bad file descriptor) [pid 3759] close(6) = -1 EBADF (Bad file descriptor) [pid 3759] close(7) = -1 EBADF (Bad file descriptor) [pid 3759] close(8) = -1 EBADF (Bad file descriptor) [pid 3759] close(9) = -1 EBADF (Bad file descriptor) [pid 3759] close(10) = -1 EBADF (Bad file descriptor) [pid 3759] close(11) = -1 EBADF (Bad file descriptor) [pid 3759] close(12) = -1 EBADF (Bad file descriptor) [pid 3759] close(13) = -1 EBADF (Bad file descriptor) [pid 3759] close(14) = -1 EBADF (Bad file descriptor) [pid 3759] close(15) = -1 EBADF (Bad file descriptor) [pid 3759] close(16) = -1 EBADF (Bad file descriptor) [pid 3759] close(17) = -1 EBADF (Bad file descriptor) [pid 3759] close(18) = -1 EBADF (Bad file descriptor) [pid 3759] close(19) = -1 EBADF (Bad file descriptor) [pid 3759] close(20) = -1 EBADF (Bad file descriptor) [pid 3759] close(21) = -1 EBADF (Bad file descriptor) [pid 3759] close(22) = -1 EBADF (Bad file descriptor) [pid 3759] close(23) = -1 EBADF (Bad file descriptor) [pid 3759] close(24) = -1 EBADF (Bad file descriptor) [pid 3759] close(25) = -1 EBADF (Bad file descriptor) [pid 3759] close(26) = -1 EBADF (Bad file descriptor) [pid 3759] close(27) = -1 EBADF (Bad file descriptor) [pid 3759] close(28) = -1 EBADF (Bad file descriptor) [pid 3759] close(29) = -1 EBADF (Bad file descriptor) [pid 3759] exit_group(0) = ? [pid 3759] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3760 attached , child_tidptr=0x5555570bd5d0) = 136 [pid 3760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3760] setpgid(0, 0) = 0 [pid 3760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3760] write(3, "1000", 4) = 4 [pid 3760] close(3) = 0 [pid 3760] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3760] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3760] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3760] write(4, "5", 1) = 1 [pid 3760] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 83.772794][ T3759] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 83.780758][ T3759] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 83.788903][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 83.796863][ T3759] R13: 00000000000f4240 R14: 0000000000014531 R15: 00007ffdc49a5924 [ 83.805112][ T3759] [ 83.856173][ T3760] FAULT_INJECTION: forcing a failure. [ 83.856173][ T3760] name failslab, interval 1, probability 0, space 0, times 0 [ 83.869568][ T3760] CPU: 0 PID: 3760 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 83.879923][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.889962][ T3760] Call Trace: [ 83.893225][ T3760] [ 83.896133][ T3760] dump_stack_lvl+0xcd/0x134 [ 83.900712][ T3760] should_fail.cold+0x5/0xa [ 83.905198][ T3760] should_failslab+0x5/0x10 [ 83.909683][ T3760] kmem_cache_alloc_trace+0x60/0x3f0 [ 83.914948][ T3760] ? ref_tracker_alloc+0x14c/0x550 [ 83.920132][ T3760] ref_tracker_alloc+0x14c/0x550 [ 83.925078][ T3760] ? ref_tracker_free+0x6b0/0x6b0 [ 83.930093][ T3760] ? lock_release+0x720/0x720 [ 83.934852][ T3760] ? do_raw_spin_lock+0x120/0x2a0 [ 83.939885][ T3760] ? rwlock_bug.part.0+0x90/0x90 [ 83.944821][ T3760] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 83.950356][ T3760] linkwatch_fire_event+0x202/0x260 [ 83.955552][ T3760] netif_carrier_off+0x96/0xb0 [ 83.960305][ T3760] __tun_detach+0xfe7/0x13e0 [ 83.964894][ T3760] tun_chr_close+0xc4/0x180 [ 83.969389][ T3760] __fput+0x277/0x9d0 [ 83.973448][ T3760] ? __tun_detach+0x13e0/0x13e0 [ 83.978291][ T3760] task_work_run+0xdd/0x1a0 [ 83.982786][ T3760] ptrace_notify+0x114/0x140 [ 83.987365][ T3760] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 83.993598][ T3760] syscall_exit_to_user_mode+0x9/0x60 [ 83.998958][ T3760] do_syscall_64+0x42/0xb0 [ 84.003367][ T3760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.009246][ T3760] RIP: 0033:0x7fc6cd2767a3 [ 84.013645][ T3760] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 84.033265][ T3760] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 84.041670][ T3760] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3760] close(3) = 0 [pid 3760] close(4) = 0 [pid 3760] close(5) = -1 EBADF (Bad file descriptor) [pid 3760] close(6) = -1 EBADF (Bad file descriptor) [pid 3760] close(7) = -1 EBADF (Bad file descriptor) [pid 3760] close(8) = -1 EBADF (Bad file descriptor) [pid 3760] close(9) = -1 EBADF (Bad file descriptor) [pid 3760] close(10) = -1 EBADF (Bad file descriptor) [pid 3760] close(11) = -1 EBADF (Bad file descriptor) [pid 3760] close(12) = -1 EBADF (Bad file descriptor) [pid 3760] close(13) = -1 EBADF (Bad file descriptor) [pid 3760] close(14) = -1 EBADF (Bad file descriptor) [pid 3760] close(15) = -1 EBADF (Bad file descriptor) [pid 3760] close(16) = -1 EBADF (Bad file descriptor) [pid 3760] close(17) = -1 EBADF (Bad file descriptor) [pid 3760] close(18) = -1 EBADF (Bad file descriptor) [pid 3760] close(19) = -1 EBADF (Bad file descriptor) [pid 3760] close(20) = -1 EBADF (Bad file descriptor) [pid 3760] close(21) = -1 EBADF (Bad file descriptor) [pid 3760] close(22) = -1 EBADF (Bad file descriptor) [pid 3760] close(23) = -1 EBADF (Bad file descriptor) [pid 3760] close(24) = -1 EBADF (Bad file descriptor) [pid 3760] close(25) = -1 EBADF (Bad file descriptor) [pid 3760] close(26) = -1 EBADF (Bad file descriptor) [pid 3760] close(27) = -1 EBADF (Bad file descriptor) [pid 3760] close(28) = -1 EBADF (Bad file descriptor) [pid 3760] close(29) = -1 EBADF (Bad file descriptor) [pid 3760] exit_group(0) = ? [pid 3760] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=136, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3761 attached , child_tidptr=0x5555570bd5d0) = 137 [pid 3761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3761] setpgid(0, 0) = 0 [pid 3761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 84.049634][ T3760] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 84.057594][ T3760] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 84.065552][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 84.073522][ T3760] R13: 00000000000f4240 R14: 000000000001465d R15: 00007ffdc49a5924 [ 84.081499][ T3760] [pid 3761] write(3, "1000", 4) = 4 [pid 3761] close(3) = 0 [pid 3761] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3761] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3761] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3761] write(4, "5", 1) = 1 [pid 3761] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 84.146635][ T3761] FAULT_INJECTION: forcing a failure. [ 84.146635][ T3761] name failslab, interval 1, probability 0, space 0, times 0 [ 84.159277][ T3761] CPU: 1 PID: 3761 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 84.169595][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.179665][ T3761] Call Trace: [ 84.182933][ T3761] [ 84.185851][ T3761] dump_stack_lvl+0xcd/0x134 [ 84.190457][ T3761] should_fail.cold+0x5/0xa [ 84.194956][ T3761] should_failslab+0x5/0x10 [ 84.199463][ T3761] kmem_cache_alloc_trace+0x60/0x3f0 [ 84.204766][ T3761] ? ref_tracker_alloc+0x14c/0x550 [ 84.209905][ T3761] ref_tracker_alloc+0x14c/0x550 [ 84.214844][ T3761] ? ref_tracker_free+0x6b0/0x6b0 [ 84.219863][ T3761] ? lock_release+0x720/0x720 [ 84.224550][ T3761] ? do_raw_spin_lock+0x120/0x2a0 [ 84.229567][ T3761] ? rwlock_bug.part.0+0x90/0x90 [ 84.234497][ T3761] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 84.239957][ T3761] linkwatch_fire_event+0x202/0x260 [ 84.245176][ T3761] netif_carrier_off+0x96/0xb0 [ 84.249930][ T3761] __tun_detach+0xfe7/0x13e0 [ 84.254513][ T3761] tun_chr_close+0xc4/0x180 [ 84.259015][ T3761] __fput+0x277/0x9d0 [ 84.263000][ T3761] ? __tun_detach+0x13e0/0x13e0 [ 84.267857][ T3761] task_work_run+0xdd/0x1a0 [ 84.272370][ T3761] ptrace_notify+0x114/0x140 [ 84.276963][ T3761] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 84.283220][ T3761] syscall_exit_to_user_mode+0x9/0x60 [ 84.288605][ T3761] do_syscall_64+0x42/0xb0 [ 84.293026][ T3761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.298930][ T3761] RIP: 0033:0x7fc6cd2767a3 [ 84.303911][ T3761] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 84.323536][ T3761] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 84.332057][ T3761] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3761] close(3) = 0 [pid 3761] close(4) = 0 [pid 3761] close(5) = -1 EBADF (Bad file descriptor) [pid 3761] close(6) = -1 EBADF (Bad file descriptor) [pid 3761] close(7) = -1 EBADF (Bad file descriptor) [pid 3761] close(8) = -1 EBADF (Bad file descriptor) [pid 3761] close(9) = -1 EBADF (Bad file descriptor) [pid 3761] close(10) = -1 EBADF (Bad file descriptor) [pid 3761] close(11) = -1 EBADF (Bad file descriptor) [pid 3761] close(12) = -1 EBADF (Bad file descriptor) [pid 3761] close(13) = -1 EBADF (Bad file descriptor) [pid 3761] close(14) = -1 EBADF (Bad file descriptor) [pid 3761] close(15) = -1 EBADF (Bad file descriptor) [pid 3761] close(16) = -1 EBADF (Bad file descriptor) [pid 3761] close(17) = -1 EBADF (Bad file descriptor) [pid 3761] close(18) = -1 EBADF (Bad file descriptor) [pid 3761] close(19) = -1 EBADF (Bad file descriptor) [pid 3761] close(20) = -1 EBADF (Bad file descriptor) [pid 3761] close(21) = -1 EBADF (Bad file descriptor) [pid 3761] close(22) = -1 EBADF (Bad file descriptor) [pid 3761] close(23) = -1 EBADF (Bad file descriptor) [pid 3761] close(24) = -1 EBADF (Bad file descriptor) [pid 3761] close(25) = -1 EBADF (Bad file descriptor) [pid 3761] close(26) = -1 EBADF (Bad file descriptor) [pid 3761] close(27) = -1 EBADF (Bad file descriptor) [pid 3761] close(28) = -1 EBADF (Bad file descriptor) [pid 3761] close(29) = -1 EBADF (Bad file descriptor) [pid 3761] exit_group(0) = ? [pid 3761] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3762 attached , child_tidptr=0x5555570bd5d0) = 138 [pid 3762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3762] setpgid(0, 0) = 0 [pid 3762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3762] write(3, "1000", 4) = 4 [pid 3762] close(3) = 0 [pid 3762] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 84.340133][ T3761] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 84.348116][ T3761] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 84.356103][ T3761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 84.364089][ T3761] R13: 00000000000f4240 R14: 0000000000014772 R15: 00007ffdc49a5924 [ 84.372358][ T3761] [pid 3762] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3762] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3762] write(4, "5", 1) = 1 [ 84.431755][ T3762] FAULT_INJECTION: forcing a failure. [ 84.431755][ T3762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.445041][ T3762] CPU: 0 PID: 3762 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 84.455196][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.465246][ T3762] Call Trace: [ 84.468522][ T3762] [ 84.471435][ T3762] dump_stack_lvl+0xcd/0x134 [ 84.476029][ T3762] should_fail.cold+0x5/0xa [ 84.480524][ T3762] prepare_alloc_pages+0x17b/0x570 [ 84.485650][ T3762] __alloc_pages+0x12f/0x500 [ 84.490238][ T3762] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 84.496990][ T3762] ? ___slab_alloc+0x47e/0xf20 [ 84.501737][ T3762] alloc_pages+0x1aa/0x310 [ 84.506133][ T3762] ? mark_held_locks+0x9f/0xe0 [ 84.510881][ T3762] allocate_slab+0x26c/0x3c0 [ 84.515456][ T3762] ___slab_alloc+0x8df/0xf20 [ 84.520029][ T3762] ? napi_skb_cache_get+0xeb/0x170 [ 84.525125][ T3762] ? mark_held_locks+0x9f/0xe0 [ 84.529878][ T3762] kmem_cache_alloc_bulk+0x21c/0x720 [ 84.535166][ T3762] napi_skb_cache_get+0xeb/0x170 [ 84.540101][ T3762] __alloc_skb+0x9b/0x340 [ 84.544410][ T3762] ? __lock_acquire+0xbca/0x56c0 [ 84.549334][ T3762] __napi_alloc_skb+0x70/0x310 [ 84.554095][ T3762] napi_get_frags+0x5e/0x140 [ 84.558666][ T3762] tun_get_user+0xa07/0x3b00 [ 84.563249][ T3762] ? tun_build_skb+0x1170/0x1170 [ 84.568174][ T3762] ? lock_downgrade+0x6e0/0x6e0 [ 84.573020][ T3762] ? find_held_lock+0x2d/0x110 [ 84.577781][ T3762] tun_chr_write_iter+0xdb/0x200 [ 84.582800][ T3762] do_iter_readv_writev+0x3d1/0x640 [ 84.587981][ T3762] ? new_sync_write+0x560/0x560 [ 84.592915][ T3762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.599136][ T3762] ? security_file_permission+0xab/0xd0 [ 84.604667][ T3762] do_iter_write+0x182/0x700 [ 84.609454][ T3762] ? import_iovec+0x10c/0x150 [ 84.614142][ T3762] vfs_writev+0x1aa/0x630 [ 84.618480][ T3762] ? vfs_iter_write+0xa0/0xa0 [ 84.623139][ T3762] ? do_raw_spin_lock+0x120/0x2a0 [ 84.628161][ T3762] ? rwlock_bug.part.0+0x90/0x90 [ 84.633080][ T3762] ? _raw_spin_lock_irq+0x41/0x50 [ 84.638181][ T3762] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 84.644427][ T3762] ? find_held_lock+0x2d/0x110 [ 84.649201][ T3762] ? ptrace_notify+0xfa/0x140 [ 84.653893][ T3762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.660126][ T3762] ? __fget_light+0x20f/0x270 [ 84.664794][ T3762] do_writev+0x133/0x2f0 [ 84.669021][ T3762] ? vfs_writev+0x630/0x630 [ 84.673590][ T3762] ? lockdep_hardirqs_on+0x79/0x100 [ 84.678784][ T3762] ? _raw_spin_unlock_irq+0x2a/0x40 [ 84.683987][ T3762] ? ptrace_notify+0xfa/0x140 [ 84.688750][ T3762] do_syscall_64+0x35/0xb0 [ 84.693155][ T3762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.699045][ T3762] RIP: 0033:0x7fc6cd2b4c39 [ 84.703442][ T3762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 84.723049][ T3762] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3762] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 84.731468][ T3762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 84.739507][ T3762] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 84.747459][ T3762] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 84.755508][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 84.763469][ T3762] R13: 00000000000f4240 R14: 0000000000014893 R15: 00007ffdc49a5924 [ 84.771457][ T3762] [pid 3762] close(3) = 0 [pid 3762] close(4) = 0 [pid 3762] close(5) = -1 EBADF (Bad file descriptor) [pid 3762] close(6) = -1 EBADF (Bad file descriptor) [pid 3762] close(7) = -1 EBADF (Bad file descriptor) [pid 3762] close(8) = -1 EBADF (Bad file descriptor) [pid 3762] close(9) = -1 EBADF (Bad file descriptor) [pid 3762] close(10) = -1 EBADF (Bad file descriptor) [pid 3762] close(11) = -1 EBADF (Bad file descriptor) [pid 3762] close(12) = -1 EBADF (Bad file descriptor) [pid 3762] close(13) = -1 EBADF (Bad file descriptor) [pid 3762] close(14) = -1 EBADF (Bad file descriptor) [pid 3762] close(15) = -1 EBADF (Bad file descriptor) [pid 3762] close(16) = -1 EBADF (Bad file descriptor) [pid 3762] close(17) = -1 EBADF (Bad file descriptor) [pid 3762] close(18) = -1 EBADF (Bad file descriptor) [pid 3762] close(19) = -1 EBADF (Bad file descriptor) [pid 3762] close(20) = -1 EBADF (Bad file descriptor) [pid 3762] close(21) = -1 EBADF (Bad file descriptor) [pid 3762] close(22) = -1 EBADF (Bad file descriptor) [pid 3762] close(23) = -1 EBADF (Bad file descriptor) [pid 3762] close(24) = -1 EBADF (Bad file descriptor) [pid 3762] close(25) = -1 EBADF (Bad file descriptor) [pid 3762] close(26) = -1 EBADF (Bad file descriptor) [pid 3762] close(27) = -1 EBADF (Bad file descriptor) [pid 3762] close(28) = -1 EBADF (Bad file descriptor) [pid 3762] close(29) = -1 EBADF (Bad file descriptor) [pid 3762] exit_group(0) = ? [pid 3762] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=138, si_uid=0, si_status=0, si_utime=0, si_stime=34} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3763 attached , child_tidptr=0x5555570bd5d0) = 139 [pid 3763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3763] setpgid(0, 0) = 0 [pid 3763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3763] write(3, "1000", 4) = 4 [pid 3763] close(3) = 0 [pid 3763] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3763] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3763] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3763] write(4, "5", 1) = 1 [ 84.855896][ T3763] FAULT_INJECTION: forcing a failure. [ 84.855896][ T3763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.870612][ T3763] CPU: 1 PID: 3763 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 84.881254][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.891882][ T3763] Call Trace: [ 84.895158][ T3763] [ 84.898083][ T3763] dump_stack_lvl+0xcd/0x134 [ 84.902684][ T3763] should_fail.cold+0x5/0xa [ 84.907577][ T3763] prepare_alloc_pages+0x17b/0x570 [ 84.912693][ T3763] __alloc_pages+0x12f/0x500 [ 84.917279][ T3763] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 84.924052][ T3763] ? ___slab_alloc+0x47e/0xf20 [ 84.928828][ T3763] alloc_pages+0x1aa/0x310 [ 84.933243][ T3763] ? mark_held_locks+0x9f/0xe0 [ 84.938011][ T3763] allocate_slab+0x26c/0x3c0 [ 84.942691][ T3763] ___slab_alloc+0x8df/0xf20 [ 84.947279][ T3763] ? napi_skb_cache_get+0xeb/0x170 [ 84.952395][ T3763] ? mark_held_locks+0x9f/0xe0 [ 84.957158][ T3763] kmem_cache_alloc_bulk+0x21c/0x720 [ 84.962467][ T3763] napi_skb_cache_get+0xeb/0x170 [ 84.967409][ T3763] __alloc_skb+0x9b/0x340 [ 84.971739][ T3763] ? __lock_acquire+0xbca/0x56c0 [ 84.976677][ T3763] __napi_alloc_skb+0x70/0x310 [ 84.981446][ T3763] napi_get_frags+0x5e/0x140 [ 84.986033][ T3763] tun_get_user+0xa07/0x3b00 [ 84.990629][ T3763] ? tun_build_skb+0x1170/0x1170 [ 84.995562][ T3763] ? lock_downgrade+0x6e0/0x6e0 [ 85.000408][ T3763] ? find_held_lock+0x2d/0x110 [ 85.005198][ T3763] tun_chr_write_iter+0xdb/0x200 [ 85.010218][ T3763] do_iter_readv_writev+0x3d1/0x640 [ 85.015405][ T3763] ? new_sync_write+0x560/0x560 [ 85.020245][ T3763] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 85.026474][ T3763] ? security_file_permission+0xab/0xd0 [ 85.032015][ T3763] do_iter_write+0x182/0x700 [ 85.036597][ T3763] ? import_iovec+0x10c/0x150 [ 85.041262][ T3763] vfs_writev+0x1aa/0x630 [ 85.045577][ T3763] ? vfs_iter_write+0xa0/0xa0 [ 85.050236][ T3763] ? do_raw_spin_lock+0x120/0x2a0 [ 85.055248][ T3763] ? rwlock_bug.part.0+0x90/0x90 [ 85.060174][ T3763] ? _raw_spin_lock_irq+0x41/0x50 [ 85.065194][ T3763] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 85.071479][ T3763] ? find_held_lock+0x2d/0x110 [ 85.076253][ T3763] ? ptrace_notify+0xfa/0x140 [ 85.080934][ T3763] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 85.087166][ T3763] ? __fget_light+0x20f/0x270 [ 85.091839][ T3763] do_writev+0x133/0x2f0 [ 85.096068][ T3763] ? vfs_writev+0x630/0x630 [ 85.100553][ T3763] ? lockdep_hardirqs_on+0x79/0x100 [ 85.105755][ T3763] ? _raw_spin_unlock_irq+0x2a/0x40 [ 85.110944][ T3763] ? ptrace_notify+0xfa/0x140 [ 85.115622][ T3763] do_syscall_64+0x35/0xb0 [ 85.120035][ T3763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.125929][ T3763] RIP: 0033:0x7fc6cd2b4c39 [ 85.130331][ T3763] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3763] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [pid 3763] close(3) = 0 [pid 3763] close(4) = 0 [pid 3763] close(5) = -1 EBADF (Bad file descriptor) [pid 3763] close(6) = -1 EBADF (Bad file descriptor) [pid 3763] close(7) = -1 EBADF (Bad file descriptor) [pid 3763] close(8) = -1 EBADF (Bad file descriptor) [pid 3763] close(9) = -1 EBADF (Bad file descriptor) [pid 3763] close(10) = -1 EBADF (Bad file descriptor) [pid 3763] close(11) = -1 EBADF (Bad file descriptor) [pid 3763] close(12) = -1 EBADF (Bad file descriptor) [pid 3763] close(13) = -1 EBADF (Bad file descriptor) [pid 3763] close(14) = -1 EBADF (Bad file descriptor) [pid 3763] close(15) = -1 EBADF (Bad file descriptor) [pid 3763] close(16) = -1 EBADF (Bad file descriptor) [pid 3763] close(17) = -1 EBADF (Bad file descriptor) [pid 3763] close(18) = -1 EBADF (Bad file descriptor) [pid 3763] close(19) = -1 EBADF (Bad file descriptor) [pid 3763] close(20) = -1 EBADF (Bad file descriptor) [pid 3763] close(21) = -1 EBADF (Bad file descriptor) [pid 3763] close(22) = -1 EBADF (Bad file descriptor) [pid 3763] close(23) = -1 EBADF (Bad file descriptor) [pid 3763] close(24) = -1 EBADF (Bad file descriptor) [pid 3763] close(25) = -1 EBADF (Bad file descriptor) [pid 3763] close(26) = -1 EBADF (Bad file descriptor) [pid 3763] close(27) = -1 EBADF (Bad file descriptor) [pid 3763] close(28) = -1 EBADF (Bad file descriptor) [pid 3763] close(29) = -1 EBADF (Bad file descriptor) [pid 3763] exit_group(0) = ? [pid 3763] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=139, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3765 attached , child_tidptr=0x5555570bd5d0) = 140 [pid 3765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3765] setpgid(0, 0) = 0 [ 85.149935][ T3763] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 85.158431][ T3763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 85.166566][ T3763] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 85.174522][ T3763] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 85.182481][ T3763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 85.190441][ T3763] R13: 00000000000f4240 R14: 00000000000149b2 R15: 00007ffdc49a5924 [ 85.198419][ T3763] [pid 3765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3765] write(3, "1000", 4) = 4 [pid 3765] close(3) = 0 [pid 3765] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3765] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3765] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3765] write(4, "5", 1) = 1 [pid 3765] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 85.246416][ T3765] FAULT_INJECTION: forcing a failure. [ 85.246416][ T3765] name failslab, interval 1, probability 0, space 0, times 0 [ 85.259217][ T3765] CPU: 0 PID: 3765 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 85.269797][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.279855][ T3765] Call Trace: [ 85.283136][ T3765] [ 85.286049][ T3765] dump_stack_lvl+0xcd/0x134 [ 85.290636][ T3765] should_fail.cold+0x5/0xa [ 85.295144][ T3765] should_failslab+0x5/0x10 [ 85.299630][ T3765] kmem_cache_alloc_trace+0x60/0x3f0 [ 85.304911][ T3765] ? ref_tracker_alloc+0x14c/0x550 [ 85.310043][ T3765] ref_tracker_alloc+0x14c/0x550 [ 85.315003][ T3765] ? ref_tracker_free+0x6b0/0x6b0 [ 85.320015][ T3765] ? lock_release+0x720/0x720 [ 85.324688][ T3765] ? do_raw_spin_lock+0x120/0x2a0 [ 85.329703][ T3765] ? rwlock_bug.part.0+0x90/0x90 [ 85.334633][ T3765] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 85.340003][ T3765] linkwatch_fire_event+0x202/0x260 [ 85.345202][ T3765] netif_carrier_off+0x96/0xb0 [ 85.349959][ T3765] __tun_detach+0xfe7/0x13e0 [ 85.354738][ T3765] tun_chr_close+0xc4/0x180 [ 85.359237][ T3765] __fput+0x277/0x9d0 [ 85.363211][ T3765] ? __tun_detach+0x13e0/0x13e0 [ 85.368224][ T3765] task_work_run+0xdd/0x1a0 [ 85.372720][ T3765] ptrace_notify+0x114/0x140 [ 85.377297][ T3765] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 85.383704][ T3765] syscall_exit_to_user_mode+0x9/0x60 [ 85.389081][ T3765] do_syscall_64+0x42/0xb0 [ 85.394103][ T3765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.400004][ T3765] RIP: 0033:0x7fc6cd2767a3 [ 85.404407][ T3765] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 85.424011][ T3765] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 85.432782][ T3765] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3765] close(3) = 0 [pid 3765] close(4) = 0 [pid 3765] close(5) = -1 EBADF (Bad file descriptor) [ 85.440848][ T3765] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 85.448809][ T3765] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 85.456768][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 85.464725][ T3765] R13: 00000000000f4240 R14: 0000000000014b5a R15: 00007ffdc49a5924 [ 85.472705][ T3765] [pid 3765] close(6) = -1 EBADF (Bad file descriptor) [pid 3765] close(7) = -1 EBADF (Bad file descriptor) [pid 3765] close(8) = -1 EBADF (Bad file descriptor) [pid 3765] close(9) = -1 EBADF (Bad file descriptor) [pid 3765] close(10) = -1 EBADF (Bad file descriptor) [pid 3765] close(11) = -1 EBADF (Bad file descriptor) [pid 3765] close(12) = -1 EBADF (Bad file descriptor) [pid 3765] close(13) = -1 EBADF (Bad file descriptor) [pid 3765] close(14) = -1 EBADF (Bad file descriptor) [pid 3765] close(15) = -1 EBADF (Bad file descriptor) [pid 3765] close(16) = -1 EBADF (Bad file descriptor) [pid 3765] close(17) = -1 EBADF (Bad file descriptor) [pid 3765] close(18) = -1 EBADF (Bad file descriptor) [pid 3765] close(19) = -1 EBADF (Bad file descriptor) [pid 3765] close(20) = -1 EBADF (Bad file descriptor) [pid 3765] close(21) = -1 EBADF (Bad file descriptor) [pid 3765] close(22) = -1 EBADF (Bad file descriptor) [pid 3765] close(23) = -1 EBADF (Bad file descriptor) [pid 3765] close(24) = -1 EBADF (Bad file descriptor) [pid 3765] close(25) = -1 EBADF (Bad file descriptor) [pid 3765] close(26) = -1 EBADF (Bad file descriptor) [pid 3765] close(27) = -1 EBADF (Bad file descriptor) [pid 3765] close(28) = -1 EBADF (Bad file descriptor) [pid 3765] close(29) = -1 EBADF (Bad file descriptor) [pid 3765] exit_group(0) = ? [pid 3765] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3766 attached , child_tidptr=0x5555570bd5d0) = 141 [pid 3766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3766] setpgid(0, 0) = 0 [pid 3766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3766] write(3, "1000", 4) = 4 [pid 3766] close(3) = 0 [pid 3766] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3766] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3766] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3766] write(4, "5", 1) = 1 [pid 3766] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 85.551763][ T3766] FAULT_INJECTION: forcing a failure. [ 85.551763][ T3766] name failslab, interval 1, probability 0, space 0, times 0 [ 85.564624][ T3766] CPU: 1 PID: 3766 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 85.574942][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.584976][ T3766] Call Trace: [ 85.588238][ T3766] [ 85.591281][ T3766] dump_stack_lvl+0xcd/0x134 [ 85.595863][ T3766] should_fail.cold+0x5/0xa [ 85.600369][ T3766] should_failslab+0x5/0x10 [ 85.604867][ T3766] kmem_cache_alloc_trace+0x60/0x3f0 [ 85.610146][ T3766] ? ref_tracker_alloc+0x14c/0x550 [ 85.615244][ T3766] ref_tracker_alloc+0x14c/0x550 [ 85.620169][ T3766] ? ref_tracker_free+0x6b0/0x6b0 [ 85.625184][ T3766] ? lock_release+0x720/0x720 [ 85.629861][ T3766] ? do_raw_spin_lock+0x120/0x2a0 [ 85.634867][ T3766] ? rwlock_bug.part.0+0x90/0x90 [ 85.639785][ T3766] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 85.645146][ T3766] linkwatch_fire_event+0x202/0x260 [ 85.650330][ T3766] netif_carrier_off+0x96/0xb0 [ 85.655090][ T3766] __tun_detach+0xfe7/0x13e0 [ 85.659666][ T3766] tun_chr_close+0xc4/0x180 [ 85.664153][ T3766] __fput+0x277/0x9d0 [ 85.668136][ T3766] ? __tun_detach+0x13e0/0x13e0 [ 85.672982][ T3766] task_work_run+0xdd/0x1a0 [ 85.677473][ T3766] ptrace_notify+0x114/0x140 [ 85.682061][ T3766] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 85.688285][ T3766] syscall_exit_to_user_mode+0x9/0x60 [ 85.693638][ T3766] do_syscall_64+0x42/0xb0 [ 85.698042][ T3766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.703915][ T3766] RIP: 0033:0x7fc6cd2767a3 [ 85.708323][ T3766] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 85.727909][ T3766] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 85.736305][ T3766] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 85.744269][ T3766] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3766] close(3) = 0 [pid 3766] close(4) = 0 [pid 3766] close(5) = -1 EBADF (Bad file descriptor) [pid 3766] close(6) = -1 EBADF (Bad file descriptor) [pid 3766] close(7) = -1 EBADF (Bad file descriptor) [pid 3766] close(8) = -1 EBADF (Bad file descriptor) [pid 3766] close(9) = -1 EBADF (Bad file descriptor) [pid 3766] close(10) = -1 EBADF (Bad file descriptor) [pid 3766] close(11) = -1 EBADF (Bad file descriptor) [pid 3766] close(12) = -1 EBADF (Bad file descriptor) [pid 3766] close(13) = -1 EBADF (Bad file descriptor) [pid 3766] close(14) = -1 EBADF (Bad file descriptor) [pid 3766] close(15) = -1 EBADF (Bad file descriptor) [pid 3766] close(16) = -1 EBADF (Bad file descriptor) [pid 3766] close(17) = -1 EBADF (Bad file descriptor) [pid 3766] close(18) = -1 EBADF (Bad file descriptor) [pid 3766] close(19) = -1 EBADF (Bad file descriptor) [pid 3766] close(20) = -1 EBADF (Bad file descriptor) [pid 3766] close(21) = -1 EBADF (Bad file descriptor) [pid 3766] close(22) = -1 EBADF (Bad file descriptor) [pid 3766] close(23) = -1 EBADF (Bad file descriptor) [pid 3766] close(24) = -1 EBADF (Bad file descriptor) [pid 3766] close(25) = -1 EBADF (Bad file descriptor) [pid 3766] close(26) = -1 EBADF (Bad file descriptor) [pid 3766] close(27) = -1 EBADF (Bad file descriptor) [pid 3766] close(28) = -1 EBADF (Bad file descriptor) [pid 3766] close(29) = -1 EBADF (Bad file descriptor) [pid 3766] exit_group(0) = ? [pid 3766] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=141, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 142 ./strace-static-x86_64: Process 3767 attached [pid 3767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3767] setpgid(0, 0) = 0 [pid 3767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3767] write(3, "1000", 4) = 4 [pid 3767] close(3) = 0 [pid 3767] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3767] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3767] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3767] write(4, "5", 1) = 1 [pid 3767] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 85.752229][ T3766] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 85.760184][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 85.768145][ T3766] R13: 00000000000f4240 R14: 0000000000014cde R15: 00007ffdc49a5924 [ 85.776127][ T3766] [ 85.832612][ T3767] FAULT_INJECTION: forcing a failure. [ 85.832612][ T3767] name failslab, interval 1, probability 0, space 0, times 0 [ 85.845407][ T3767] CPU: 0 PID: 3767 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 85.855548][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.865575][ T3767] Call Trace: [ 85.868829][ T3767] [ 85.871747][ T3767] dump_stack_lvl+0xcd/0x134 [ 85.876320][ T3767] should_fail.cold+0x5/0xa [ 85.880803][ T3767] should_failslab+0x5/0x10 [ 85.885280][ T3767] kmem_cache_alloc_trace+0x60/0x3f0 [ 85.890720][ T3767] ? ref_tracker_alloc+0x14c/0x550 [ 85.895812][ T3767] ref_tracker_alloc+0x14c/0x550 [ 85.900724][ T3767] ? ref_tracker_free+0x6b0/0x6b0 [ 85.905720][ T3767] ? lock_release+0x720/0x720 [ 85.910565][ T3767] ? do_raw_spin_lock+0x120/0x2a0 [ 85.915568][ T3767] ? rwlock_bug.part.0+0x90/0x90 [ 85.920483][ T3767] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 85.925835][ T3767] linkwatch_fire_event+0x202/0x260 [ 85.931014][ T3767] netif_carrier_off+0x96/0xb0 [ 85.935754][ T3767] __tun_detach+0xfe7/0x13e0 [ 85.940326][ T3767] tun_chr_close+0xc4/0x180 [ 85.944803][ T3767] __fput+0x277/0x9d0 [ 85.948760][ T3767] ? __tun_detach+0x13e0/0x13e0 [ 85.953587][ T3767] task_work_run+0xdd/0x1a0 [ 85.958086][ T3767] ptrace_notify+0x114/0x140 [ 85.962654][ T3767] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 85.968959][ T3767] syscall_exit_to_user_mode+0x9/0x60 [ 85.974312][ T3767] do_syscall_64+0x42/0xb0 [ 85.978706][ T3767] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.984589][ T3767] RIP: 0033:0x7fc6cd2767a3 [ 85.988980][ T3767] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 86.008565][ T3767] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.017090][ T3767] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 86.025041][ T3767] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 86.033196][ T3767] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 86.041294][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 86.049366][ T3767] R13: 00000000000f4240 R14: 0000000000014e11 R15: 00007ffdc49a5924 [ 86.057353][ T3767] [pid 3767] close(3) = 0 [pid 3767] close(4) = 0 [pid 3767] close(5) = -1 EBADF (Bad file descriptor) [pid 3767] close(6) = -1 EBADF (Bad file descriptor) [pid 3767] close(7) = -1 EBADF (Bad file descriptor) [pid 3767] close(8) = -1 EBADF (Bad file descriptor) [pid 3767] close(9) = -1 EBADF (Bad file descriptor) [pid 3767] close(10) = -1 EBADF (Bad file descriptor) [pid 3767] close(11) = -1 EBADF (Bad file descriptor) [pid 3767] close(12) = -1 EBADF (Bad file descriptor) [pid 3767] close(13) = -1 EBADF (Bad file descriptor) [pid 3767] close(14) = -1 EBADF (Bad file descriptor) [pid 3767] close(15) = -1 EBADF (Bad file descriptor) [pid 3767] close(16) = -1 EBADF (Bad file descriptor) [pid 3767] close(17) = -1 EBADF (Bad file descriptor) [pid 3767] close(18) = -1 EBADF (Bad file descriptor) [pid 3767] close(19) = -1 EBADF (Bad file descriptor) [pid 3767] close(20) = -1 EBADF (Bad file descriptor) [pid 3767] close(21) = -1 EBADF (Bad file descriptor) [pid 3767] close(22) = -1 EBADF (Bad file descriptor) [pid 3767] close(23) = -1 EBADF (Bad file descriptor) [pid 3767] close(24) = -1 EBADF (Bad file descriptor) [pid 3767] close(25) = -1 EBADF (Bad file descriptor) [pid 3767] close(26) = -1 EBADF (Bad file descriptor) [pid 3767] close(27) = -1 EBADF (Bad file descriptor) [pid 3767] close(28) = -1 EBADF (Bad file descriptor) [pid 3767] close(29) = -1 EBADF (Bad file descriptor) [pid 3767] exit_group(0) = ? [pid 3767] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=142, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 143 ./strace-static-x86_64: Process 3769 attached [pid 3769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3769] setpgid(0, 0) = 0 [pid 3769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3769] write(3, "1000", 4) = 4 [pid 3769] close(3) = 0 [pid 3769] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3769] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3769] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3769] write(4, "5", 1) = 1 [pid 3769] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 86.151127][ T3769] FAULT_INJECTION: forcing a failure. [ 86.151127][ T3769] name failslab, interval 1, probability 0, space 0, times 0 [ 86.163740][ T3769] CPU: 0 PID: 3769 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 86.173973][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.184109][ T3769] Call Trace: [ 86.187376][ T3769] [ 86.190285][ T3769] dump_stack_lvl+0xcd/0x134 [ 86.194865][ T3769] should_fail.cold+0x5/0xa [ 86.199359][ T3769] should_failslab+0x5/0x10 [ 86.203942][ T3769] kmem_cache_alloc_trace+0x60/0x3f0 [ 86.209220][ T3769] ? ref_tracker_alloc+0x14c/0x550 [ 86.214354][ T3769] ref_tracker_alloc+0x14c/0x550 [ 86.219374][ T3769] ? ref_tracker_free+0x6b0/0x6b0 [ 86.224481][ T3769] ? lock_release+0x720/0x720 [ 86.229161][ T3769] ? do_raw_spin_lock+0x120/0x2a0 [ 86.234188][ T3769] ? rwlock_bug.part.0+0x90/0x90 [ 86.239124][ T3769] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 86.244502][ T3769] linkwatch_fire_event+0x202/0x260 [ 86.249726][ T3769] netif_carrier_off+0x96/0xb0 [ 86.254488][ T3769] __tun_detach+0xfe7/0x13e0 [ 86.259089][ T3769] tun_chr_close+0xc4/0x180 [ 86.263594][ T3769] __fput+0x277/0x9d0 [ 86.267569][ T3769] ? __tun_detach+0x13e0/0x13e0 [ 86.272418][ T3769] task_work_run+0xdd/0x1a0 [ 86.276915][ T3769] ptrace_notify+0x114/0x140 [ 86.281502][ T3769] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 86.287738][ T3769] syscall_exit_to_user_mode+0x9/0x60 [ 86.293112][ T3769] do_syscall_64+0x42/0xb0 [ 86.297529][ T3769] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.303508][ T3769] RIP: 0033:0x7fc6cd2767a3 [ 86.307937][ T3769] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 86.327544][ T3769] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.335958][ T3769] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 86.343916][ T3769] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3769] close(3) = 0 [pid 3769] close(4) = 0 [pid 3769] close(5) = -1 EBADF (Bad file descriptor) [pid 3769] close(6) = -1 EBADF (Bad file descriptor) [pid 3769] close(7) = -1 EBADF (Bad file descriptor) [pid 3769] close(8) = -1 EBADF (Bad file descriptor) [pid 3769] close(9) = -1 EBADF (Bad file descriptor) [pid 3769] close(10) = -1 EBADF (Bad file descriptor) [pid 3769] close(11) = -1 EBADF (Bad file descriptor) [pid 3769] close(12) = -1 EBADF (Bad file descriptor) [pid 3769] close(13) = -1 EBADF (Bad file descriptor) [pid 3769] close(14) = -1 EBADF (Bad file descriptor) [pid 3769] close(15) = -1 EBADF (Bad file descriptor) [pid 3769] close(16) = -1 EBADF (Bad file descriptor) [pid 3769] close(17) = -1 EBADF (Bad file descriptor) [pid 3769] close(18) = -1 EBADF (Bad file descriptor) [pid 3769] close(19) = -1 EBADF (Bad file descriptor) [pid 3769] close(20) = -1 EBADF (Bad file descriptor) [pid 3769] close(21) = -1 EBADF (Bad file descriptor) [pid 3769] close(22) = -1 EBADF (Bad file descriptor) [pid 3769] close(23) = -1 EBADF (Bad file descriptor) [pid 3769] close(24) = -1 EBADF (Bad file descriptor) [pid 3769] close(25) = -1 EBADF (Bad file descriptor) [pid 3769] close(26) = -1 EBADF (Bad file descriptor) [pid 3769] close(27) = -1 EBADF (Bad file descriptor) [pid 3769] close(28) = -1 EBADF (Bad file descriptor) [pid 3769] close(29) = -1 EBADF (Bad file descriptor) [pid 3769] exit_group(0) = ? [pid 3769] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3772 attached , child_tidptr=0x5555570bd5d0) = 144 [pid 3772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3772] setpgid(0, 0) = 0 [pid 3772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3772] write(3, "1000", 4) = 4 [pid 3772] close(3) = 0 [pid 3772] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 86.352055][ T3769] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 86.360211][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 86.368192][ T3769] R13: 00000000000f4240 R14: 0000000000014f2e R15: 00007ffdc49a5924 [ 86.376175][ T3769] [pid 3772] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3772] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3772] write(4, "5", 1) = 1 [pid 3772] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 86.436410][ T3772] FAULT_INJECTION: forcing a failure. [ 86.436410][ T3772] name failslab, interval 1, probability 0, space 0, times 0 [ 86.449133][ T3772] CPU: 1 PID: 3772 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 86.459365][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.469424][ T3772] Call Trace: [ 86.472705][ T3772] [ 86.475643][ T3772] dump_stack_lvl+0xcd/0x134 [ 86.480325][ T3772] should_fail.cold+0x5/0xa [ 86.484839][ T3772] should_failslab+0x5/0x10 [ 86.489351][ T3772] kmem_cache_alloc_trace+0x60/0x3f0 [ 86.494634][ T3772] ? ref_tracker_alloc+0x14c/0x550 [ 86.499746][ T3772] ref_tracker_alloc+0x14c/0x550 [ 86.504682][ T3772] ? ref_tracker_free+0x6b0/0x6b0 [ 86.509705][ T3772] ? lock_release+0x720/0x720 [ 86.514386][ T3772] ? do_raw_spin_lock+0x120/0x2a0 [ 86.519420][ T3772] ? rwlock_bug.part.0+0x90/0x90 [ 86.524440][ T3772] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 86.529813][ T3772] linkwatch_fire_event+0x202/0x260 [ 86.535006][ T3772] netif_carrier_off+0x96/0xb0 [ 86.539764][ T3772] __tun_detach+0xfe7/0x13e0 [ 86.544389][ T3772] tun_chr_close+0xc4/0x180 [ 86.549091][ T3772] __fput+0x277/0x9d0 [ 86.553057][ T3772] ? __tun_detach+0x13e0/0x13e0 [ 86.557895][ T3772] task_work_run+0xdd/0x1a0 [ 86.562391][ T3772] ptrace_notify+0x114/0x140 [ 86.566969][ T3772] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 86.573200][ T3772] syscall_exit_to_user_mode+0x9/0x60 [ 86.578569][ T3772] do_syscall_64+0x42/0xb0 [ 86.582975][ T3772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.588866][ T3772] RIP: 0033:0x7fc6cd2767a3 [ 86.593350][ T3772] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 86.613044][ T3772] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.621441][ T3772] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 86.629410][ T3772] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3772] close(3) = 0 [pid 3772] close(4) = 0 [pid 3772] close(5) = -1 EBADF (Bad file descriptor) [pid 3772] close(6) = -1 EBADF (Bad file descriptor) [pid 3772] close(7) = -1 EBADF (Bad file descriptor) [pid 3772] close(8) = -1 EBADF (Bad file descriptor) [pid 3772] close(9) = -1 EBADF (Bad file descriptor) [pid 3772] close(10) = -1 EBADF (Bad file descriptor) [pid 3772] close(11) = -1 EBADF (Bad file descriptor) [pid 3772] close(12) = -1 EBADF (Bad file descriptor) [pid 3772] close(13) = -1 EBADF (Bad file descriptor) [pid 3772] close(14) = -1 EBADF (Bad file descriptor) [pid 3772] close(15) = -1 EBADF (Bad file descriptor) [pid 3772] close(16) = -1 EBADF (Bad file descriptor) [pid 3772] close(17) = -1 EBADF (Bad file descriptor) [pid 3772] close(18) = -1 EBADF (Bad file descriptor) [pid 3772] close(19) = -1 EBADF (Bad file descriptor) [pid 3772] close(20) = -1 EBADF (Bad file descriptor) [pid 3772] close(21) = -1 EBADF (Bad file descriptor) [pid 3772] close(22) = -1 EBADF (Bad file descriptor) [pid 3772] close(23) = -1 EBADF (Bad file descriptor) [pid 3772] close(24) = -1 EBADF (Bad file descriptor) [pid 3772] close(25) = -1 EBADF (Bad file descriptor) [pid 3772] close(26) = -1 EBADF (Bad file descriptor) [pid 3772] close(27) = -1 EBADF (Bad file descriptor) [pid 3772] close(28) = -1 EBADF (Bad file descriptor) [pid 3772] close(29) = -1 EBADF (Bad file descriptor) [pid 3772] exit_group(0) = ? [pid 3772] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=144, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3773 attached , child_tidptr=0x5555570bd5d0) = 145 [pid 3773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3773] setpgid(0, 0) = 0 [pid 3773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3773] write(3, "1000", 4) = 4 [pid 3773] close(3) = 0 [pid 3773] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 86.637370][ T3772] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 86.645592][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 86.653814][ T3772] R13: 00000000000f4240 R14: 0000000000015068 R15: 00007ffdc49a5924 [ 86.661773][ T3772] [pid 3773] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3773] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3773] write(4, "5", 1) = 1 [pid 3773] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 86.722594][ T3773] FAULT_INJECTION: forcing a failure. [ 86.722594][ T3773] name failslab, interval 1, probability 0, space 0, times 0 [ 86.735181][ T3773] CPU: 0 PID: 3773 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 86.745321][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.755356][ T3773] Call Trace: [ 86.758619][ T3773] [ 86.761528][ T3773] dump_stack_lvl+0xcd/0x134 [ 86.766108][ T3773] should_fail.cold+0x5/0xa [ 86.770608][ T3773] should_failslab+0x5/0x10 [ 86.775091][ T3773] kmem_cache_alloc_trace+0x60/0x3f0 [ 86.780359][ T3773] ? ref_tracker_alloc+0x14c/0x550 [ 86.785475][ T3773] ref_tracker_alloc+0x14c/0x550 [ 86.790395][ T3773] ? ref_tracker_free+0x6b0/0x6b0 [ 86.795410][ T3773] ? lock_release+0x720/0x720 [ 86.800085][ T3773] ? do_raw_spin_lock+0x120/0x2a0 [ 86.805109][ T3773] ? rwlock_bug.part.0+0x90/0x90 [ 86.810043][ T3773] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 86.815426][ T3773] linkwatch_fire_event+0x202/0x260 [ 86.820623][ T3773] netif_carrier_off+0x96/0xb0 [ 86.825370][ T3773] __tun_detach+0xfe7/0x13e0 [ 86.829949][ T3773] tun_chr_close+0xc4/0x180 [ 86.834434][ T3773] __fput+0x277/0x9d0 [ 86.838398][ T3773] ? __tun_detach+0x13e0/0x13e0 [ 86.843407][ T3773] task_work_run+0xdd/0x1a0 [ 86.847893][ T3773] ptrace_notify+0x114/0x140 [ 86.852469][ T3773] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 86.858697][ T3773] syscall_exit_to_user_mode+0x9/0x60 [ 86.864070][ T3773] do_syscall_64+0x42/0xb0 [ 86.868491][ T3773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.874374][ T3773] RIP: 0033:0x7fc6cd2767a3 [ 86.878777][ T3773] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 86.898367][ T3773] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 86.906938][ T3773] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 86.914887][ T3773] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3773] close(3) = 0 [pid 3773] close(4) = 0 [pid 3773] close(5) = -1 EBADF (Bad file descriptor) [pid 3773] close(6) = -1 EBADF (Bad file descriptor) [pid 3773] close(7) = -1 EBADF (Bad file descriptor) [pid 3773] close(8) = -1 EBADF (Bad file descriptor) [pid 3773] close(9) = -1 EBADF (Bad file descriptor) [pid 3773] close(10) = -1 EBADF (Bad file descriptor) [pid 3773] close(11) = -1 EBADF (Bad file descriptor) [pid 3773] close(12) = -1 EBADF (Bad file descriptor) [pid 3773] close(13) = -1 EBADF (Bad file descriptor) [pid 3773] close(14) = -1 EBADF (Bad file descriptor) [pid 3773] close(15) = -1 EBADF (Bad file descriptor) [pid 3773] close(16) = -1 EBADF (Bad file descriptor) [pid 3773] close(17) = -1 EBADF (Bad file descriptor) [pid 3773] close(18) = -1 EBADF (Bad file descriptor) [pid 3773] close(19) = -1 EBADF (Bad file descriptor) [ 86.922858][ T3773] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 86.930814][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 86.938768][ T3773] R13: 00000000000f4240 R14: 0000000000015185 R15: 00007ffdc49a5924 [ 86.946731][ T3773] [pid 3773] close(20) = -1 EBADF (Bad file descriptor) [pid 3773] close(21) = -1 EBADF (Bad file descriptor) [pid 3773] close(22) = -1 EBADF (Bad file descriptor) [pid 3773] close(23) = -1 EBADF (Bad file descriptor) [pid 3773] close(24) = -1 EBADF (Bad file descriptor) [pid 3773] close(25) = -1 EBADF (Bad file descriptor) [pid 3773] close(26) = -1 EBADF (Bad file descriptor) [pid 3773] close(27) = -1 EBADF (Bad file descriptor) [pid 3773] close(28) = -1 EBADF (Bad file descriptor) [pid 3773] close(29) = -1 EBADF (Bad file descriptor) [pid 3773] exit_group(0) = ? [pid 3773] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=145, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 146 ./strace-static-x86_64: Process 3774 attached [pid 3774] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3774] setpgid(0, 0) = 0 [pid 3774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3774] write(3, "1000", 4) = 4 [pid 3774] close(3) = 0 [pid 3774] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3774] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3774] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3774] write(4, "5", 1) = 1 [pid 3774] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 87.020241][ T3774] FAULT_INJECTION: forcing a failure. [ 87.020241][ T3774] name failslab, interval 1, probability 0, space 0, times 0 [ 87.033131][ T3774] CPU: 0 PID: 3774 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 87.043274][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.053334][ T3774] Call Trace: [ 87.056600][ T3774] [ 87.059509][ T3774] dump_stack_lvl+0xcd/0x134 [ 87.064087][ T3774] should_fail.cold+0x5/0xa [ 87.068659][ T3774] should_failslab+0x5/0x10 [ 87.073139][ T3774] kmem_cache_alloc_trace+0x60/0x3f0 [ 87.078441][ T3774] ? ref_tracker_alloc+0x14c/0x550 [ 87.083551][ T3774] ref_tracker_alloc+0x14c/0x550 [ 87.088553][ T3774] ? ref_tracker_free+0x6b0/0x6b0 [ 87.093552][ T3774] ? lock_release+0x720/0x720 [ 87.098218][ T3774] ? do_raw_spin_lock+0x120/0x2a0 [ 87.103223][ T3774] ? rwlock_bug.part.0+0x90/0x90 [ 87.108143][ T3774] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 87.113514][ T3774] linkwatch_fire_event+0x202/0x260 [ 87.118707][ T3774] netif_carrier_off+0x96/0xb0 [ 87.123460][ T3774] __tun_detach+0xfe7/0x13e0 [ 87.128061][ T3774] tun_chr_close+0xc4/0x180 [ 87.132568][ T3774] __fput+0x277/0x9d0 [ 87.136548][ T3774] ? __tun_detach+0x13e0/0x13e0 [ 87.141385][ T3774] task_work_run+0xdd/0x1a0 [ 87.146234][ T3774] ptrace_notify+0x114/0x140 [ 87.150856][ T3774] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 87.157082][ T3774] syscall_exit_to_user_mode+0x9/0x60 [ 87.162439][ T3774] do_syscall_64+0x42/0xb0 [ 87.166854][ T3774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.172733][ T3774] RIP: 0033:0x7fc6cd2767a3 [ 87.177132][ T3774] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 87.196919][ T3774] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 87.205486][ T3774] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 87.213882][ T3774] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 87.221851][ T3774] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 87.229830][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 87.237802][ T3774] R13: 00000000000f4240 R14: 00000000000152a5 R15: 00007ffdc49a5924 [ 87.245770][ T3774] [pid 3774] close(3) = 0 [pid 3774] close(4) = 0 [pid 3774] close(5) = -1 EBADF (Bad file descriptor) [pid 3774] close(6) = -1 EBADF (Bad file descriptor) [pid 3774] close(7) = -1 EBADF (Bad file descriptor) [pid 3774] close(8) = -1 EBADF (Bad file descriptor) [pid 3774] close(9) = -1 EBADF (Bad file descriptor) [pid 3774] close(10) = -1 EBADF (Bad file descriptor) [pid 3774] close(11) = -1 EBADF (Bad file descriptor) [pid 3774] close(12) = -1 EBADF (Bad file descriptor) [pid 3774] close(13) = -1 EBADF (Bad file descriptor) [pid 3774] close(14) = -1 EBADF (Bad file descriptor) [pid 3774] close(15) = -1 EBADF (Bad file descriptor) [pid 3774] close(16) = -1 EBADF (Bad file descriptor) [pid 3774] close(17) = -1 EBADF (Bad file descriptor) [pid 3774] close(18) = -1 EBADF (Bad file descriptor) [pid 3774] close(19) = -1 EBADF (Bad file descriptor) [pid 3774] close(20) = -1 EBADF (Bad file descriptor) [pid 3774] close(21) = -1 EBADF (Bad file descriptor) [pid 3774] close(22) = -1 EBADF (Bad file descriptor) [pid 3774] close(23) = -1 EBADF (Bad file descriptor) [pid 3774] close(24) = -1 EBADF (Bad file descriptor) [pid 3774] close(25) = -1 EBADF (Bad file descriptor) [pid 3774] close(26) = -1 EBADF (Bad file descriptor) [pid 3774] close(27) = -1 EBADF (Bad file descriptor) [pid 3774] close(28) = -1 EBADF (Bad file descriptor) [pid 3774] close(29) = -1 EBADF (Bad file descriptor) [pid 3774] exit_group(0) = ? [pid 3774] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 147 ./strace-static-x86_64: Process 3775 attached [pid 3775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3775] setpgid(0, 0) = 0 [pid 3775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3775] write(3, "1000", 4) = 4 [pid 3775] close(3) = 0 [pid 3775] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3775] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3775] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3775] write(4, "5", 1) = 1 [pid 3775] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 87.328903][ T3775] FAULT_INJECTION: forcing a failure. [ 87.328903][ T3775] name failslab, interval 1, probability 0, space 0, times 0 [ 87.341906][ T3775] CPU: 1 PID: 3775 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 87.352073][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.362144][ T3775] Call Trace: [ 87.365433][ T3775] [ 87.368360][ T3775] dump_stack_lvl+0xcd/0x134 [ 87.372969][ T3775] should_fail.cold+0x5/0xa [ 87.377648][ T3775] should_failslab+0x5/0x10 [ 87.382168][ T3775] kmem_cache_alloc_trace+0x60/0x3f0 [ 87.387459][ T3775] ? ref_tracker_alloc+0x14c/0x550 [ 87.392578][ T3775] ref_tracker_alloc+0x14c/0x550 [ 87.397507][ T3775] ? ref_tracker_free+0x6b0/0x6b0 [ 87.402518][ T3775] ? lock_release+0x720/0x720 [ 87.407190][ T3775] ? do_raw_spin_lock+0x120/0x2a0 [ 87.412213][ T3775] ? rwlock_bug.part.0+0x90/0x90 [ 87.417184][ T3775] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 87.422577][ T3775] linkwatch_fire_event+0x202/0x260 [ 87.427793][ T3775] netif_carrier_off+0x96/0xb0 [ 87.432577][ T3775] __tun_detach+0xfe7/0x13e0 [ 87.437179][ T3775] tun_chr_close+0xc4/0x180 [ 87.441675][ T3775] __fput+0x277/0x9d0 [ 87.446145][ T3775] ? __tun_detach+0x13e0/0x13e0 [ 87.451030][ T3775] task_work_run+0xdd/0x1a0 [ 87.456134][ T3775] ptrace_notify+0x114/0x140 [ 87.460741][ T3775] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 87.466997][ T3775] syscall_exit_to_user_mode+0x9/0x60 [ 87.472389][ T3775] do_syscall_64+0x42/0xb0 [ 87.476813][ T3775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.482707][ T3775] RIP: 0033:0x7fc6cd2767a3 [ 87.487130][ T3775] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 87.507132][ T3775] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 87.515647][ T3775] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3775] close(3) = 0 [pid 3775] close(4) = 0 [pid 3775] close(5) = -1 EBADF (Bad file descriptor) [pid 3775] close(6) = -1 EBADF (Bad file descriptor) [pid 3775] close(7) = -1 EBADF (Bad file descriptor) [pid 3775] close(8) = -1 EBADF (Bad file descriptor) [pid 3775] close(9) = -1 EBADF (Bad file descriptor) [pid 3775] close(10) = -1 EBADF (Bad file descriptor) [pid 3775] close(11) = -1 EBADF (Bad file descriptor) [pid 3775] close(12) = -1 EBADF (Bad file descriptor) [pid 3775] close(13) = -1 EBADF (Bad file descriptor) [pid 3775] close(14) = -1 EBADF (Bad file descriptor) [pid 3775] close(15) = -1 EBADF (Bad file descriptor) [pid 3775] close(16) = -1 EBADF (Bad file descriptor) [pid 3775] close(17) = -1 EBADF (Bad file descriptor) [pid 3775] close(18) = -1 EBADF (Bad file descriptor) [pid 3775] close(19) = -1 EBADF (Bad file descriptor) [pid 3775] close(20) = -1 EBADF (Bad file descriptor) [pid 3775] close(21) = -1 EBADF (Bad file descriptor) [pid 3775] close(22) = -1 EBADF (Bad file descriptor) [pid 3775] close(23) = -1 EBADF (Bad file descriptor) [pid 3775] close(24) = -1 EBADF (Bad file descriptor) [pid 3775] close(25) = -1 EBADF (Bad file descriptor) [pid 3775] close(26) = -1 EBADF (Bad file descriptor) [pid 3775] close(27) = -1 EBADF (Bad file descriptor) [pid 3775] close(28) = -1 EBADF (Bad file descriptor) [pid 3775] close(29) = -1 EBADF (Bad file descriptor) [pid 3775] exit_group(0) = ? [pid 3775] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=147, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 148 ./strace-static-x86_64: Process 3776 attached [pid 3776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3776] setpgid(0, 0) = 0 [pid 3776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3776] write(3, "1000", 4) = 4 [pid 3776] close(3) = 0 [pid 3776] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3776] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3776] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3776] write(4, "5", 1) = 1 [pid 3776] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 87.523730][ T3775] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 87.531696][ T3775] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 87.539732][ T3775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 87.547697][ T3775] R13: 00000000000f4240 R14: 00000000000153cc R15: 00007ffdc49a5924 [ 87.555685][ T3775] [ 87.610693][ T3776] FAULT_INJECTION: forcing a failure. [ 87.610693][ T3776] name failslab, interval 1, probability 0, space 0, times 0 [ 87.623311][ T3776] CPU: 0 PID: 3776 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 87.633463][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.643514][ T3776] Call Trace: [ 87.646992][ T3776] [ 87.650113][ T3776] dump_stack_lvl+0xcd/0x134 [ 87.654700][ T3776] should_fail.cold+0x5/0xa [ 87.659194][ T3776] should_failslab+0x5/0x10 [ 87.663707][ T3776] kmem_cache_alloc_trace+0x60/0x3f0 [ 87.668989][ T3776] ? ref_tracker_alloc+0x14c/0x550 [ 87.674098][ T3776] ref_tracker_alloc+0x14c/0x550 [ 87.679040][ T3776] ? ref_tracker_free+0x6b0/0x6b0 [ 87.684053][ T3776] ? lock_release+0x720/0x720 [ 87.688740][ T3776] ? do_raw_spin_lock+0x120/0x2a0 [ 87.693759][ T3776] ? rwlock_bug.part.0+0x90/0x90 [ 87.699136][ T3776] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 87.704517][ T3776] linkwatch_fire_event+0x202/0x260 [ 87.709748][ T3776] netif_carrier_off+0x96/0xb0 [ 87.714525][ T3776] __tun_detach+0xfe7/0x13e0 [ 87.719148][ T3776] tun_chr_close+0xc4/0x180 [ 87.723658][ T3776] __fput+0x277/0x9d0 [ 87.727653][ T3776] ? __tun_detach+0x13e0/0x13e0 [ 87.732535][ T3776] task_work_run+0xdd/0x1a0 [ 87.737054][ T3776] ptrace_notify+0x114/0x140 [ 87.741672][ T3776] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 87.747925][ T3776] syscall_exit_to_user_mode+0x9/0x60 [ 87.753409][ T3776] do_syscall_64+0x42/0xb0 [ 87.757826][ T3776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.763724][ T3776] RIP: 0033:0x7fc6cd2767a3 [ 87.768151][ T3776] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 87.787775][ T3776] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 87.796217][ T3776] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3776] close(3) = 0 [pid 3776] close(4) = 0 [pid 3776] close(5) = -1 EBADF (Bad file descriptor) [pid 3776] close(6) = -1 EBADF (Bad file descriptor) [pid 3776] close(7) = -1 EBADF (Bad file descriptor) [pid 3776] close(8) = -1 EBADF (Bad file descriptor) [pid 3776] close(9) = -1 EBADF (Bad file descriptor) [pid 3776] close(10) = -1 EBADF (Bad file descriptor) [pid 3776] close(11) = -1 EBADF (Bad file descriptor) [pid 3776] close(12) = -1 EBADF (Bad file descriptor) [pid 3776] close(13) = -1 EBADF (Bad file descriptor) [pid 3776] close(14) = -1 EBADF (Bad file descriptor) [pid 3776] close(15) = -1 EBADF (Bad file descriptor) [pid 3776] close(16) = -1 EBADF (Bad file descriptor) [pid 3776] close(17) = -1 EBADF (Bad file descriptor) [pid 3776] close(18) = -1 EBADF (Bad file descriptor) [pid 3776] close(19) = -1 EBADF (Bad file descriptor) [pid 3776] close(20) = -1 EBADF (Bad file descriptor) [pid 3776] close(21) = -1 EBADF (Bad file descriptor) [pid 3776] close(22) = -1 EBADF (Bad file descriptor) [pid 3776] close(23) = -1 EBADF (Bad file descriptor) [pid 3776] close(24) = -1 EBADF (Bad file descriptor) [pid 3776] close(25) = -1 EBADF (Bad file descriptor) [pid 3776] close(26) = -1 EBADF (Bad file descriptor) [pid 3776] close(27) = -1 EBADF (Bad file descriptor) [pid 3776] close(28) = -1 EBADF (Bad file descriptor) [pid 3776] close(29) = -1 EBADF (Bad file descriptor) [pid 3776] exit_group(0) = ? [pid 3776] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=148, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3777 attached [pid 3777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3777] setpgid(0, 0) = 0 [ 87.804185][ T3776] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 87.812153][ T3776] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 87.820992][ T3776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 87.828982][ T3776] R13: 00000000000f4240 R14: 0000000000015503 R15: 00007ffdc49a5924 [ 87.836976][ T3776] [pid 3777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3777] write(3, "1000", 4) = 4 [pid 3777] close(3) = 0 [pid 3777] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3777] ioctl(3, TUNSETIFF, 0x20000000 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 149 [pid 3777] <... ioctl resumed>) = 0 [pid 3777] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3777] write(4, "5", 1) = 1 [pid 3777] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 87.898040][ T3777] FAULT_INJECTION: forcing a failure. [ 87.898040][ T3777] name failslab, interval 1, probability 0, space 0, times 0 [ 87.910762][ T3777] CPU: 0 PID: 3777 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 87.920926][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.931070][ T3777] Call Trace: [ 87.934344][ T3777] [ 87.937275][ T3777] dump_stack_lvl+0xcd/0x134 [ 87.941889][ T3777] should_fail.cold+0x5/0xa [ 87.946398][ T3777] should_failslab+0x5/0x10 [ 87.950897][ T3777] kmem_cache_alloc_trace+0x60/0x3f0 [ 87.956182][ T3777] ? ref_tracker_alloc+0x14c/0x550 [ 87.961309][ T3777] ref_tracker_alloc+0x14c/0x550 [ 87.966241][ T3777] ? ref_tracker_free+0x6b0/0x6b0 [ 87.971262][ T3777] ? lock_release+0x720/0x720 [ 87.975931][ T3777] ? do_raw_spin_lock+0x120/0x2a0 [ 87.980948][ T3777] ? rwlock_bug.part.0+0x90/0x90 [ 87.985878][ T3777] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 87.991244][ T3777] linkwatch_fire_event+0x202/0x260 [ 87.996438][ T3777] netif_carrier_off+0x96/0xb0 [ 88.001191][ T3777] __tun_detach+0xfe7/0x13e0 [ 88.005779][ T3777] tun_chr_close+0xc4/0x180 [ 88.010271][ T3777] __fput+0x277/0x9d0 [ 88.014240][ T3777] ? __tun_detach+0x13e0/0x13e0 [ 88.019083][ T3777] task_work_run+0xdd/0x1a0 [ 88.023581][ T3777] ptrace_notify+0x114/0x140 [ 88.028165][ T3777] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 88.034401][ T3777] syscall_exit_to_user_mode+0x9/0x60 [ 88.039768][ T3777] do_syscall_64+0x42/0xb0 [ 88.044183][ T3777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.050073][ T3777] RIP: 0033:0x7fc6cd2767a3 [ 88.054478][ T3777] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 88.074084][ T3777] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.082496][ T3777] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 88.090458][ T3777] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3777] close(3) = 0 [pid 3777] close(4) = 0 [pid 3777] close(5) = -1 EBADF (Bad file descriptor) [pid 3777] close(6) = -1 EBADF (Bad file descriptor) [pid 3777] close(7) = -1 EBADF (Bad file descriptor) [pid 3777] close(8) = -1 EBADF (Bad file descriptor) [pid 3777] close(9) = -1 EBADF (Bad file descriptor) [pid 3777] close(10) = -1 EBADF (Bad file descriptor) [pid 3777] close(11) = -1 EBADF (Bad file descriptor) [pid 3777] close(12) = -1 EBADF (Bad file descriptor) [pid 3777] close(13) = -1 EBADF (Bad file descriptor) [pid 3777] close(14) = -1 EBADF (Bad file descriptor) [pid 3777] close(15) = -1 EBADF (Bad file descriptor) [pid 3777] close(16) = -1 EBADF (Bad file descriptor) [pid 3777] close(17) = -1 EBADF (Bad file descriptor) [pid 3777] close(18) = -1 EBADF (Bad file descriptor) [pid 3777] close(19) = -1 EBADF (Bad file descriptor) [pid 3777] close(20) = -1 EBADF (Bad file descriptor) [pid 3777] close(21) = -1 EBADF (Bad file descriptor) [pid 3777] close(22) = -1 EBADF (Bad file descriptor) [pid 3777] close(23) = -1 EBADF (Bad file descriptor) [pid 3777] close(24) = -1 EBADF (Bad file descriptor) [pid 3777] close(25) = -1 EBADF (Bad file descriptor) [pid 3777] close(26) = -1 EBADF (Bad file descriptor) [pid 3777] close(27) = -1 EBADF (Bad file descriptor) [pid 3777] close(28) = -1 EBADF (Bad file descriptor) [pid 3777] close(29) = -1 EBADF (Bad file descriptor) [pid 3777] exit_group(0) = ? [pid 3777] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 150 ./strace-static-x86_64: Process 3778 attached [pid 3778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3778] setpgid(0, 0) = 0 [pid 3778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3778] write(3, "1000", 4) = 4 [pid 3778] close(3) = 0 [pid 3778] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 88.098416][ T3777] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 88.106373][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 88.114332][ T3777] R13: 00000000000f4240 R14: 000000000001561c R15: 00007ffdc49a5924 [ 88.122310][ T3777] [pid 3778] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3778] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3778] write(4, "5", 1) = 1 [pid 3778] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 88.183910][ T3778] FAULT_INJECTION: forcing a failure. [ 88.183910][ T3778] name failslab, interval 1, probability 0, space 0, times 0 [ 88.196537][ T3778] CPU: 0 PID: 3778 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 88.206678][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.216717][ T3778] Call Trace: [ 88.219977][ T3778] [ 88.222887][ T3778] dump_stack_lvl+0xcd/0x134 [ 88.227486][ T3778] should_fail.cold+0x5/0xa [ 88.231982][ T3778] should_failslab+0x5/0x10 [ 88.236469][ T3778] kmem_cache_alloc_trace+0x60/0x3f0 [ 88.241737][ T3778] ? ref_tracker_alloc+0x14c/0x550 [ 88.246835][ T3778] ref_tracker_alloc+0x14c/0x550 [ 88.251759][ T3778] ? ref_tracker_free+0x6b0/0x6b0 [ 88.256770][ T3778] ? lock_release+0x720/0x720 [ 88.261436][ T3778] ? do_raw_spin_lock+0x120/0x2a0 [ 88.266461][ T3778] ? rwlock_bug.part.0+0x90/0x90 [ 88.271387][ T3778] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 88.276784][ T3778] linkwatch_fire_event+0x202/0x260 [ 88.281974][ T3778] netif_carrier_off+0x96/0xb0 [ 88.286744][ T3778] __tun_detach+0xfe7/0x13e0 [ 88.291330][ T3778] tun_chr_close+0xc4/0x180 [ 88.295820][ T3778] __fput+0x277/0x9d0 [ 88.299792][ T3778] ? __tun_detach+0x13e0/0x13e0 [ 88.304629][ T3778] task_work_run+0xdd/0x1a0 [ 88.309130][ T3778] ptrace_notify+0x114/0x140 [ 88.313713][ T3778] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 88.319947][ T3778] syscall_exit_to_user_mode+0x9/0x60 [ 88.325323][ T3778] do_syscall_64+0x42/0xb0 [ 88.329735][ T3778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.335625][ T3778] RIP: 0033:0x7fc6cd2767a3 [ 88.340031][ T3778] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 88.359632][ T3778] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.368033][ T3778] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 88.375991][ T3778] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 88.383949][ T3778] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 88.391916][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 88.399880][ T3778] R13: 00000000000f4240 R14: 0000000000015741 R15: 00007ffdc49a5924 [ 88.407868][ T3778] [pid 3778] close(3) = 0 [pid 3778] close(4) = 0 [pid 3778] close(5) = -1 EBADF (Bad file descriptor) [pid 3778] close(6) = -1 EBADF (Bad file descriptor) [pid 3778] close(7) = -1 EBADF (Bad file descriptor) [pid 3778] close(8) = -1 EBADF (Bad file descriptor) [pid 3778] close(9) = -1 EBADF (Bad file descriptor) [pid 3778] close(10) = -1 EBADF (Bad file descriptor) [pid 3778] close(11) = -1 EBADF (Bad file descriptor) [pid 3778] close(12) = -1 EBADF (Bad file descriptor) [pid 3778] close(13) = -1 EBADF (Bad file descriptor) [pid 3778] close(14) = -1 EBADF (Bad file descriptor) [pid 3778] close(15) = -1 EBADF (Bad file descriptor) [pid 3778] close(16) = -1 EBADF (Bad file descriptor) [pid 3778] close(17) = -1 EBADF (Bad file descriptor) [pid 3778] close(18) = -1 EBADF (Bad file descriptor) [pid 3778] close(19) = -1 EBADF (Bad file descriptor) [pid 3778] close(20) = -1 EBADF (Bad file descriptor) [pid 3778] close(21) = -1 EBADF (Bad file descriptor) [pid 3778] close(22) = -1 EBADF (Bad file descriptor) [pid 3778] close(23) = -1 EBADF (Bad file descriptor) [pid 3778] close(24) = -1 EBADF (Bad file descriptor) [pid 3778] close(25) = -1 EBADF (Bad file descriptor) [pid 3778] close(26) = -1 EBADF (Bad file descriptor) [pid 3778] close(27) = -1 EBADF (Bad file descriptor) [pid 3778] close(28) = -1 EBADF (Bad file descriptor) [pid 3778] close(29) = -1 EBADF (Bad file descriptor) [pid 3778] exit_group(0) = ? [pid 3778] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=150, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 151 ./strace-static-x86_64: Process 3779 attached [pid 3779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3779] setpgid(0, 0) = 0 [pid 3779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3779] write(3, "1000", 4) = 4 [pid 3779] close(3) = 0 [pid 3779] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3779] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3779] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3779] write(4, "5", 1) = 1 [pid 3779] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 88.502094][ T3779] FAULT_INJECTION: forcing a failure. [ 88.502094][ T3779] name failslab, interval 1, probability 0, space 0, times 0 [ 88.514710][ T3779] CPU: 0 PID: 3779 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 88.525029][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.535294][ T3779] Call Trace: [ 88.538569][ T3779] [ 88.541485][ T3779] dump_stack_lvl+0xcd/0x134 [ 88.546061][ T3779] should_fail.cold+0x5/0xa [ 88.550546][ T3779] should_failslab+0x5/0x10 [ 88.555024][ T3779] kmem_cache_alloc_trace+0x60/0x3f0 [ 88.560291][ T3779] ? ref_tracker_alloc+0x14c/0x550 [ 88.565399][ T3779] ref_tracker_alloc+0x14c/0x550 [ 88.570330][ T3779] ? ref_tracker_free+0x6b0/0x6b0 [ 88.575369][ T3779] ? lock_release+0x720/0x720 [ 88.580038][ T3779] ? do_raw_spin_lock+0x120/0x2a0 [ 88.585236][ T3779] ? rwlock_bug.part.0+0x90/0x90 [ 88.590171][ T3779] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 88.595543][ T3779] linkwatch_fire_event+0x202/0x260 [ 88.600737][ T3779] netif_carrier_off+0x96/0xb0 [ 88.605518][ T3779] __tun_detach+0xfe7/0x13e0 [ 88.610111][ T3779] tun_chr_close+0xc4/0x180 [ 88.614602][ T3779] __fput+0x277/0x9d0 [ 88.618592][ T3779] ? __tun_detach+0x13e0/0x13e0 [ 88.623443][ T3779] task_work_run+0xdd/0x1a0 [ 88.627948][ T3779] ptrace_notify+0x114/0x140 [ 88.632529][ T3779] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 88.638764][ T3779] syscall_exit_to_user_mode+0x9/0x60 [ 88.644133][ T3779] do_syscall_64+0x42/0xb0 [ 88.648541][ T3779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.654428][ T3779] RIP: 0033:0x7fc6cd2767a3 [ 88.658837][ T3779] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 88.678442][ T3779] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.686859][ T3779] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 88.694823][ T3779] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3779] close(3) = 0 [pid 3779] close(4) = 0 [pid 3779] close(5) = -1 EBADF (Bad file descriptor) [pid 3779] close(6) = -1 EBADF (Bad file descriptor) [pid 3779] close(7) = -1 EBADF (Bad file descriptor) [pid 3779] close(8) = -1 EBADF (Bad file descriptor) [pid 3779] close(9) = -1 EBADF (Bad file descriptor) [pid 3779] close(10) = -1 EBADF (Bad file descriptor) [pid 3779] close(11) = -1 EBADF (Bad file descriptor) [pid 3779] close(12) = -1 EBADF (Bad file descriptor) [pid 3779] close(13) = -1 EBADF (Bad file descriptor) [pid 3779] close(14) = -1 EBADF (Bad file descriptor) [pid 3779] close(15) = -1 EBADF (Bad file descriptor) [pid 3779] close(16) = -1 EBADF (Bad file descriptor) [pid 3779] close(17) = -1 EBADF (Bad file descriptor) [pid 3779] close(18) = -1 EBADF (Bad file descriptor) [pid 3779] close(19) = -1 EBADF (Bad file descriptor) [pid 3779] close(20) = -1 EBADF (Bad file descriptor) [pid 3779] close(21) = -1 EBADF (Bad file descriptor) [pid 3779] close(22) = -1 EBADF (Bad file descriptor) [pid 3779] close(23) = -1 EBADF (Bad file descriptor) [pid 3779] close(24) = -1 EBADF (Bad file descriptor) [pid 3779] close(25) = -1 EBADF (Bad file descriptor) [pid 3779] close(26) = -1 EBADF (Bad file descriptor) [pid 3779] close(27) = -1 EBADF (Bad file descriptor) [pid 3779] close(28) = -1 EBADF (Bad file descriptor) [pid 3779] close(29) = -1 EBADF (Bad file descriptor) [pid 3779] exit_group(0) = ? [pid 3779] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=151, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3780 attached , child_tidptr=0x5555570bd5d0) = 152 [pid 3780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3780] setpgid(0, 0) = 0 [pid 3780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3780] write(3, "1000", 4) = 4 [ 88.702787][ T3779] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 88.710773][ T3779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 88.718920][ T3779] R13: 00000000000f4240 R14: 0000000000015859 R15: 00007ffdc49a5924 [ 88.726898][ T3779] [pid 3780] close(3) = 0 [pid 3780] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3780] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3780] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3780] write(4, "5", 1) = 1 [pid 3780] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 88.791319][ T3780] FAULT_INJECTION: forcing a failure. [ 88.791319][ T3780] name failslab, interval 1, probability 0, space 0, times 0 [ 88.804175][ T3780] CPU: 0 PID: 3780 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 88.814408][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.824519][ T3780] Call Trace: [ 88.827806][ T3780] [ 88.830723][ T3780] dump_stack_lvl+0xcd/0x134 [ 88.835448][ T3780] should_fail.cold+0x5/0xa [ 88.839963][ T3780] should_failslab+0x5/0x10 [ 88.844453][ T3780] kmem_cache_alloc_trace+0x60/0x3f0 [ 88.849729][ T3780] ? ref_tracker_alloc+0x14c/0x550 [ 88.854848][ T3780] ref_tracker_alloc+0x14c/0x550 [ 88.859792][ T3780] ? ref_tracker_free+0x6b0/0x6b0 [ 88.864825][ T3780] ? lock_release+0x720/0x720 [ 88.869518][ T3780] ? do_raw_spin_lock+0x120/0x2a0 [ 88.874541][ T3780] ? rwlock_bug.part.0+0x90/0x90 [ 88.879488][ T3780] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 88.884885][ T3780] linkwatch_fire_event+0x202/0x260 [ 88.890094][ T3780] netif_carrier_off+0x96/0xb0 [ 88.894874][ T3780] __tun_detach+0xfe7/0x13e0 [ 88.899479][ T3780] tun_chr_close+0xc4/0x180 [ 88.904002][ T3780] __fput+0x277/0x9d0 [ 88.907981][ T3780] ? __tun_detach+0x13e0/0x13e0 [ 88.912840][ T3780] task_work_run+0xdd/0x1a0 [ 88.917366][ T3780] ptrace_notify+0x114/0x140 [ 88.921973][ T3780] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 88.928239][ T3780] syscall_exit_to_user_mode+0x9/0x60 [ 88.933620][ T3780] do_syscall_64+0x42/0xb0 [ 88.938051][ T3780] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.944063][ T3780] RIP: 0033:0x7fc6cd2767a3 [ 88.948481][ T3780] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 88.968085][ T3780] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.976505][ T3780] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3780] close(3) = 0 [pid 3780] close(4) = 0 [pid 3780] close(5) = -1 EBADF (Bad file descriptor) [pid 3780] close(6) = -1 EBADF (Bad file descriptor) [pid 3780] close(7) = -1 EBADF (Bad file descriptor) [pid 3780] close(8) = -1 EBADF (Bad file descriptor) [pid 3780] close(9) = -1 EBADF (Bad file descriptor) [pid 3780] close(10) = -1 EBADF (Bad file descriptor) [pid 3780] close(11) = -1 EBADF (Bad file descriptor) [pid 3780] close(12) = -1 EBADF (Bad file descriptor) [pid 3780] close(13) = -1 EBADF (Bad file descriptor) [pid 3780] close(14) = -1 EBADF (Bad file descriptor) [pid 3780] close(15) = -1 EBADF (Bad file descriptor) [pid 3780] close(16) = -1 EBADF (Bad file descriptor) [pid 3780] close(17) = -1 EBADF (Bad file descriptor) [pid 3780] close(18) = -1 EBADF (Bad file descriptor) [pid 3780] close(19) = -1 EBADF (Bad file descriptor) [pid 3780] close(20) = -1 EBADF (Bad file descriptor) [pid 3780] close(21) = -1 EBADF (Bad file descriptor) [pid 3780] close(22) = -1 EBADF (Bad file descriptor) [pid 3780] close(23) = -1 EBADF (Bad file descriptor) [pid 3780] close(24) = -1 EBADF (Bad file descriptor) [pid 3780] close(25) = -1 EBADF (Bad file descriptor) [pid 3780] close(26) = -1 EBADF (Bad file descriptor) [pid 3780] close(27) = -1 EBADF (Bad file descriptor) [pid 3780] close(28) = -1 EBADF (Bad file descriptor) [pid 3780] close(29) = -1 EBADF (Bad file descriptor) [pid 3780] exit_group(0) = ? [pid 3780] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 153 ./strace-static-x86_64: Process 3781 attached [pid 3781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3781] setpgid(0, 0) = 0 [pid 3781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3781] write(3, "1000", 4) = 4 [pid 3781] close(3) = 0 [pid 3781] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3781] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3781] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3781] write(4, "5", 1) = 1 [pid 3781] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 88.984742][ T3780] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 88.992730][ T3780] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 89.000709][ T3780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 89.008677][ T3780] R13: 00000000000f4240 R14: 000000000001599c R15: 00007ffdc49a5924 [ 89.016657][ T3780] [ 89.061971][ T3781] FAULT_INJECTION: forcing a failure. [ 89.061971][ T3781] name failslab, interval 1, probability 0, space 0, times 0 [ 89.074634][ T3781] CPU: 0 PID: 3781 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 89.085151][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.095197][ T3781] Call Trace: [ 89.098461][ T3781] [ 89.101372][ T3781] dump_stack_lvl+0xcd/0x134 [ 89.106072][ T3781] should_fail.cold+0x5/0xa [ 89.110577][ T3781] should_failslab+0x5/0x10 [ 89.115061][ T3781] kmem_cache_alloc_trace+0x60/0x3f0 [ 89.120336][ T3781] ? ref_tracker_alloc+0x14c/0x550 [ 89.125507][ T3781] ref_tracker_alloc+0x14c/0x550 [ 89.130434][ T3781] ? ref_tracker_free+0x6b0/0x6b0 [ 89.135448][ T3781] ? lock_release+0x720/0x720 [ 89.140131][ T3781] ? do_raw_spin_lock+0x120/0x2a0 [ 89.145143][ T3781] ? rwlock_bug.part.0+0x90/0x90 [ 89.150081][ T3781] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 89.155633][ T3781] linkwatch_fire_event+0x202/0x260 [ 89.160857][ T3781] netif_carrier_off+0x96/0xb0 [ 89.165624][ T3781] __tun_detach+0xfe7/0x13e0 [ 89.170236][ T3781] tun_chr_close+0xc4/0x180 [ 89.174736][ T3781] __fput+0x277/0x9d0 [ 89.178711][ T3781] ? __tun_detach+0x13e0/0x13e0 [ 89.183559][ T3781] task_work_run+0xdd/0x1a0 [ 89.188058][ T3781] ptrace_notify+0x114/0x140 [ 89.192640][ T3781] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 89.198877][ T3781] syscall_exit_to_user_mode+0x9/0x60 [ 89.204241][ T3781] do_syscall_64+0x42/0xb0 [ 89.208653][ T3781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.214710][ T3781] RIP: 0033:0x7fc6cd2767a3 [ 89.219124][ T3781] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 89.238735][ T3781] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 89.247146][ T3781] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 89.255108][ T3781] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3781] close(3) = 0 [pid 3781] close(4) = 0 [pid 3781] close(5) = -1 EBADF (Bad file descriptor) [pid 3781] close(6) = -1 EBADF (Bad file descriptor) [pid 3781] close(7) = -1 EBADF (Bad file descriptor) [pid 3781] close(8) = -1 EBADF (Bad file descriptor) [pid 3781] close(9) = -1 EBADF (Bad file descriptor) [pid 3781] close(10) = -1 EBADF (Bad file descriptor) [pid 3781] close(11) = -1 EBADF (Bad file descriptor) [pid 3781] close(12) = -1 EBADF (Bad file descriptor) [pid 3781] close(13) = -1 EBADF (Bad file descriptor) [pid 3781] close(14) = -1 EBADF (Bad file descriptor) [pid 3781] close(15) = -1 EBADF (Bad file descriptor) [pid 3781] close(16) = -1 EBADF (Bad file descriptor) [pid 3781] close(17) = -1 EBADF (Bad file descriptor) [pid 3781] close(18) = -1 EBADF (Bad file descriptor) [pid 3781] close(19) = -1 EBADF (Bad file descriptor) [pid 3781] close(20) = -1 EBADF (Bad file descriptor) [pid 3781] close(21) = -1 EBADF (Bad file descriptor) [pid 3781] close(22) = -1 EBADF (Bad file descriptor) [pid 3781] close(23) = -1 EBADF (Bad file descriptor) [pid 3781] close(24) = -1 EBADF (Bad file descriptor) [pid 3781] close(25) = -1 EBADF (Bad file descriptor) [pid 3781] close(26) = -1 EBADF (Bad file descriptor) [pid 3781] close(27) = -1 EBADF (Bad file descriptor) [pid 3781] close(28) = -1 EBADF (Bad file descriptor) [pid 3781] close(29) = -1 EBADF (Bad file descriptor) [pid 3781] exit_group(0) = ? [pid 3781] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=153, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [ 89.263072][ T3781] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 89.271039][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 89.279096][ T3781] R13: 00000000000f4240 R14: 0000000000015ab8 R15: 00007ffdc49a5924 [ 89.287069][ T3781] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 154 ./strace-static-x86_64: Process 3782 attached [pid 3782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3782] setpgid(0, 0) = 0 [pid 3782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3782] write(3, "1000", 4) = 4 [pid 3782] close(3) = 0 [pid 3782] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3782] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3782] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3782] write(4, "5", 1) = 1 [pid 3782] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 89.351250][ T3782] FAULT_INJECTION: forcing a failure. [ 89.351250][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 89.363879][ T3782] CPU: 0 PID: 3782 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 89.374046][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.384102][ T3782] Call Trace: [ 89.387389][ T3782] [ 89.390405][ T3782] dump_stack_lvl+0xcd/0x134 [ 89.395003][ T3782] should_fail.cold+0x5/0xa [ 89.399513][ T3782] should_failslab+0x5/0x10 [ 89.404022][ T3782] kmem_cache_alloc_trace+0x60/0x3f0 [ 89.409328][ T3782] ? ref_tracker_alloc+0x14c/0x550 [ 89.414450][ T3782] ref_tracker_alloc+0x14c/0x550 [ 89.419476][ T3782] ? ref_tracker_free+0x6b0/0x6b0 [ 89.424523][ T3782] ? lock_release+0x720/0x720 [ 89.429302][ T3782] ? do_raw_spin_lock+0x120/0x2a0 [ 89.434327][ T3782] ? rwlock_bug.part.0+0x90/0x90 [ 89.439258][ T3782] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 89.444656][ T3782] linkwatch_fire_event+0x202/0x260 [ 89.449858][ T3782] netif_carrier_off+0x96/0xb0 [ 89.454618][ T3782] __tun_detach+0xfe7/0x13e0 [ 89.459212][ T3782] tun_chr_close+0xc4/0x180 [ 89.463709][ T3782] __fput+0x277/0x9d0 [ 89.467682][ T3782] ? __tun_detach+0x13e0/0x13e0 [ 89.472523][ T3782] task_work_run+0xdd/0x1a0 [ 89.477022][ T3782] ptrace_notify+0x114/0x140 [ 89.481605][ T3782] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 89.488015][ T3782] syscall_exit_to_user_mode+0x9/0x60 [ 89.493382][ T3782] do_syscall_64+0x42/0xb0 [ 89.497793][ T3782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.503680][ T3782] RIP: 0033:0x7fc6cd2767a3 [ 89.508090][ T3782] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 89.527699][ T3782] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 89.536129][ T3782] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 89.544091][ T3782] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3782] close(3) = 0 [pid 3782] close(4) = 0 [pid 3782] close(5) = -1 EBADF (Bad file descriptor) [pid 3782] close(6) = -1 EBADF (Bad file descriptor) [pid 3782] close(7) = -1 EBADF (Bad file descriptor) [pid 3782] close(8) = -1 EBADF (Bad file descriptor) [pid 3782] close(9) = -1 EBADF (Bad file descriptor) [pid 3782] close(10) = -1 EBADF (Bad file descriptor) [pid 3782] close(11) = -1 EBADF (Bad file descriptor) [pid 3782] close(12) = -1 EBADF (Bad file descriptor) [pid 3782] close(13) = -1 EBADF (Bad file descriptor) [pid 3782] close(14) = -1 EBADF (Bad file descriptor) [pid 3782] close(15) = -1 EBADF (Bad file descriptor) [pid 3782] close(16) = -1 EBADF (Bad file descriptor) [pid 3782] close(17) = -1 EBADF (Bad file descriptor) [pid 3782] close(18) = -1 EBADF (Bad file descriptor) [pid 3782] close(19) = -1 EBADF (Bad file descriptor) [pid 3782] close(20) = -1 EBADF (Bad file descriptor) [pid 3782] close(21) = -1 EBADF (Bad file descriptor) [pid 3782] close(22) = -1 EBADF (Bad file descriptor) [pid 3782] close(23) = -1 EBADF (Bad file descriptor) [pid 3782] close(24) = -1 EBADF (Bad file descriptor) [pid 3782] close(25) = -1 EBADF (Bad file descriptor) [pid 3782] close(26) = -1 EBADF (Bad file descriptor) [pid 3782] close(27) = -1 EBADF (Bad file descriptor) [pid 3782] close(28) = -1 EBADF (Bad file descriptor) [pid 3782] close(29) = -1 EBADF (Bad file descriptor) [pid 3782] exit_group(0) = ? [pid 3782] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=154, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 155 ./strace-static-x86_64: Process 3784 attached [pid 3784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3784] setpgid(0, 0) = 0 [ 89.552057][ T3782] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 89.560024][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 89.567992][ T3782] R13: 00000000000f4240 R14: 0000000000015bc8 R15: 00007ffdc49a5924 [ 89.575987][ T3782] [pid 3784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3784] write(3, "1000", 4) = 4 [pid 3784] close(3) = 0 [pid 3784] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3784] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3784] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3784] write(4, "5", 1) = 1 [pid 3784] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 89.640690][ T3784] FAULT_INJECTION: forcing a failure. [ 89.640690][ T3784] name failslab, interval 1, probability 0, space 0, times 0 [ 89.653320][ T3784] CPU: 0 PID: 3784 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 89.663470][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.673522][ T3784] Call Trace: [ 89.676796][ T3784] [ 89.679725][ T3784] dump_stack_lvl+0xcd/0x134 [ 89.684333][ T3784] should_fail.cold+0x5/0xa [ 89.689105][ T3784] should_failslab+0x5/0x10 [ 89.693597][ T3784] kmem_cache_alloc_trace+0x60/0x3f0 [ 89.698872][ T3784] ? ref_tracker_alloc+0x14c/0x550 [ 89.703996][ T3784] ref_tracker_alloc+0x14c/0x550 [ 89.708940][ T3784] ? ref_tracker_free+0x6b0/0x6b0 [ 89.713968][ T3784] ? lock_release+0x720/0x720 [ 89.718644][ T3784] ? do_raw_spin_lock+0x120/0x2a0 [ 89.723677][ T3784] ? rwlock_bug.part.0+0x90/0x90 [ 89.728623][ T3784] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 89.734001][ T3784] linkwatch_fire_event+0x202/0x260 [ 89.739203][ T3784] netif_carrier_off+0x96/0xb0 [ 89.743969][ T3784] __tun_detach+0xfe7/0x13e0 [ 89.748564][ T3784] tun_chr_close+0xc4/0x180 [ 89.753069][ T3784] __fput+0x277/0x9d0 [ 89.757042][ T3784] ? __tun_detach+0x13e0/0x13e0 [ 89.761908][ T3784] task_work_run+0xdd/0x1a0 [ 89.766406][ T3784] ptrace_notify+0x114/0x140 [ 89.770988][ T3784] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 89.777237][ T3784] syscall_exit_to_user_mode+0x9/0x60 [ 89.782610][ T3784] do_syscall_64+0x42/0xb0 [ 89.787014][ T3784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.792894][ T3784] RIP: 0033:0x7fc6cd2767a3 [ 89.797294][ T3784] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 89.816893][ T3784] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 89.825309][ T3784] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 89.833277][ T3784] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3784] close(3) = 0 [pid 3784] close(4) = 0 [pid 3784] close(5) = -1 EBADF (Bad file descriptor) [pid 3784] close(6) = -1 EBADF (Bad file descriptor) [pid 3784] close(7) = -1 EBADF (Bad file descriptor) [pid 3784] close(8) = -1 EBADF (Bad file descriptor) [pid 3784] close(9) = -1 EBADF (Bad file descriptor) [pid 3784] close(10) = -1 EBADF (Bad file descriptor) [pid 3784] close(11) = -1 EBADF (Bad file descriptor) [ 89.841239][ T3784] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 89.849204][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 89.857174][ T3784] R13: 00000000000f4240 R14: 0000000000015ceb R15: 00007ffdc49a5924 [ 89.865159][ T3784] [pid 3784] close(12) = -1 EBADF (Bad file descriptor) [pid 3784] close(13) = -1 EBADF (Bad file descriptor) [pid 3784] close(14) = -1 EBADF (Bad file descriptor) [pid 3784] close(15) = -1 EBADF (Bad file descriptor) [pid 3784] close(16) = -1 EBADF (Bad file descriptor) [pid 3784] close(17) = -1 EBADF (Bad file descriptor) [pid 3784] close(18) = -1 EBADF (Bad file descriptor) [pid 3784] close(19) = -1 EBADF (Bad file descriptor) [pid 3784] close(20) = -1 EBADF (Bad file descriptor) [pid 3784] close(21) = -1 EBADF (Bad file descriptor) [pid 3784] close(22) = -1 EBADF (Bad file descriptor) [pid 3784] close(23) = -1 EBADF (Bad file descriptor) [pid 3784] close(24) = -1 EBADF (Bad file descriptor) [pid 3784] close(25) = -1 EBADF (Bad file descriptor) [pid 3784] close(26) = -1 EBADF (Bad file descriptor) [pid 3784] close(27) = -1 EBADF (Bad file descriptor) [pid 3784] close(28) = -1 EBADF (Bad file descriptor) [pid 3784] close(29) = -1 EBADF (Bad file descriptor) [pid 3784] exit_group(0) = ? [pid 3784] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 156 ./strace-static-x86_64: Process 3785 attached [pid 3785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3785] setpgid(0, 0) = 0 [pid 3785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3785] write(3, "1000", 4) = 4 [pid 3785] close(3) = 0 [pid 3785] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3785] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3785] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3785] write(4, "5", 1) = 1 [pid 3785] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 89.946000][ T3785] FAULT_INJECTION: forcing a failure. [ 89.946000][ T3785] name failslab, interval 1, probability 0, space 0, times 0 [ 89.958801][ T3785] CPU: 0 PID: 3785 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 89.968944][ T3785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.979001][ T3785] Call Trace: [ 89.982266][ T3785] [ 89.985189][ T3785] dump_stack_lvl+0xcd/0x134 [ 89.989773][ T3785] should_fail.cold+0x5/0xa [ 89.994281][ T3785] should_failslab+0x5/0x10 [ 89.998771][ T3785] kmem_cache_alloc_trace+0x60/0x3f0 [ 90.004053][ T3785] ? ref_tracker_alloc+0x14c/0x550 [ 90.009167][ T3785] ref_tracker_alloc+0x14c/0x550 [ 90.014132][ T3785] ? ref_tracker_free+0x6b0/0x6b0 [ 90.019167][ T3785] ? lock_release+0x720/0x720 [ 90.023862][ T3785] ? do_raw_spin_lock+0x120/0x2a0 [ 90.028890][ T3785] ? rwlock_bug.part.0+0x90/0x90 [ 90.033845][ T3785] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 90.039230][ T3785] linkwatch_fire_event+0x202/0x260 [ 90.044440][ T3785] netif_carrier_off+0x96/0xb0 [ 90.049215][ T3785] __tun_detach+0xfe7/0x13e0 [ 90.053811][ T3785] tun_chr_close+0xc4/0x180 [ 90.058327][ T3785] __fput+0x277/0x9d0 [ 90.062327][ T3785] ? __tun_detach+0x13e0/0x13e0 [ 90.067200][ T3785] task_work_run+0xdd/0x1a0 [ 90.071702][ T3785] ptrace_notify+0x114/0x140 [ 90.076283][ T3785] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 90.082520][ T3785] syscall_exit_to_user_mode+0x9/0x60 [ 90.087889][ T3785] do_syscall_64+0x42/0xb0 [ 90.092301][ T3785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 90.098273][ T3785] RIP: 0033:0x7fc6cd2767a3 [ 90.102678][ T3785] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 90.122283][ T3785] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 90.130928][ T3785] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 90.138908][ T3785] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3785] close(3) = 0 [pid 3785] close(4) = 0 [pid 3785] close(5) = -1 EBADF (Bad file descriptor) [pid 3785] close(6) = -1 EBADF (Bad file descriptor) [pid 3785] close(7) = -1 EBADF (Bad file descriptor) [pid 3785] close(8) = -1 EBADF (Bad file descriptor) [pid 3785] close(9) = -1 EBADF (Bad file descriptor) [pid 3785] close(10) = -1 EBADF (Bad file descriptor) [pid 3785] close(11) = -1 EBADF (Bad file descriptor) [pid 3785] close(12) = -1 EBADF (Bad file descriptor) [pid 3785] close(13) = -1 EBADF (Bad file descriptor) [pid 3785] close(14) = -1 EBADF (Bad file descriptor) [pid 3785] close(15) = -1 EBADF (Bad file descriptor) [pid 3785] close(16) = -1 EBADF (Bad file descriptor) [pid 3785] close(17) = -1 EBADF (Bad file descriptor) [pid 3785] close(18) = -1 EBADF (Bad file descriptor) [ 90.146873][ T3785] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 90.154838][ T3785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 90.162806][ T3785] R13: 00000000000f4240 R14: 0000000000015e0a R15: 00007ffdc49a5924 [ 90.170795][ T3785] [pid 3785] close(19) = -1 EBADF (Bad file descriptor) [pid 3785] close(20) = -1 EBADF (Bad file descriptor) [pid 3785] close(21) = -1 EBADF (Bad file descriptor) [pid 3785] close(22) = -1 EBADF (Bad file descriptor) [pid 3785] close(23) = -1 EBADF (Bad file descriptor) [pid 3785] close(24) = -1 EBADF (Bad file descriptor) [pid 3785] close(25) = -1 EBADF (Bad file descriptor) [pid 3785] close(26) = -1 EBADF (Bad file descriptor) [pid 3785] close(27) = -1 EBADF (Bad file descriptor) [pid 3785] close(28) = -1 EBADF (Bad file descriptor) [pid 3785] close(29) = -1 EBADF (Bad file descriptor) [pid 3785] exit_group(0) = ? [pid 3785] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=156, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 157 ./strace-static-x86_64: Process 3786 attached [pid 3786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3786] setpgid(0, 0) = 0 [pid 3786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3786] write(3, "1000", 4) = 4 [pid 3786] close(3) = 0 [pid 3786] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3786] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3786] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3786] write(4, "5", 1) = 1 [ 90.247436][ T3786] FAULT_INJECTION: forcing a failure. [ 90.247436][ T3786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.260777][ T3786] CPU: 0 PID: 3786 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 90.270975][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.281031][ T3786] Call Trace: [ 90.284321][ T3786] [ 90.287263][ T3786] dump_stack_lvl+0xcd/0x134 [ 90.291874][ T3786] should_fail.cold+0x5/0xa [ 90.296414][ T3786] prepare_alloc_pages+0x17b/0x570 [ 90.301914][ T3786] __alloc_pages+0x12f/0x500 [ 90.306525][ T3786] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 90.313331][ T3786] ? ___slab_alloc+0x47e/0xf20 [ 90.318147][ T3786] alloc_pages+0x1aa/0x310 [ 90.322573][ T3786] ? mark_held_locks+0x9f/0xe0 [ 90.327339][ T3786] allocate_slab+0x26c/0x3c0 [ 90.331930][ T3786] ___slab_alloc+0x8df/0xf20 [ 90.336512][ T3786] ? napi_skb_cache_get+0xeb/0x170 [ 90.341620][ T3786] ? mark_held_locks+0x9f/0xe0 [ 90.346390][ T3786] kmem_cache_alloc_bulk+0x21c/0x720 [ 90.351701][ T3786] napi_skb_cache_get+0xeb/0x170 [ 90.356636][ T3786] __alloc_skb+0x9b/0x340 [ 90.360990][ T3786] ? __lock_acquire+0xbca/0x56c0 [ 90.365949][ T3786] __napi_alloc_skb+0x70/0x310 [ 90.370734][ T3786] napi_get_frags+0x5e/0x140 [ 90.375317][ T3786] tun_get_user+0xa07/0x3b00 [ 90.379924][ T3786] ? tun_build_skb+0x1170/0x1170 [ 90.385084][ T3786] ? lock_downgrade+0x6e0/0x6e0 [ 90.389956][ T3786] ? find_held_lock+0x2d/0x110 [ 90.394750][ T3786] tun_chr_write_iter+0xdb/0x200 [ 90.399691][ T3786] do_iter_readv_writev+0x3d1/0x640 [ 90.404903][ T3786] ? new_sync_write+0x560/0x560 [ 90.409773][ T3786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 90.416010][ T3786] ? security_file_permission+0xab/0xd0 [ 90.421559][ T3786] do_iter_write+0x182/0x700 [ 90.426146][ T3786] ? import_iovec+0x10c/0x150 [ 90.430843][ T3786] vfs_writev+0x1aa/0x630 [ 90.435176][ T3786] ? vfs_iter_write+0xa0/0xa0 [ 90.439860][ T3786] ? do_raw_spin_lock+0x120/0x2a0 [ 90.444890][ T3786] ? rwlock_bug.part.0+0x90/0x90 [ 90.449831][ T3786] ? _raw_spin_lock_irq+0x41/0x50 [ 90.454865][ T3786] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 90.461114][ T3786] ? find_held_lock+0x2d/0x110 [ 90.465889][ T3786] ? ptrace_notify+0xfa/0x140 [ 90.470672][ T3786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 90.476924][ T3786] ? __fget_light+0x20f/0x270 [ 90.481606][ T3786] do_writev+0x133/0x2f0 [ 90.485845][ T3786] ? vfs_writev+0x630/0x630 [ 90.490340][ T3786] ? lockdep_hardirqs_on+0x79/0x100 [ 90.495531][ T3786] ? _raw_spin_unlock_irq+0x2a/0x40 [ 90.500720][ T3786] ? ptrace_notify+0xfa/0x140 [ 90.505395][ T3786] do_syscall_64+0x35/0xb0 [ 90.509810][ T3786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 90.515719][ T3786] RIP: 0033:0x7fc6cd2b4c39 [ 90.520139][ T3786] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 90.539847][ T3786] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3786] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 90.548257][ T3786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 90.556322][ T3786] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 90.564457][ T3786] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 90.572430][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 90.580403][ T3786] R13: 00000000000f4240 R14: 0000000000015f3b R15: 00007ffdc49a5924 [ 90.588663][ T3786] [pid 3786] close(3) = 0 [pid 3786] close(4) = 0 [pid 3786] close(5) = -1 EBADF (Bad file descriptor) [pid 3786] close(6) = -1 EBADF (Bad file descriptor) [pid 3786] close(7) = -1 EBADF (Bad file descriptor) [pid 3786] close(8) = -1 EBADF (Bad file descriptor) [pid 3786] close(9) = -1 EBADF (Bad file descriptor) [pid 3786] close(10) = -1 EBADF (Bad file descriptor) [pid 3786] close(11) = -1 EBADF (Bad file descriptor) [pid 3786] close(12) = -1 EBADF (Bad file descriptor) [pid 3786] close(13) = -1 EBADF (Bad file descriptor) [pid 3786] close(14) = -1 EBADF (Bad file descriptor) [pid 3786] close(15) = -1 EBADF (Bad file descriptor) [pid 3786] close(16) = -1 EBADF (Bad file descriptor) [pid 3786] close(17) = -1 EBADF (Bad file descriptor) [pid 3786] close(18) = -1 EBADF (Bad file descriptor) [pid 3786] close(19) = -1 EBADF (Bad file descriptor) [pid 3786] close(20) = -1 EBADF (Bad file descriptor) [pid 3786] close(21) = -1 EBADF (Bad file descriptor) [pid 3786] close(22) = -1 EBADF (Bad file descriptor) [pid 3786] close(23) = -1 EBADF (Bad file descriptor) [pid 3786] close(24) = -1 EBADF (Bad file descriptor) [pid 3786] close(25) = -1 EBADF (Bad file descriptor) [pid 3786] close(26) = -1 EBADF (Bad file descriptor) [pid 3786] close(27) = -1 EBADF (Bad file descriptor) [pid 3786] close(28) = -1 EBADF (Bad file descriptor) [pid 3786] close(29) = -1 EBADF (Bad file descriptor) [pid 3786] exit_group(0) = ? [pid 3786] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=157, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 158 ./strace-static-x86_64: Process 3787 attached [pid 3787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3787] setpgid(0, 0) = 0 [pid 3787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3787] write(3, "1000", 4) = 4 [pid 3787] close(3) = 0 [pid 3787] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3787] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3787] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3787] write(4, "5", 1) = 1 [pid 3787] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 90.667148][ T3787] FAULT_INJECTION: forcing a failure. [ 90.667148][ T3787] name failslab, interval 1, probability 0, space 0, times 0 [ 90.680078][ T3787] CPU: 0 PID: 3787 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 90.690497][ T3787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.700788][ T3787] Call Trace: [ 90.704063][ T3787] [ 90.706987][ T3787] dump_stack_lvl+0xcd/0x134 [ 90.711586][ T3787] should_fail.cold+0x5/0xa [ 90.716115][ T3787] should_failslab+0x5/0x10 [ 90.720613][ T3787] kmem_cache_alloc_trace+0x60/0x3f0 [ 90.725905][ T3787] ? ref_tracker_alloc+0x14c/0x550 [ 90.731035][ T3787] ref_tracker_alloc+0x14c/0x550 [ 90.735985][ T3787] ? ref_tracker_free+0x6b0/0x6b0 [ 90.741125][ T3787] ? lock_release+0x720/0x720 [ 90.745830][ T3787] ? do_raw_spin_lock+0x120/0x2a0 [ 90.750875][ T3787] ? rwlock_bug.part.0+0x90/0x90 [ 90.755841][ T3787] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 90.761223][ T3787] linkwatch_fire_event+0x202/0x260 [ 90.766445][ T3787] netif_carrier_off+0x96/0xb0 [ 90.771214][ T3787] __tun_detach+0xfe7/0x13e0 [ 90.775835][ T3787] tun_chr_close+0xc4/0x180 [ 90.780378][ T3787] __fput+0x277/0x9d0 [ 90.784361][ T3787] ? __tun_detach+0x13e0/0x13e0 [ 90.789229][ T3787] task_work_run+0xdd/0x1a0 [ 90.793764][ T3787] ptrace_notify+0x114/0x140 [ 90.798398][ T3787] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 90.804728][ T3787] syscall_exit_to_user_mode+0x9/0x60 [ 90.810107][ T3787] do_syscall_64+0x42/0xb0 [ 90.814532][ T3787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 90.820467][ T3787] RIP: 0033:0x7fc6cd2767a3 [ 90.824878][ T3787] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 90.844489][ T3787] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 90.852897][ T3787] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3787] close(3) = 0 [pid 3787] close(4) = 0 [pid 3787] close(5) = -1 EBADF (Bad file descriptor) [pid 3787] close(6) = -1 EBADF (Bad file descriptor) [pid 3787] close(7) = -1 EBADF (Bad file descriptor) [pid 3787] close(8) = -1 EBADF (Bad file descriptor) [pid 3787] close(9) = -1 EBADF (Bad file descriptor) [pid 3787] close(10) = -1 EBADF (Bad file descriptor) [pid 3787] close(11) = -1 EBADF (Bad file descriptor) [pid 3787] close(12) = -1 EBADF (Bad file descriptor) [pid 3787] close(13) = -1 EBADF (Bad file descriptor) [ 90.860887][ T3787] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 90.868853][ T3787] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 90.876850][ T3787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 90.884836][ T3787] R13: 00000000000f4240 R14: 0000000000016069 R15: 00007ffdc49a5924 [ 90.892830][ T3787] [pid 3787] close(14) = -1 EBADF (Bad file descriptor) [pid 3787] close(15) = -1 EBADF (Bad file descriptor) [pid 3787] close(16) = -1 EBADF (Bad file descriptor) [pid 3787] close(17) = -1 EBADF (Bad file descriptor) [pid 3787] close(18) = -1 EBADF (Bad file descriptor) [pid 3787] close(19) = -1 EBADF (Bad file descriptor) [pid 3787] close(20) = -1 EBADF (Bad file descriptor) [pid 3787] close(21) = -1 EBADF (Bad file descriptor) [pid 3787] close(22) = -1 EBADF (Bad file descriptor) [pid 3787] close(23) = -1 EBADF (Bad file descriptor) [pid 3787] close(24) = -1 EBADF (Bad file descriptor) [pid 3787] close(25) = -1 EBADF (Bad file descriptor) [pid 3787] close(26) = -1 EBADF (Bad file descriptor) [pid 3787] close(27) = -1 EBADF (Bad file descriptor) [pid 3787] close(28) = -1 EBADF (Bad file descriptor) [pid 3787] close(29) = -1 EBADF (Bad file descriptor) [pid 3787] exit_group(0) = ? [pid 3787] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 159 ./strace-static-x86_64: Process 3788 attached [pid 3788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3788] setpgid(0, 0) = 0 [pid 3788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3788] write(3, "1000", 4) = 4 [pid 3788] close(3) = 0 [pid 3788] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3788] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3788] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3788] write(4, "5", 1) = 1 [pid 3788] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 90.965343][ T3788] FAULT_INJECTION: forcing a failure. [ 90.965343][ T3788] name failslab, interval 1, probability 0, space 0, times 0 [ 90.978241][ T3788] CPU: 0 PID: 3788 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 90.988563][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.998834][ T3788] Call Trace: [ 91.002250][ T3788] [ 91.005350][ T3788] dump_stack_lvl+0xcd/0x134 [ 91.009971][ T3788] should_fail.cold+0x5/0xa [ 91.014508][ T3788] should_failslab+0x5/0x10 [ 91.019021][ T3788] kmem_cache_alloc_trace+0x60/0x3f0 [ 91.024455][ T3788] ? ref_tracker_alloc+0x14c/0x550 [ 91.029576][ T3788] ref_tracker_alloc+0x14c/0x550 [ 91.034521][ T3788] ? ref_tracker_free+0x6b0/0x6b0 [ 91.039531][ T3788] ? lock_release+0x720/0x720 [ 91.044195][ T3788] ? do_raw_spin_lock+0x120/0x2a0 [ 91.049206][ T3788] ? rwlock_bug.part.0+0x90/0x90 [ 91.054145][ T3788] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 91.059507][ T3788] linkwatch_fire_event+0x202/0x260 [ 91.064697][ T3788] netif_carrier_off+0x96/0xb0 [ 91.069449][ T3788] __tun_detach+0xfe7/0x13e0 [ 91.074037][ T3788] tun_chr_close+0xc4/0x180 [ 91.078526][ T3788] __fput+0x277/0x9d0 [ 91.082493][ T3788] ? __tun_detach+0x13e0/0x13e0 [ 91.087330][ T3788] task_work_run+0xdd/0x1a0 [ 91.091826][ T3788] ptrace_notify+0x114/0x140 [ 91.096412][ T3788] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 91.102644][ T3788] syscall_exit_to_user_mode+0x9/0x60 [ 91.108013][ T3788] do_syscall_64+0x42/0xb0 [ 91.112418][ T3788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.118301][ T3788] RIP: 0033:0x7fc6cd2767a3 [ 91.122719][ T3788] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 91.142321][ T3788] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.150740][ T3788] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3788] close(3) = 0 [pid 3788] close(4) = 0 [pid 3788] close(5) = -1 EBADF (Bad file descriptor) [pid 3788] close(6) = -1 EBADF (Bad file descriptor) [pid 3788] close(7) = -1 EBADF (Bad file descriptor) [pid 3788] close(8) = -1 EBADF (Bad file descriptor) [pid 3788] close(9) = -1 EBADF (Bad file descriptor) [pid 3788] close(10) = -1 EBADF (Bad file descriptor) [pid 3788] close(11) = -1 EBADF (Bad file descriptor) [pid 3788] close(12) = -1 EBADF (Bad file descriptor) [pid 3788] close(13) = -1 EBADF (Bad file descriptor) [pid 3788] close(14) = -1 EBADF (Bad file descriptor) [pid 3788] close(15) = -1 EBADF (Bad file descriptor) [pid 3788] close(16) = -1 EBADF (Bad file descriptor) [pid 3788] close(17) = -1 EBADF (Bad file descriptor) [pid 3788] close(18) = -1 EBADF (Bad file descriptor) [pid 3788] close(19) = -1 EBADF (Bad file descriptor) [pid 3788] close(20) = -1 EBADF (Bad file descriptor) [pid 3788] close(21) = -1 EBADF (Bad file descriptor) [pid 3788] close(22) = -1 EBADF (Bad file descriptor) [pid 3788] close(23) = -1 EBADF (Bad file descriptor) [pid 3788] close(24) = -1 EBADF (Bad file descriptor) [pid 3788] close(25) = -1 EBADF (Bad file descriptor) [pid 3788] close(26) = -1 EBADF (Bad file descriptor) [pid 3788] close(27) = -1 EBADF (Bad file descriptor) [pid 3788] close(28) = -1 EBADF (Bad file descriptor) [pid 3788] close(29) = -1 EBADF (Bad file descriptor) [pid 3788] exit_group(0) = ? [pid 3788] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=159, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 160 ./strace-static-x86_64: Process 3789 attached [pid 3789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3789] setpgid(0, 0) = 0 [ 91.158706][ T3788] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 91.166669][ T3788] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 91.174624][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 91.182583][ T3788] R13: 00000000000f4240 R14: 000000000001620d R15: 00007ffdc49a5924 [ 91.190558][ T3788] [pid 3789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3789] write(3, "1000", 4) = 4 [pid 3789] close(3) = 0 [pid 3789] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3789] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3789] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3789] write(4, "5", 1) = 1 [pid 3789] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 91.255287][ T3789] FAULT_INJECTION: forcing a failure. [ 91.255287][ T3789] name failslab, interval 1, probability 0, space 0, times 0 [ 91.267916][ T3789] CPU: 0 PID: 3789 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 91.278065][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.288550][ T3789] Call Trace: [ 91.291823][ T3789] [ 91.294743][ T3789] dump_stack_lvl+0xcd/0x134 [ 91.299344][ T3789] should_fail.cold+0x5/0xa [ 91.303837][ T3789] should_failslab+0x5/0x10 [ 91.308331][ T3789] kmem_cache_alloc_trace+0x60/0x3f0 [ 91.313614][ T3789] ? ref_tracker_alloc+0x14c/0x550 [ 91.318729][ T3789] ref_tracker_alloc+0x14c/0x550 [ 91.323668][ T3789] ? ref_tracker_free+0x6b0/0x6b0 [ 91.328684][ T3789] ? lock_release+0x720/0x720 [ 91.333358][ T3789] ? do_raw_spin_lock+0x120/0x2a0 [ 91.338379][ T3789] ? rwlock_bug.part.0+0x90/0x90 [ 91.343318][ T3789] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 91.348690][ T3789] linkwatch_fire_event+0x202/0x260 [ 91.353893][ T3789] netif_carrier_off+0x96/0xb0 [ 91.358666][ T3789] __tun_detach+0xfe7/0x13e0 [ 91.363258][ T3789] tun_chr_close+0xc4/0x180 [ 91.367945][ T3789] __fput+0x277/0x9d0 [ 91.372005][ T3789] ? __tun_detach+0x13e0/0x13e0 [ 91.376844][ T3789] task_work_run+0xdd/0x1a0 [ 91.381339][ T3789] ptrace_notify+0x114/0x140 [ 91.385919][ T3789] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 91.392152][ T3789] syscall_exit_to_user_mode+0x9/0x60 [ 91.397602][ T3789] do_syscall_64+0x42/0xb0 [ 91.402015][ T3789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.407904][ T3789] RIP: 0033:0x7fc6cd2767a3 [ 91.412324][ T3789] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 91.432011][ T3789] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.440421][ T3789] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 91.448384][ T3789] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3789] close(3) = 0 [pid 3789] close(4) = 0 [pid 3789] close(5) = -1 EBADF (Bad file descriptor) [pid 3789] close(6) = -1 EBADF (Bad file descriptor) [pid 3789] close(7) = -1 EBADF (Bad file descriptor) [pid 3789] close(8) = -1 EBADF (Bad file descriptor) [pid 3789] close(9) = -1 EBADF (Bad file descriptor) [pid 3789] close(10) = -1 EBADF (Bad file descriptor) [pid 3789] close(11) = -1 EBADF (Bad file descriptor) [pid 3789] close(12) = -1 EBADF (Bad file descriptor) [pid 3789] close(13) = -1 EBADF (Bad file descriptor) [pid 3789] close(14) = -1 EBADF (Bad file descriptor) [pid 3789] close(15) = -1 EBADF (Bad file descriptor) [pid 3789] close(16) = -1 EBADF (Bad file descriptor) [pid 3789] close(17) = -1 EBADF (Bad file descriptor) [pid 3789] close(18) = -1 EBADF (Bad file descriptor) [pid 3789] close(19) = -1 EBADF (Bad file descriptor) [pid 3789] close(20) = -1 EBADF (Bad file descriptor) [pid 3789] close(21) = -1 EBADF (Bad file descriptor) [pid 3789] close(22) = -1 EBADF (Bad file descriptor) [pid 3789] close(23) = -1 EBADF (Bad file descriptor) [pid 3789] close(24) = -1 EBADF (Bad file descriptor) [pid 3789] close(25) = -1 EBADF (Bad file descriptor) [pid 3789] close(26) = -1 EBADF (Bad file descriptor) [pid 3789] close(27) = -1 EBADF (Bad file descriptor) [pid 3789] close(28) = -1 EBADF (Bad file descriptor) [pid 3789] close(29) = -1 EBADF (Bad file descriptor) [pid 3789] exit_group(0) = ? [pid 3789] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=160, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3790 attached , child_tidptr=0x5555570bd5d0) = 161 [pid 3790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3790] setpgid(0, 0) = 0 [pid 3790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 91.456340][ T3789] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 91.464294][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 91.472257][ T3789] R13: 00000000000f4240 R14: 0000000000016335 R15: 00007ffdc49a5924 [ 91.480228][ T3789] [pid 3790] write(3, "1000", 4) = 4 [pid 3790] close(3) = 0 [pid 3790] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3790] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3790] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3790] write(4, "5", 1) = 1 [pid 3790] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 91.545053][ T3790] FAULT_INJECTION: forcing a failure. [ 91.545053][ T3790] name failslab, interval 1, probability 0, space 0, times 0 [ 91.558044][ T3790] CPU: 0 PID: 3790 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 91.568335][ T3790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.578387][ T3790] Call Trace: [ 91.581670][ T3790] [ 91.584586][ T3790] dump_stack_lvl+0xcd/0x134 [ 91.589169][ T3790] should_fail.cold+0x5/0xa [ 91.593658][ T3790] should_failslab+0x5/0x10 [ 91.598316][ T3790] kmem_cache_alloc_trace+0x60/0x3f0 [ 91.603592][ T3790] ? ref_tracker_alloc+0x14c/0x550 [ 91.608691][ T3790] ref_tracker_alloc+0x14c/0x550 [ 91.613614][ T3790] ? ref_tracker_free+0x6b0/0x6b0 [ 91.618624][ T3790] ? lock_release+0x720/0x720 [ 91.623296][ T3790] ? do_raw_spin_lock+0x120/0x2a0 [ 91.628315][ T3790] ? rwlock_bug.part.0+0x90/0x90 [ 91.633250][ T3790] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 91.638625][ T3790] linkwatch_fire_event+0x202/0x260 [ 91.643828][ T3790] netif_carrier_off+0x96/0xb0 [ 91.648602][ T3790] __tun_detach+0xfe7/0x13e0 [ 91.653192][ T3790] tun_chr_close+0xc4/0x180 [ 91.657681][ T3790] __fput+0x277/0x9d0 [ 91.661649][ T3790] ? __tun_detach+0x13e0/0x13e0 [ 91.666501][ T3790] task_work_run+0xdd/0x1a0 [ 91.671105][ T3790] ptrace_notify+0x114/0x140 [ 91.675684][ T3790] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 91.681926][ T3790] syscall_exit_to_user_mode+0x9/0x60 [ 91.687287][ T3790] do_syscall_64+0x42/0xb0 [ 91.691691][ T3790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.697573][ T3790] RIP: 0033:0x7fc6cd2767a3 [ 91.701977][ T3790] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 91.721577][ T3790] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.729986][ T3790] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 91.737949][ T3790] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3790] close(3) = 0 [pid 3790] close(4) = 0 [pid 3790] close(5) = -1 EBADF (Bad file descriptor) [pid 3790] close(6) = -1 EBADF (Bad file descriptor) [pid 3790] close(7) = -1 EBADF (Bad file descriptor) [pid 3790] close(8) = -1 EBADF (Bad file descriptor) [pid 3790] close(9) = -1 EBADF (Bad file descriptor) [pid 3790] close(10) = -1 EBADF (Bad file descriptor) [pid 3790] close(11) = -1 EBADF (Bad file descriptor) [pid 3790] close(12) = -1 EBADF (Bad file descriptor) [pid 3790] close(13) = -1 EBADF (Bad file descriptor) [pid 3790] close(14) = -1 EBADF (Bad file descriptor) [pid 3790] close(15) = -1 EBADF (Bad file descriptor) [pid 3790] close(16) = -1 EBADF (Bad file descriptor) [pid 3790] close(17) = -1 EBADF (Bad file descriptor) [pid 3790] close(18) = -1 EBADF (Bad file descriptor) [pid 3790] close(19) = -1 EBADF (Bad file descriptor) [pid 3790] close(20) = -1 EBADF (Bad file descriptor) [pid 3790] close(21) = -1 EBADF (Bad file descriptor) [pid 3790] close(22) = -1 EBADF (Bad file descriptor) [pid 3790] close(23) = -1 EBADF (Bad file descriptor) [pid 3790] close(24) = -1 EBADF (Bad file descriptor) [pid 3790] close(25) = -1 EBADF (Bad file descriptor) [pid 3790] close(26) = -1 EBADF (Bad file descriptor) [pid 3790] close(27) = -1 EBADF (Bad file descriptor) [pid 3790] close(28) = -1 EBADF (Bad file descriptor) [pid 3790] close(29) = -1 EBADF (Bad file descriptor) [pid 3790] exit_group(0) = ? [pid 3790] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 162 ./strace-static-x86_64: Process 3791 attached [pid 3791] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3791] setpgid(0, 0) = 0 [ 91.745926][ T3790] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 91.754074][ T3790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 91.762048][ T3790] R13: 00000000000f4240 R14: 0000000000016458 R15: 00007ffdc49a5924 [ 91.770042][ T3790] [pid 3791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3791] write(3, "1000", 4) = 4 [pid 3791] close(3) = 0 [pid 3791] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3791] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3791] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3791] write(4, "5", 1) = 1 [pid 3791] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 91.835124][ T3791] FAULT_INJECTION: forcing a failure. [ 91.835124][ T3791] name failslab, interval 1, probability 0, space 0, times 0 [ 91.847845][ T3791] CPU: 0 PID: 3791 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 91.858074][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.868368][ T3791] Call Trace: [ 91.871643][ T3791] [ 91.874563][ T3791] dump_stack_lvl+0xcd/0x134 [ 91.879144][ T3791] should_fail.cold+0x5/0xa [ 91.883639][ T3791] should_failslab+0x5/0x10 [ 91.888135][ T3791] kmem_cache_alloc_trace+0x60/0x3f0 [ 91.893428][ T3791] ? ref_tracker_alloc+0x14c/0x550 [ 91.898560][ T3791] ref_tracker_alloc+0x14c/0x550 [ 91.903499][ T3791] ? ref_tracker_free+0x6b0/0x6b0 [ 91.908510][ T3791] ? lock_release+0x720/0x720 [ 91.913198][ T3791] ? do_raw_spin_lock+0x120/0x2a0 [ 91.918223][ T3791] ? rwlock_bug.part.0+0x90/0x90 [ 91.923156][ T3791] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 91.928531][ T3791] linkwatch_fire_event+0x202/0x260 [ 91.933737][ T3791] netif_carrier_off+0x96/0xb0 [ 91.938497][ T3791] __tun_detach+0xfe7/0x13e0 [ 91.943262][ T3791] tun_chr_close+0xc4/0x180 [ 91.947757][ T3791] __fput+0x277/0x9d0 [ 91.951730][ T3791] ? __tun_detach+0x13e0/0x13e0 [ 91.956595][ T3791] task_work_run+0xdd/0x1a0 [ 91.961090][ T3791] ptrace_notify+0x114/0x140 [ 91.965687][ T3791] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 91.971918][ T3791] syscall_exit_to_user_mode+0x9/0x60 [ 91.977283][ T3791] do_syscall_64+0x42/0xb0 [ 91.981699][ T3791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.987687][ T3791] RIP: 0033:0x7fc6cd2767a3 [ 91.992102][ T3791] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 92.011704][ T3791] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 92.020117][ T3791] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 92.028082][ T3791] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3791] close(3) = 0 [ 92.036047][ T3791] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 92.044010][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 92.051984][ T3791] R13: 00000000000f4240 R14: 0000000000016578 R15: 00007ffdc49a5924 [ 92.059976][ T3791] [pid 3791] close(4) = 0 [pid 3791] close(5) = -1 EBADF (Bad file descriptor) [pid 3791] close(6) = -1 EBADF (Bad file descriptor) [pid 3791] close(7) = -1 EBADF (Bad file descriptor) [pid 3791] close(8) = -1 EBADF (Bad file descriptor) [pid 3791] close(9) = -1 EBADF (Bad file descriptor) [pid 3791] close(10) = -1 EBADF (Bad file descriptor) [pid 3791] close(11) = -1 EBADF (Bad file descriptor) [pid 3791] close(12) = -1 EBADF (Bad file descriptor) [pid 3791] close(13) = -1 EBADF (Bad file descriptor) [pid 3791] close(14) = -1 EBADF (Bad file descriptor) [pid 3791] close(15) = -1 EBADF (Bad file descriptor) [pid 3791] close(16) = -1 EBADF (Bad file descriptor) [pid 3791] close(17) = -1 EBADF (Bad file descriptor) [pid 3791] close(18) = -1 EBADF (Bad file descriptor) [pid 3791] close(19) = -1 EBADF (Bad file descriptor) [pid 3791] close(20) = -1 EBADF (Bad file descriptor) [pid 3791] close(21) = -1 EBADF (Bad file descriptor) [pid 3791] close(22) = -1 EBADF (Bad file descriptor) [pid 3791] close(23) = -1 EBADF (Bad file descriptor) [pid 3791] close(24) = -1 EBADF (Bad file descriptor) [pid 3791] close(25) = -1 EBADF (Bad file descriptor) [pid 3791] close(26) = -1 EBADF (Bad file descriptor) [pid 3791] close(27) = -1 EBADF (Bad file descriptor) [pid 3791] close(28) = -1 EBADF (Bad file descriptor) [pid 3791] close(29) = -1 EBADF (Bad file descriptor) [pid 3791] exit_group(0) = ? [pid 3791] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=162, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 163 ./strace-static-x86_64: Process 3792 attached [pid 3792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3792] setpgid(0, 0) = 0 [pid 3792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3792] write(3, "1000", 4) = 4 [pid 3792] close(3) = 0 [pid 3792] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3792] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3792] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3792] write(4, "5", 1) = 1 [pid 3792] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 92.132476][ T3792] FAULT_INJECTION: forcing a failure. [ 92.132476][ T3792] name failslab, interval 1, probability 0, space 0, times 0 [ 92.145328][ T3792] CPU: 0 PID: 3792 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 92.155481][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.165984][ T3792] Call Trace: [ 92.169272][ T3792] [ 92.172204][ T3792] dump_stack_lvl+0xcd/0x134 [ 92.176818][ T3792] should_fail.cold+0x5/0xa [ 92.181335][ T3792] should_failslab+0x5/0x10 [ 92.185859][ T3792] kmem_cache_alloc_trace+0x60/0x3f0 [ 92.191172][ T3792] ? ref_tracker_alloc+0x14c/0x550 [ 92.196295][ T3792] ref_tracker_alloc+0x14c/0x550 [ 92.201231][ T3792] ? ref_tracker_free+0x6b0/0x6b0 [ 92.206243][ T3792] ? lock_release+0x720/0x720 [ 92.210921][ T3792] ? do_raw_spin_lock+0x120/0x2a0 [ 92.215946][ T3792] ? rwlock_bug.part.0+0x90/0x90 [ 92.220879][ T3792] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 92.226251][ T3792] linkwatch_fire_event+0x202/0x260 [ 92.231450][ T3792] netif_carrier_off+0x96/0xb0 [ 92.236232][ T3792] __tun_detach+0xfe7/0x13e0 [ 92.240824][ T3792] tun_chr_close+0xc4/0x180 [ 92.245316][ T3792] __fput+0x277/0x9d0 [ 92.249294][ T3792] ? __tun_detach+0x13e0/0x13e0 [ 92.254145][ T3792] task_work_run+0xdd/0x1a0 [ 92.258649][ T3792] ptrace_notify+0x114/0x140 [ 92.263235][ T3792] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 92.269483][ T3792] syscall_exit_to_user_mode+0x9/0x60 [ 92.274857][ T3792] do_syscall_64+0x42/0xb0 [ 92.279273][ T3792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.285164][ T3792] RIP: 0033:0x7fc6cd2767a3 [ 92.289583][ T3792] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 92.309283][ T3792] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 92.317698][ T3792] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3792] close(3) = 0 [pid 3792] close(4) = 0 [pid 3792] close(5) = -1 EBADF (Bad file descriptor) [pid 3792] close(6) = -1 EBADF (Bad file descriptor) [pid 3792] close(7) = -1 EBADF (Bad file descriptor) [pid 3792] close(8) = -1 EBADF (Bad file descriptor) [pid 3792] close(9) = -1 EBADF (Bad file descriptor) [pid 3792] close(10) = -1 EBADF (Bad file descriptor) [pid 3792] close(11) = -1 EBADF (Bad file descriptor) [pid 3792] close(12) = -1 EBADF (Bad file descriptor) [pid 3792] close(13) = -1 EBADF (Bad file descriptor) [pid 3792] close(14) = -1 EBADF (Bad file descriptor) [pid 3792] close(15) = -1 EBADF (Bad file descriptor) [pid 3792] close(16) = -1 EBADF (Bad file descriptor) [pid 3792] close(17) = -1 EBADF (Bad file descriptor) [pid 3792] close(18) = -1 EBADF (Bad file descriptor) [pid 3792] close(19) = -1 EBADF (Bad file descriptor) [pid 3792] close(20) = -1 EBADF (Bad file descriptor) [pid 3792] close(21) = -1 EBADF (Bad file descriptor) [pid 3792] close(22) = -1 EBADF (Bad file descriptor) [pid 3792] close(23) = -1 EBADF (Bad file descriptor) [pid 3792] close(24) = -1 EBADF (Bad file descriptor) [pid 3792] close(25) = -1 EBADF (Bad file descriptor) [pid 3792] close(26) = -1 EBADF (Bad file descriptor) [pid 3792] close(27) = -1 EBADF (Bad file descriptor) [pid 3792] close(28) = -1 EBADF (Bad file descriptor) [pid 3792] close(29) = -1 EBADF (Bad file descriptor) [pid 3792] exit_group(0) = ? [pid 3792] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=163, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [ 92.325745][ T3792] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 92.333704][ T3792] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 92.341755][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 92.349727][ T3792] R13: 00000000000f4240 R14: 000000000001669c R15: 00007ffdc49a5924 [ 92.357709][ T3792] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3793 attached , child_tidptr=0x5555570bd5d0) = 164 [pid 3793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3793] setpgid(0, 0) = 0 [pid 3793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3793] write(3, "1000", 4) = 4 [pid 3793] close(3) = 0 [pid 3793] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3793] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3793] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3793] write(4, "5", 1) = 1 [pid 3793] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 92.425022][ T3793] FAULT_INJECTION: forcing a failure. [ 92.425022][ T3793] name failslab, interval 1, probability 0, space 0, times 0 [ 92.438141][ T3793] CPU: 0 PID: 3793 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 92.448568][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.458835][ T3793] Call Trace: [ 92.462113][ T3793] [ 92.465049][ T3793] dump_stack_lvl+0xcd/0x134 [ 92.469632][ T3793] should_fail.cold+0x5/0xa [ 92.474122][ T3793] should_failslab+0x5/0x10 [ 92.478616][ T3793] kmem_cache_alloc_trace+0x60/0x3f0 [ 92.483909][ T3793] ? ref_tracker_alloc+0x14c/0x550 [ 92.489236][ T3793] ref_tracker_alloc+0x14c/0x550 [ 92.494264][ T3793] ? ref_tracker_free+0x6b0/0x6b0 [ 92.499766][ T3793] ? lock_release+0x720/0x720 [ 92.504438][ T3793] ? do_raw_spin_lock+0x120/0x2a0 [ 92.509885][ T3793] ? rwlock_bug.part.0+0x90/0x90 [ 92.514825][ T3793] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 92.520198][ T3793] linkwatch_fire_event+0x202/0x260 [ 92.525398][ T3793] netif_carrier_off+0x96/0xb0 [ 92.530337][ T3793] __tun_detach+0xfe7/0x13e0 [ 92.535020][ T3793] tun_chr_close+0xc4/0x180 [ 92.539521][ T3793] __fput+0x277/0x9d0 [ 92.543505][ T3793] ? __tun_detach+0x13e0/0x13e0 [ 92.548356][ T3793] task_work_run+0xdd/0x1a0 [ 92.552876][ T3793] ptrace_notify+0x114/0x140 [ 92.557495][ T3793] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 92.563744][ T3793] syscall_exit_to_user_mode+0x9/0x60 [ 92.569116][ T3793] do_syscall_64+0x42/0xb0 [ 92.573527][ T3793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.579415][ T3793] RIP: 0033:0x7fc6cd2767a3 [ 92.583829][ T3793] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 92.603433][ T3793] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 92.611844][ T3793] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 92.619808][ T3793] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 92.627769][ T3793] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 92.635751][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 92.643721][ T3793] R13: 00000000000f4240 R14: 00000000000167c8 R15: 00007ffdc49a5924 [ 92.651704][ T3793] [pid 3793] close(3) = 0 [pid 3793] close(4) = 0 [pid 3793] close(5) = -1 EBADF (Bad file descriptor) [pid 3793] close(6) = -1 EBADF (Bad file descriptor) [pid 3793] close(7) = -1 EBADF (Bad file descriptor) [pid 3793] close(8) = -1 EBADF (Bad file descriptor) [pid 3793] close(9) = -1 EBADF (Bad file descriptor) [pid 3793] close(10) = -1 EBADF (Bad file descriptor) [pid 3793] close(11) = -1 EBADF (Bad file descriptor) [pid 3793] close(12) = -1 EBADF (Bad file descriptor) [pid 3793] close(13) = -1 EBADF (Bad file descriptor) [pid 3793] close(14) = -1 EBADF (Bad file descriptor) [pid 3793] close(15) = -1 EBADF (Bad file descriptor) [pid 3793] close(16) = -1 EBADF (Bad file descriptor) [pid 3793] close(17) = -1 EBADF (Bad file descriptor) [pid 3793] close(18) = -1 EBADF (Bad file descriptor) [pid 3793] close(19) = -1 EBADF (Bad file descriptor) [pid 3793] close(20) = -1 EBADF (Bad file descriptor) [pid 3793] close(21) = -1 EBADF (Bad file descriptor) [pid 3793] close(22) = -1 EBADF (Bad file descriptor) [pid 3793] close(23) = -1 EBADF (Bad file descriptor) [pid 3793] close(24) = -1 EBADF (Bad file descriptor) [pid 3793] close(25) = -1 EBADF (Bad file descriptor) [pid 3793] close(26) = -1 EBADF (Bad file descriptor) [pid 3793] close(27) = -1 EBADF (Bad file descriptor) [pid 3793] close(28) = -1 EBADF (Bad file descriptor) [pid 3793] close(29) = -1 EBADF (Bad file descriptor) [pid 3793] exit_group(0) = ? [pid 3793] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3795 attached , child_tidptr=0x5555570bd5d0) = 165 [pid 3795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3795] setpgid(0, 0) = 0 [pid 3795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3795] write(3, "1000", 4) = 4 [pid 3795] close(3) = 0 [pid 3795] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3795] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3795] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3795] write(4, "5", 1) = 1 [pid 3795] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 92.726940][ T3795] FAULT_INJECTION: forcing a failure. [ 92.726940][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 92.739810][ T3795] CPU: 0 PID: 3795 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 92.750176][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.760500][ T3795] Call Trace: [ 92.763803][ T3795] [ 92.767098][ T3795] dump_stack_lvl+0xcd/0x134 [ 92.771718][ T3795] should_fail.cold+0x5/0xa [ 92.776229][ T3795] should_failslab+0x5/0x10 [ 92.780838][ T3795] kmem_cache_alloc_trace+0x60/0x3f0 [ 92.786230][ T3795] ? ref_tracker_alloc+0x14c/0x550 [ 92.791373][ T3795] ref_tracker_alloc+0x14c/0x550 [ 92.796335][ T3795] ? ref_tracker_free+0x6b0/0x6b0 [ 92.801474][ T3795] ? lock_release+0x720/0x720 [ 92.806167][ T3795] ? do_raw_spin_lock+0x120/0x2a0 [ 92.811216][ T3795] ? rwlock_bug.part.0+0x90/0x90 [ 92.816250][ T3795] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 92.821651][ T3795] linkwatch_fire_event+0x202/0x260 [ 92.826860][ T3795] netif_carrier_off+0x96/0xb0 [ 92.831631][ T3795] __tun_detach+0xfe7/0x13e0 [ 92.836235][ T3795] tun_chr_close+0xc4/0x180 [ 92.840747][ T3795] __fput+0x277/0x9d0 [ 92.844749][ T3795] ? __tun_detach+0x13e0/0x13e0 [ 92.849635][ T3795] task_work_run+0xdd/0x1a0 [ 92.854158][ T3795] ptrace_notify+0x114/0x140 [ 92.858776][ T3795] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 92.865034][ T3795] syscall_exit_to_user_mode+0x9/0x60 [ 92.870427][ T3795] do_syscall_64+0x42/0xb0 [ 92.874865][ T3795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.880768][ T3795] RIP: 0033:0x7fc6cd2767a3 [ 92.885189][ T3795] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 92.904884][ T3795] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 92.913298][ T3795] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3795] close(3) = 0 [pid 3795] close(4) = 0 [pid 3795] close(5) = -1 EBADF (Bad file descriptor) [ 92.921284][ T3795] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 92.929273][ T3795] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 92.937435][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 92.945426][ T3795] R13: 00000000000f4240 R14: 00000000000168e9 R15: 00007ffdc49a5924 [ 92.953434][ T3795] [pid 3795] close(6) = -1 EBADF (Bad file descriptor) [pid 3795] close(7) = -1 EBADF (Bad file descriptor) [pid 3795] close(8) = -1 EBADF (Bad file descriptor) [pid 3795] close(9) = -1 EBADF (Bad file descriptor) [pid 3795] close(10) = -1 EBADF (Bad file descriptor) [pid 3795] close(11) = -1 EBADF (Bad file descriptor) [pid 3795] close(12) = -1 EBADF (Bad file descriptor) [pid 3795] close(13) = -1 EBADF (Bad file descriptor) [pid 3795] close(14) = -1 EBADF (Bad file descriptor) [pid 3795] close(15) = -1 EBADF (Bad file descriptor) [pid 3795] close(16) = -1 EBADF (Bad file descriptor) [pid 3795] close(17) = -1 EBADF (Bad file descriptor) [pid 3795] close(18) = -1 EBADF (Bad file descriptor) [pid 3795] close(19) = -1 EBADF (Bad file descriptor) [pid 3795] close(20) = -1 EBADF (Bad file descriptor) [pid 3795] close(21) = -1 EBADF (Bad file descriptor) [pid 3795] close(22) = -1 EBADF (Bad file descriptor) [pid 3795] close(23) = -1 EBADF (Bad file descriptor) [pid 3795] close(24) = -1 EBADF (Bad file descriptor) [pid 3795] close(25) = -1 EBADF (Bad file descriptor) [pid 3795] close(26) = -1 EBADF (Bad file descriptor) [pid 3795] close(27) = -1 EBADF (Bad file descriptor) [pid 3795] close(28) = -1 EBADF (Bad file descriptor) [pid 3795] close(29) = -1 EBADF (Bad file descriptor) [pid 3795] exit_group(0) = ? [pid 3795] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=165, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 166 ./strace-static-x86_64: Process 3796 attached [pid 3796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3796] setpgid(0, 0) = 0 [pid 3796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3796] write(3, "1000", 4) = 4 [pid 3796] close(3) = 0 [pid 3796] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3796] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3796] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3796] write(4, "5", 1) = 1 [pid 3796] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 93.031108][ T3796] FAULT_INJECTION: forcing a failure. [ 93.031108][ T3796] name failslab, interval 1, probability 0, space 0, times 0 [ 93.043733][ T3796] CPU: 0 PID: 3796 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 93.053878][ T3796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.063966][ T3796] Call Trace: [ 93.067235][ T3796] [ 93.070153][ T3796] dump_stack_lvl+0xcd/0x134 [ 93.074751][ T3796] should_fail.cold+0x5/0xa [ 93.079244][ T3796] should_failslab+0x5/0x10 [ 93.083742][ T3796] kmem_cache_alloc_trace+0x60/0x3f0 [ 93.089015][ T3796] ? ref_tracker_alloc+0x14c/0x550 [ 93.094116][ T3796] ref_tracker_alloc+0x14c/0x550 [ 93.099040][ T3796] ? ref_tracker_free+0x6b0/0x6b0 [ 93.104050][ T3796] ? lock_release+0x720/0x720 [ 93.108721][ T3796] ? do_raw_spin_lock+0x120/0x2a0 [ 93.113736][ T3796] ? rwlock_bug.part.0+0x90/0x90 [ 93.118663][ T3796] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 93.124031][ T3796] linkwatch_fire_event+0x202/0x260 [ 93.129249][ T3796] netif_carrier_off+0x96/0xb0 [ 93.134025][ T3796] __tun_detach+0xfe7/0x13e0 [ 93.138629][ T3796] tun_chr_close+0xc4/0x180 [ 93.143123][ T3796] __fput+0x277/0x9d0 [ 93.147097][ T3796] ? __tun_detach+0x13e0/0x13e0 [ 93.151937][ T3796] task_work_run+0xdd/0x1a0 [ 93.156437][ T3796] ptrace_notify+0x114/0x140 [ 93.161109][ T3796] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 93.167339][ T3796] syscall_exit_to_user_mode+0x9/0x60 [ 93.172701][ T3796] do_syscall_64+0x42/0xb0 [ 93.177111][ T3796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.182995][ T3796] RIP: 0033:0x7fc6cd2767a3 [ 93.187395][ T3796] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 93.206990][ T3796] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 93.215394][ T3796] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 93.223351][ T3796] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 93.231394][ T3796] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 93.239353][ T3796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 93.247398][ T3796] R13: 00000000000f4240 R14: 0000000000016a16 R15: 00007ffdc49a5924 [ 93.255372][ T3796] [pid 3796] close(3) = 0 [pid 3796] close(4) = 0 [pid 3796] close(5) = -1 EBADF (Bad file descriptor) [pid 3796] close(6) = -1 EBADF (Bad file descriptor) [pid 3796] close(7) = -1 EBADF (Bad file descriptor) [pid 3796] close(8) = -1 EBADF (Bad file descriptor) [pid 3796] close(9) = -1 EBADF (Bad file descriptor) [pid 3796] close(10) = -1 EBADF (Bad file descriptor) [pid 3796] close(11) = -1 EBADF (Bad file descriptor) [pid 3796] close(12) = -1 EBADF (Bad file descriptor) [pid 3796] close(13) = -1 EBADF (Bad file descriptor) [pid 3796] close(14) = -1 EBADF (Bad file descriptor) [pid 3796] close(15) = -1 EBADF (Bad file descriptor) [pid 3796] close(16) = -1 EBADF (Bad file descriptor) [pid 3796] close(17) = -1 EBADF (Bad file descriptor) [pid 3796] close(18) = -1 EBADF (Bad file descriptor) [pid 3796] close(19) = -1 EBADF (Bad file descriptor) [pid 3796] close(20) = -1 EBADF (Bad file descriptor) [pid 3796] close(21) = -1 EBADF (Bad file descriptor) [pid 3796] close(22) = -1 EBADF (Bad file descriptor) [pid 3796] close(23) = -1 EBADF (Bad file descriptor) [pid 3796] close(24) = -1 EBADF (Bad file descriptor) [pid 3796] close(25) = -1 EBADF (Bad file descriptor) [pid 3796] close(26) = -1 EBADF (Bad file descriptor) [pid 3796] close(27) = -1 EBADF (Bad file descriptor) [pid 3796] close(28) = -1 EBADF (Bad file descriptor) [pid 3796] close(29) = -1 EBADF (Bad file descriptor) [pid 3796] exit_group(0) = ? [pid 3796] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=166, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 167 ./strace-static-x86_64: Process 3797 attached [pid 3797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3797] setpgid(0, 0) = 0 [pid 3797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3797] write(3, "1000", 4) = 4 [pid 3797] close(3) = 0 [pid 3797] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3797] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3797] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3797] write(4, "5", 1) = 1 [pid 3797] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 93.333332][ T3797] FAULT_INJECTION: forcing a failure. [ 93.333332][ T3797] name failslab, interval 1, probability 0, space 0, times 0 [ 93.346041][ T3797] CPU: 0 PID: 3797 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 93.356261][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.366393][ T3797] Call Trace: [ 93.369670][ T3797] [ 93.372579][ T3797] dump_stack_lvl+0xcd/0x134 [ 93.377250][ T3797] should_fail.cold+0x5/0xa [ 93.381732][ T3797] should_failslab+0x5/0x10 [ 93.386218][ T3797] kmem_cache_alloc_trace+0x60/0x3f0 [ 93.391700][ T3797] ? ref_tracker_alloc+0x14c/0x550 [ 93.396802][ T3797] ref_tracker_alloc+0x14c/0x550 [ 93.401724][ T3797] ? ref_tracker_free+0x6b0/0x6b0 [ 93.406728][ T3797] ? lock_release+0x720/0x720 [ 93.411393][ T3797] ? do_raw_spin_lock+0x120/0x2a0 [ 93.416489][ T3797] ? rwlock_bug.part.0+0x90/0x90 [ 93.421410][ T3797] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 93.426765][ T3797] linkwatch_fire_event+0x202/0x260 [ 93.431950][ T3797] netif_carrier_off+0x96/0xb0 [ 93.436716][ T3797] __tun_detach+0xfe7/0x13e0 [ 93.441311][ T3797] tun_chr_close+0xc4/0x180 [ 93.445800][ T3797] __fput+0x277/0x9d0 [ 93.449780][ T3797] ? __tun_detach+0x13e0/0x13e0 [ 93.454705][ T3797] task_work_run+0xdd/0x1a0 [ 93.459202][ T3797] ptrace_notify+0x114/0x140 [ 93.463955][ T3797] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 93.470195][ T3797] syscall_exit_to_user_mode+0x9/0x60 [ 93.475559][ T3797] do_syscall_64+0x42/0xb0 [ 93.480051][ T3797] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.486023][ T3797] RIP: 0033:0x7fc6cd2767a3 [ 93.490453][ T3797] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 93.510061][ T3797] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 93.519354][ T3797] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 93.528285][ T3797] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 93.536251][ T3797] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 93.544233][ T3797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 93.552193][ T3797] R13: 00000000000f4240 R14: 0000000000016b4a R15: 00007ffdc49a5924 [ 93.560338][ T3797] [pid 3797] close(3) = 0 [pid 3797] close(4) = 0 [pid 3797] close(5) = -1 EBADF (Bad file descriptor) [pid 3797] close(6) = -1 EBADF (Bad file descriptor) [pid 3797] close(7) = -1 EBADF (Bad file descriptor) [pid 3797] close(8) = -1 EBADF (Bad file descriptor) [pid 3797] close(9) = -1 EBADF (Bad file descriptor) [pid 3797] close(10) = -1 EBADF (Bad file descriptor) [pid 3797] close(11) = -1 EBADF (Bad file descriptor) [pid 3797] close(12) = -1 EBADF (Bad file descriptor) [pid 3797] close(13) = -1 EBADF (Bad file descriptor) [pid 3797] close(14) = -1 EBADF (Bad file descriptor) [pid 3797] close(15) = -1 EBADF (Bad file descriptor) [pid 3797] close(16) = -1 EBADF (Bad file descriptor) [pid 3797] close(17) = -1 EBADF (Bad file descriptor) [pid 3797] close(18) = -1 EBADF (Bad file descriptor) [pid 3797] close(19) = -1 EBADF (Bad file descriptor) [pid 3797] close(20) = -1 EBADF (Bad file descriptor) [pid 3797] close(21) = -1 EBADF (Bad file descriptor) [pid 3797] close(22) = -1 EBADF (Bad file descriptor) [pid 3797] close(23) = -1 EBADF (Bad file descriptor) [pid 3797] close(24) = -1 EBADF (Bad file descriptor) [pid 3797] close(25) = -1 EBADF (Bad file descriptor) [pid 3797] close(26) = -1 EBADF (Bad file descriptor) [pid 3797] close(27) = -1 EBADF (Bad file descriptor) [pid 3797] close(28) = -1 EBADF (Bad file descriptor) [pid 3797] close(29) = -1 EBADF (Bad file descriptor) [pid 3797] exit_group(0) = ? [pid 3797] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 168 ./strace-static-x86_64: Process 3798 attached [pid 3798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3798] setpgid(0, 0) = 0 [pid 3798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3798] write(3, "1000", 4) = 4 [pid 3798] close(3) = 0 [pid 3798] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3798] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3798] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3798] write(4, "5", 1) = 1 [pid 3798] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 93.644106][ T3798] FAULT_INJECTION: forcing a failure. [ 93.644106][ T3798] name failslab, interval 1, probability 0, space 0, times 0 [ 93.656714][ T3798] CPU: 0 PID: 3798 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 93.666858][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.676907][ T3798] Call Trace: [ 93.680175][ T3798] [ 93.683099][ T3798] dump_stack_lvl+0xcd/0x134 [ 93.687683][ T3798] should_fail.cold+0x5/0xa [ 93.692174][ T3798] should_failslab+0x5/0x10 [ 93.696755][ T3798] kmem_cache_alloc_trace+0x60/0x3f0 [ 93.702046][ T3798] ? ref_tracker_alloc+0x14c/0x550 [ 93.707162][ T3798] ref_tracker_alloc+0x14c/0x550 [ 93.712087][ T3798] ? ref_tracker_free+0x6b0/0x6b0 [ 93.717094][ T3798] ? lock_release+0x720/0x720 [ 93.721756][ T3798] ? do_raw_spin_lock+0x120/0x2a0 [ 93.726763][ T3798] ? rwlock_bug.part.0+0x90/0x90 [ 93.731858][ T3798] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 93.737309][ T3798] linkwatch_fire_event+0x202/0x260 [ 93.742513][ T3798] netif_carrier_off+0x96/0xb0 [ 93.747267][ T3798] __tun_detach+0xfe7/0x13e0 [ 93.751855][ T3798] tun_chr_close+0xc4/0x180 [ 93.756342][ T3798] __fput+0x277/0x9d0 [ 93.760312][ T3798] ? __tun_detach+0x13e0/0x13e0 [ 93.765151][ T3798] task_work_run+0xdd/0x1a0 [ 93.769644][ T3798] ptrace_notify+0x114/0x140 [ 93.774224][ T3798] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 93.780452][ T3798] syscall_exit_to_user_mode+0x9/0x60 [ 93.785812][ T3798] do_syscall_64+0x42/0xb0 [ 93.790217][ T3798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.796099][ T3798] RIP: 0033:0x7fc6cd2767a3 [ 93.800519][ T3798] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 93.820115][ T3798] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 93.828521][ T3798] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 93.836476][ T3798] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 93.844450][ T3798] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 93.852433][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 93.860427][ T3798] R13: 00000000000f4240 R14: 0000000000016c76 R15: 00007ffdc49a5924 [ 93.868440][ T3798] [pid 3798] close(3) = 0 [pid 3798] close(4) = 0 [pid 3798] close(5) = -1 EBADF (Bad file descriptor) [pid 3798] close(6) = -1 EBADF (Bad file descriptor) [pid 3798] close(7) = -1 EBADF (Bad file descriptor) [pid 3798] close(8) = -1 EBADF (Bad file descriptor) [pid 3798] close(9) = -1 EBADF (Bad file descriptor) [pid 3798] close(10) = -1 EBADF (Bad file descriptor) [pid 3798] close(11) = -1 EBADF (Bad file descriptor) [pid 3798] close(12) = -1 EBADF (Bad file descriptor) [pid 3798] close(13) = -1 EBADF (Bad file descriptor) [pid 3798] close(14) = -1 EBADF (Bad file descriptor) [pid 3798] close(15) = -1 EBADF (Bad file descriptor) [pid 3798] close(16) = -1 EBADF (Bad file descriptor) [pid 3798] close(17) = -1 EBADF (Bad file descriptor) [pid 3798] close(18) = -1 EBADF (Bad file descriptor) [pid 3798] close(19) = -1 EBADF (Bad file descriptor) [pid 3798] close(20) = -1 EBADF (Bad file descriptor) [pid 3798] close(21) = -1 EBADF (Bad file descriptor) [pid 3798] close(22) = -1 EBADF (Bad file descriptor) [pid 3798] close(23) = -1 EBADF (Bad file descriptor) [pid 3798] close(24) = -1 EBADF (Bad file descriptor) [pid 3798] close(25) = -1 EBADF (Bad file descriptor) [pid 3798] close(26) = -1 EBADF (Bad file descriptor) [pid 3798] close(27) = -1 EBADF (Bad file descriptor) [pid 3798] close(28) = -1 EBADF (Bad file descriptor) [pid 3798] close(29) = -1 EBADF (Bad file descriptor) [pid 3798] exit_group(0) = ? [pid 3798] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=168, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 169 ./strace-static-x86_64: Process 3799 attached [pid 3799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3799] setpgid(0, 0) = 0 [pid 3799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3799] write(3, "1000", 4) = 4 [pid 3799] close(3) = 0 [pid 3799] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3799] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3799] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3799] write(4, "5", 1) = 1 [pid 3799] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 93.942369][ T3799] FAULT_INJECTION: forcing a failure. [ 93.942369][ T3799] name failslab, interval 1, probability 0, space 0, times 0 [ 93.955291][ T3799] CPU: 0 PID: 3799 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 93.965449][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.975530][ T3799] Call Trace: [ 93.978895][ T3799] [ 93.981816][ T3799] dump_stack_lvl+0xcd/0x134 [ 93.986427][ T3799] should_fail.cold+0x5/0xa [ 93.990935][ T3799] should_failslab+0x5/0x10 [ 93.995451][ T3799] kmem_cache_alloc_trace+0x60/0x3f0 [ 94.000754][ T3799] ? ref_tracker_alloc+0x14c/0x550 [ 94.005877][ T3799] ref_tracker_alloc+0x14c/0x550 [ 94.010806][ T3799] ? ref_tracker_free+0x6b0/0x6b0 [ 94.015819][ T3799] ? lock_release+0x720/0x720 [ 94.020490][ T3799] ? do_raw_spin_lock+0x120/0x2a0 [ 94.025596][ T3799] ? rwlock_bug.part.0+0x90/0x90 [ 94.030648][ T3799] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 94.036126][ T3799] linkwatch_fire_event+0x202/0x260 [ 94.041323][ T3799] netif_carrier_off+0x96/0xb0 [ 94.046075][ T3799] __tun_detach+0xfe7/0x13e0 [ 94.050664][ T3799] tun_chr_close+0xc4/0x180 [ 94.055158][ T3799] __fput+0x277/0x9d0 [ 94.059157][ T3799] ? __tun_detach+0x13e0/0x13e0 [ 94.063994][ T3799] task_work_run+0xdd/0x1a0 [ 94.068512][ T3799] ptrace_notify+0x114/0x140 [ 94.073093][ T3799] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 94.079323][ T3799] syscall_exit_to_user_mode+0x9/0x60 [ 94.084682][ T3799] do_syscall_64+0x42/0xb0 [ 94.089088][ T3799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.094968][ T3799] RIP: 0033:0x7fc6cd2767a3 [ 94.099367][ T3799] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 94.119047][ T3799] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 94.127445][ T3799] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 94.135657][ T3799] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 94.143699][ T3799] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 94.151669][ T3799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 94.159712][ T3799] R13: 00000000000f4240 R14: 0000000000016dae R15: 00007ffdc49a5924 [ 94.167684][ T3799] [pid 3799] close(3) = 0 [pid 3799] close(4) = 0 [pid 3799] close(5) = -1 EBADF (Bad file descriptor) [pid 3799] close(6) = -1 EBADF (Bad file descriptor) [pid 3799] close(7) = -1 EBADF (Bad file descriptor) [pid 3799] close(8) = -1 EBADF (Bad file descriptor) [pid 3799] close(9) = -1 EBADF (Bad file descriptor) [pid 3799] close(10) = -1 EBADF (Bad file descriptor) [pid 3799] close(11) = -1 EBADF (Bad file descriptor) [pid 3799] close(12) = -1 EBADF (Bad file descriptor) [pid 3799] close(13) = -1 EBADF (Bad file descriptor) [pid 3799] close(14) = -1 EBADF (Bad file descriptor) [pid 3799] close(15) = -1 EBADF (Bad file descriptor) [pid 3799] close(16) = -1 EBADF (Bad file descriptor) [pid 3799] close(17) = -1 EBADF (Bad file descriptor) [pid 3799] close(18) = -1 EBADF (Bad file descriptor) [pid 3799] close(19) = -1 EBADF (Bad file descriptor) [pid 3799] close(20) = -1 EBADF (Bad file descriptor) [pid 3799] close(21) = -1 EBADF (Bad file descriptor) [pid 3799] close(22) = -1 EBADF (Bad file descriptor) [pid 3799] close(23) = -1 EBADF (Bad file descriptor) [pid 3799] close(24) = -1 EBADF (Bad file descriptor) [pid 3799] close(25) = -1 EBADF (Bad file descriptor) [pid 3799] close(26) = -1 EBADF (Bad file descriptor) [pid 3799] close(27) = -1 EBADF (Bad file descriptor) [pid 3799] close(28) = -1 EBADF (Bad file descriptor) [pid 3799] close(29) = -1 EBADF (Bad file descriptor) [pid 3799] exit_group(0) = ? [pid 3799] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=169, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 170 ./strace-static-x86_64: Process 3800 attached [pid 3800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3800] setpgid(0, 0) = 0 [pid 3800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3800] write(3, "1000", 4) = 4 [pid 3800] close(3) = 0 [pid 3800] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3800] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3800] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3800] write(4, "5", 1) = 1 [pid 3800] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 94.248126][ T3800] FAULT_INJECTION: forcing a failure. [ 94.248126][ T3800] name failslab, interval 1, probability 0, space 0, times 0 [ 94.261006][ T3800] CPU: 0 PID: 3800 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 94.271133][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.281162][ T3800] Call Trace: [ 94.284415][ T3800] [ 94.287412][ T3800] dump_stack_lvl+0xcd/0x134 [ 94.291986][ T3800] should_fail.cold+0x5/0xa [ 94.296815][ T3800] should_failslab+0x5/0x10 [ 94.301297][ T3800] kmem_cache_alloc_trace+0x60/0x3f0 [ 94.306564][ T3800] ? ref_tracker_alloc+0x14c/0x550 [ 94.311672][ T3800] ref_tracker_alloc+0x14c/0x550 [ 94.316598][ T3800] ? ref_tracker_free+0x6b0/0x6b0 [ 94.321608][ T3800] ? lock_release+0x720/0x720 [ 94.326275][ T3800] ? do_raw_spin_lock+0x120/0x2a0 [ 94.331287][ T3800] ? rwlock_bug.part.0+0x90/0x90 [ 94.336213][ T3800] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 94.341579][ T3800] linkwatch_fire_event+0x202/0x260 [ 94.346769][ T3800] netif_carrier_off+0x96/0xb0 [ 94.351553][ T3800] __tun_detach+0xfe7/0x13e0 [ 94.356224][ T3800] tun_chr_close+0xc4/0x180 [ 94.360711][ T3800] __fput+0x277/0x9d0 [ 94.364678][ T3800] ? __tun_detach+0x13e0/0x13e0 [ 94.369516][ T3800] task_work_run+0xdd/0x1a0 [ 94.374027][ T3800] ptrace_notify+0x114/0x140 [ 94.378618][ T3800] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 94.384937][ T3800] syscall_exit_to_user_mode+0x9/0x60 [ 94.390294][ T3800] do_syscall_64+0x42/0xb0 [ 94.394786][ T3800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.400838][ T3800] RIP: 0033:0x7fc6cd2767a3 [ 94.405234][ T3800] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 94.425105][ T3800] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 94.433517][ T3800] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3800] close(3) = 0 [pid 3800] close(4) = 0 [pid 3800] close(5) = -1 EBADF (Bad file descriptor) [pid 3800] close(6) = -1 EBADF (Bad file descriptor) [pid 3800] close(7) = -1 EBADF (Bad file descriptor) [pid 3800] close(8) = -1 EBADF (Bad file descriptor) [pid 3800] close(9) = -1 EBADF (Bad file descriptor) [pid 3800] close(10) = -1 EBADF (Bad file descriptor) [pid 3800] close(11) = -1 EBADF (Bad file descriptor) [pid 3800] close(12) = -1 EBADF (Bad file descriptor) [pid 3800] close(13) = -1 EBADF (Bad file descriptor) [pid 3800] close(14) = -1 EBADF (Bad file descriptor) [pid 3800] close(15) = -1 EBADF (Bad file descriptor) [pid 3800] close(16) = -1 EBADF (Bad file descriptor) [pid 3800] close(17) = -1 EBADF (Bad file descriptor) [pid 3800] close(18) = -1 EBADF (Bad file descriptor) [pid 3800] close(19) = -1 EBADF (Bad file descriptor) [pid 3800] close(20) = -1 EBADF (Bad file descriptor) [pid 3800] close(21) = -1 EBADF (Bad file descriptor) [pid 3800] close(22) = -1 EBADF (Bad file descriptor) [pid 3800] close(23) = -1 EBADF (Bad file descriptor) [pid 3800] close(24) = -1 EBADF (Bad file descriptor) [pid 3800] close(25) = -1 EBADF (Bad file descriptor) [pid 3800] close(26) = -1 EBADF (Bad file descriptor) [pid 3800] close(27) = -1 EBADF (Bad file descriptor) [pid 3800] close(28) = -1 EBADF (Bad file descriptor) [pid 3800] close(29) = -1 EBADF (Bad file descriptor) [pid 3800] exit_group(0) = ? [pid 3800] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3801 attached [pid 3801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 171 [pid 3801] <... prctl resumed>) = 0 [pid 3801] setpgid(0, 0) = 0 [pid 3801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3801] write(3, "1000", 4) = 4 [pid 3801] close(3) = 0 [ 94.441477][ T3800] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 94.449438][ T3800] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 94.457394][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 94.465351][ T3800] R13: 00000000000f4240 R14: 0000000000016eda R15: 00007ffdc49a5924 [ 94.473322][ T3800] [pid 3801] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3801] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3801] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3801] write(4, "5", 1) = 1 [pid 3801] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 94.537699][ T3801] FAULT_INJECTION: forcing a failure. [ 94.537699][ T3801] name failslab, interval 1, probability 0, space 0, times 0 [ 94.550416][ T3801] CPU: 0 PID: 3801 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 94.560563][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.570619][ T3801] Call Trace: [ 94.573883][ T3801] [ 94.576799][ T3801] dump_stack_lvl+0xcd/0x134 [ 94.581387][ T3801] should_fail.cold+0x5/0xa [ 94.585893][ T3801] should_failslab+0x5/0x10 [ 94.590382][ T3801] kmem_cache_alloc_trace+0x60/0x3f0 [ 94.595673][ T3801] ? ref_tracker_alloc+0x14c/0x550 [ 94.600797][ T3801] ref_tracker_alloc+0x14c/0x550 [ 94.605723][ T3801] ? ref_tracker_free+0x6b0/0x6b0 [ 94.610732][ T3801] ? lock_release+0x720/0x720 [ 94.615400][ T3801] ? do_raw_spin_lock+0x120/0x2a0 [ 94.620414][ T3801] ? rwlock_bug.part.0+0x90/0x90 [ 94.625341][ T3801] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 94.630712][ T3801] linkwatch_fire_event+0x202/0x260 [ 94.635908][ T3801] netif_carrier_off+0x96/0xb0 [ 94.640660][ T3801] __tun_detach+0xfe7/0x13e0 [ 94.645247][ T3801] tun_chr_close+0xc4/0x180 [ 94.649744][ T3801] __fput+0x277/0x9d0 [ 94.653717][ T3801] ? __tun_detach+0x13e0/0x13e0 [ 94.658557][ T3801] task_work_run+0xdd/0x1a0 [ 94.663054][ T3801] ptrace_notify+0x114/0x140 [ 94.667637][ T3801] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 94.673870][ T3801] syscall_exit_to_user_mode+0x9/0x60 [ 94.679231][ T3801] do_syscall_64+0x42/0xb0 [ 94.683634][ T3801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.689516][ T3801] RIP: 0033:0x7fc6cd2767a3 [ 94.694089][ T3801] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 94.713692][ T3801] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 94.722100][ T3801] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 94.730060][ T3801] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 94.738018][ T3801] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 94.746148][ T3801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 94.754106][ T3801] R13: 00000000000f4240 R14: 000000000001700a R15: 00007ffdc49a5924 [ 94.762170][ T3801] [pid 3801] close(3) = 0 [pid 3801] close(4) = 0 [pid 3801] close(5) = -1 EBADF (Bad file descriptor) [pid 3801] close(6) = -1 EBADF (Bad file descriptor) [pid 3801] close(7) = -1 EBADF (Bad file descriptor) [pid 3801] close(8) = -1 EBADF (Bad file descriptor) [pid 3801] close(9) = -1 EBADF (Bad file descriptor) [pid 3801] close(10) = -1 EBADF (Bad file descriptor) [pid 3801] close(11) = -1 EBADF (Bad file descriptor) [pid 3801] close(12) = -1 EBADF (Bad file descriptor) [pid 3801] close(13) = -1 EBADF (Bad file descriptor) [pid 3801] close(14) = -1 EBADF (Bad file descriptor) [pid 3801] close(15) = -1 EBADF (Bad file descriptor) [pid 3801] close(16) = -1 EBADF (Bad file descriptor) [pid 3801] close(17) = -1 EBADF (Bad file descriptor) [pid 3801] close(18) = -1 EBADF (Bad file descriptor) [pid 3801] close(19) = -1 EBADF (Bad file descriptor) [pid 3801] close(20) = -1 EBADF (Bad file descriptor) [pid 3801] close(21) = -1 EBADF (Bad file descriptor) [pid 3801] close(22) = -1 EBADF (Bad file descriptor) [pid 3801] close(23) = -1 EBADF (Bad file descriptor) [pid 3801] close(24) = -1 EBADF (Bad file descriptor) [pid 3801] close(25) = -1 EBADF (Bad file descriptor) [pid 3801] close(26) = -1 EBADF (Bad file descriptor) [pid 3801] close(27) = -1 EBADF (Bad file descriptor) [pid 3801] close(28) = -1 EBADF (Bad file descriptor) [pid 3801] close(29) = -1 EBADF (Bad file descriptor) [pid 3801] exit_group(0) = ? [pid 3801] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=171, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3802 attached , child_tidptr=0x5555570bd5d0) = 172 [pid 3802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3802] setpgid(0, 0) = 0 [pid 3802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3802] write(3, "1000", 4) = 4 [pid 3802] close(3) = 0 [pid 3802] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3802] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3802] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3802] write(4, "5", 1) = 1 [pid 3802] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 94.846973][ T3802] FAULT_INJECTION: forcing a failure. [ 94.846973][ T3802] name failslab, interval 1, probability 0, space 0, times 0 [ 94.860261][ T3802] CPU: 0 PID: 3802 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 94.870689][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.880911][ T3802] Call Trace: [ 94.884180][ T3802] [ 94.887121][ T3802] dump_stack_lvl+0xcd/0x134 [ 94.891703][ T3802] should_fail.cold+0x5/0xa [ 94.896201][ T3802] should_failslab+0x5/0x10 [ 94.900703][ T3802] kmem_cache_alloc_trace+0x60/0x3f0 [ 94.905994][ T3802] ? ref_tracker_alloc+0x14c/0x550 [ 94.911100][ T3802] ref_tracker_alloc+0x14c/0x550 [ 94.916027][ T3802] ? ref_tracker_free+0x6b0/0x6b0 [ 94.921050][ T3802] ? lock_release+0x720/0x720 [ 94.925712][ T3802] ? do_raw_spin_lock+0x120/0x2a0 [ 94.930725][ T3802] ? rwlock_bug.part.0+0x90/0x90 [ 94.935668][ T3802] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 94.941049][ T3802] linkwatch_fire_event+0x202/0x260 [ 94.946243][ T3802] netif_carrier_off+0x96/0xb0 [ 94.950997][ T3802] __tun_detach+0xfe7/0x13e0 [ 94.955597][ T3802] tun_chr_close+0xc4/0x180 [ 94.960088][ T3802] __fput+0x277/0x9d0 [ 94.964056][ T3802] ? __tun_detach+0x13e0/0x13e0 [ 94.968954][ T3802] task_work_run+0xdd/0x1a0 [ 94.973490][ T3802] ptrace_notify+0x114/0x140 [ 94.978070][ T3802] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 94.984303][ T3802] syscall_exit_to_user_mode+0x9/0x60 [ 94.989665][ T3802] do_syscall_64+0x42/0xb0 [ 94.994171][ T3802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.000088][ T3802] RIP: 0033:0x7fc6cd2767a3 [ 95.004718][ T3802] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 95.024414][ T3802] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 95.033004][ T3802] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3802] close(3) = 0 [pid 3802] close(4) = 0 [pid 3802] close(5) = -1 EBADF (Bad file descriptor) [pid 3802] close(6) = -1 EBADF (Bad file descriptor) [pid 3802] close(7) = -1 EBADF (Bad file descriptor) [pid 3802] close(8) = -1 EBADF (Bad file descriptor) [pid 3802] close(9) = -1 EBADF (Bad file descriptor) [pid 3802] close(10) = -1 EBADF (Bad file descriptor) [pid 3802] close(11) = -1 EBADF (Bad file descriptor) [pid 3802] close(12) = -1 EBADF (Bad file descriptor) [pid 3802] close(13) = -1 EBADF (Bad file descriptor) [pid 3802] close(14) = -1 EBADF (Bad file descriptor) [pid 3802] close(15) = -1 EBADF (Bad file descriptor) [pid 3802] close(16) = -1 EBADF (Bad file descriptor) [pid 3802] close(17) = -1 EBADF (Bad file descriptor) [pid 3802] close(18) = -1 EBADF (Bad file descriptor) [pid 3802] close(19) = -1 EBADF (Bad file descriptor) [pid 3802] close(20) = -1 EBADF (Bad file descriptor) [pid 3802] close(21) = -1 EBADF (Bad file descriptor) [pid 3802] close(22) = -1 EBADF (Bad file descriptor) [ 95.040978][ T3802] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 95.049035][ T3802] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 95.057434][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 95.065404][ T3802] R13: 00000000000f4240 R14: 000000000001712a R15: 00007ffdc49a5924 [ 95.073394][ T3802] [pid 3802] close(23) = -1 EBADF (Bad file descriptor) [pid 3802] close(24) = -1 EBADF (Bad file descriptor) [pid 3802] close(25) = -1 EBADF (Bad file descriptor) [pid 3802] close(26) = -1 EBADF (Bad file descriptor) [pid 3802] close(27) = -1 EBADF (Bad file descriptor) [pid 3802] close(28) = -1 EBADF (Bad file descriptor) [pid 3802] close(29) = -1 EBADF (Bad file descriptor) [pid 3802] exit_group(0) = ? [pid 3802] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=172, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 173 ./strace-static-x86_64: Process 3803 attached [pid 3803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3803] setpgid(0, 0) = 0 [pid 3803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3803] write(3, "1000", 4) = 4 [pid 3803] close(3) = 0 [pid 3803] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3803] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3803] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3803] write(4, "5", 1) = 1 [ 95.143282][ T3803] FAULT_INJECTION: forcing a failure. [ 95.143282][ T3803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.156791][ T3803] CPU: 0 PID: 3803 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 95.167580][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.177645][ T3803] Call Trace: [ 95.180926][ T3803] [ 95.184021][ T3803] dump_stack_lvl+0xcd/0x134 [ 95.188622][ T3803] should_fail.cold+0x5/0xa [ 95.193153][ T3803] prepare_alloc_pages+0x17b/0x570 [ 95.198272][ T3803] __alloc_pages+0x12f/0x500 [ 95.202872][ T3803] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 95.209748][ T3803] ? ___slab_alloc+0x47e/0xf20 [ 95.214520][ T3803] alloc_pages+0x1aa/0x310 [ 95.218958][ T3803] ? mark_held_locks+0x9f/0xe0 [ 95.223735][ T3803] allocate_slab+0x26c/0x3c0 [ 95.228319][ T3803] ___slab_alloc+0x8df/0xf20 [ 95.232990][ T3803] ? napi_skb_cache_get+0xeb/0x170 [ 95.238097][ T3803] ? mark_held_locks+0x9f/0xe0 [ 95.242865][ T3803] kmem_cache_alloc_bulk+0x21c/0x720 [ 95.248154][ T3803] napi_skb_cache_get+0xeb/0x170 [ 95.253087][ T3803] __alloc_skb+0x9b/0x340 [ 95.257410][ T3803] ? __lock_acquire+0xbca/0x56c0 [ 95.262350][ T3803] __napi_alloc_skb+0x70/0x310 [ 95.267114][ T3803] napi_get_frags+0x5e/0x140 [ 95.271697][ T3803] tun_get_user+0xa07/0x3b00 [ 95.276296][ T3803] ? tun_build_skb+0x1170/0x1170 [ 95.281230][ T3803] ? lock_downgrade+0x6e0/0x6e0 [ 95.286074][ T3803] ? find_held_lock+0x2d/0x110 [ 95.290838][ T3803] tun_chr_write_iter+0xdb/0x200 [ 95.295768][ T3803] do_iter_readv_writev+0x3d1/0x640 [ 95.301056][ T3803] ? new_sync_write+0x560/0x560 [ 95.305898][ T3803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 95.312127][ T3803] ? security_file_permission+0xab/0xd0 [ 95.317669][ T3803] do_iter_write+0x182/0x700 [ 95.322253][ T3803] ? import_iovec+0x10c/0x150 [ 95.326923][ T3803] vfs_writev+0x1aa/0x630 [ 95.331242][ T3803] ? vfs_iter_write+0xa0/0xa0 [ 95.335904][ T3803] ? do_raw_spin_lock+0x120/0x2a0 [ 95.340924][ T3803] ? rwlock_bug.part.0+0x90/0x90 [ 95.345854][ T3803] ? _raw_spin_lock_irq+0x41/0x50 [ 95.350876][ T3803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 95.357113][ T3803] ? find_held_lock+0x2d/0x110 [ 95.361875][ T3803] ? ptrace_notify+0xfa/0x140 [ 95.366549][ T3803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 95.372778][ T3803] ? __fget_light+0x20f/0x270 [ 95.377449][ T3803] do_writev+0x133/0x2f0 [ 95.381710][ T3803] ? vfs_writev+0x630/0x630 [ 95.386199][ T3803] ? lockdep_hardirqs_on+0x79/0x100 [ 95.391386][ T3803] ? _raw_spin_unlock_irq+0x2a/0x40 [ 95.396572][ T3803] ? ptrace_notify+0xfa/0x140 [ 95.401242][ T3803] do_syscall_64+0x35/0xb0 [ 95.405649][ T3803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.411529][ T3803] RIP: 0033:0x7fc6cd2b4c39 [ 95.415929][ T3803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 95.435525][ T3803] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3803] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 95.443948][ T3803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 95.451935][ T3803] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 95.459907][ T3803] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 95.467871][ T3803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 95.475834][ T3803] R13: 00000000000f4240 R14: 000000000001725e R15: 00007ffdc49a5924 [ 95.483811][ T3803] [pid 3803] close(3) = 0 [pid 3803] close(4) = 0 [pid 3803] close(5) = -1 EBADF (Bad file descriptor) [pid 3803] close(6) = -1 EBADF (Bad file descriptor) [pid 3803] close(7) = -1 EBADF (Bad file descriptor) [pid 3803] close(8) = -1 EBADF (Bad file descriptor) [pid 3803] close(9) = -1 EBADF (Bad file descriptor) [pid 3803] close(10) = -1 EBADF (Bad file descriptor) [pid 3803] close(11) = -1 EBADF (Bad file descriptor) [pid 3803] close(12) = -1 EBADF (Bad file descriptor) [pid 3803] close(13) = -1 EBADF (Bad file descriptor) [pid 3803] close(14) = -1 EBADF (Bad file descriptor) [pid 3803] close(15) = -1 EBADF (Bad file descriptor) [pid 3803] close(16) = -1 EBADF (Bad file descriptor) [pid 3803] close(17) = -1 EBADF (Bad file descriptor) [pid 3803] close(18) = -1 EBADF (Bad file descriptor) [pid 3803] close(19) = -1 EBADF (Bad file descriptor) [pid 3803] close(20) = -1 EBADF (Bad file descriptor) [pid 3803] close(21) = -1 EBADF (Bad file descriptor) [pid 3803] close(22) = -1 EBADF (Bad file descriptor) [pid 3803] close(23) = -1 EBADF (Bad file descriptor) [pid 3803] close(24) = -1 EBADF (Bad file descriptor) [pid 3803] close(25) = -1 EBADF (Bad file descriptor) [pid 3803] close(26) = -1 EBADF (Bad file descriptor) [pid 3803] close(27) = -1 EBADF (Bad file descriptor) [pid 3803] close(28) = -1 EBADF (Bad file descriptor) [pid 3803] close(29) = -1 EBADF (Bad file descriptor) [pid 3803] exit_group(0) = ? [pid 3803] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3804 attached , child_tidptr=0x5555570bd5d0) = 174 [pid 3804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3804] setpgid(0, 0) = 0 [pid 3804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3804] write(3, "1000", 4) = 4 [pid 3804] close(3) = 0 [pid 3804] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3804] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3804] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3804] write(4, "5", 1) = 1 [pid 3804] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 95.576277][ T3804] FAULT_INJECTION: forcing a failure. [ 95.576277][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 95.589277][ T3804] CPU: 0 PID: 3804 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 95.599857][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.610000][ T3804] Call Trace: [ 95.613286][ T3804] [ 95.616215][ T3804] dump_stack_lvl+0xcd/0x134 [ 95.620816][ T3804] should_fail.cold+0x5/0xa [ 95.625329][ T3804] should_failslab+0x5/0x10 [ 95.629920][ T3804] kmem_cache_alloc_trace+0x60/0x3f0 [ 95.635213][ T3804] ? ref_tracker_alloc+0x14c/0x550 [ 95.640335][ T3804] ref_tracker_alloc+0x14c/0x550 [ 95.645372][ T3804] ? ref_tracker_free+0x6b0/0x6b0 [ 95.650399][ T3804] ? lock_release+0x720/0x720 [ 95.655080][ T3804] ? do_raw_spin_lock+0x120/0x2a0 [ 95.660101][ T3804] ? rwlock_bug.part.0+0x90/0x90 [ 95.665038][ T3804] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 95.670435][ T3804] linkwatch_fire_event+0x202/0x260 [ 95.675660][ T3804] netif_carrier_off+0x96/0xb0 [ 95.680421][ T3804] __tun_detach+0xfe7/0x13e0 [ 95.685102][ T3804] tun_chr_close+0xc4/0x180 [ 95.689607][ T3804] __fput+0x277/0x9d0 [ 95.693591][ T3804] ? __tun_detach+0x13e0/0x13e0 [ 95.698438][ T3804] task_work_run+0xdd/0x1a0 [ 95.702945][ T3804] ptrace_notify+0x114/0x140 [ 95.707533][ T3804] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 95.713773][ T3804] syscall_exit_to_user_mode+0x9/0x60 [ 95.719145][ T3804] do_syscall_64+0x42/0xb0 [ 95.723564][ T3804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.729460][ T3804] RIP: 0033:0x7fc6cd2767a3 [ 95.733876][ T3804] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 95.753654][ T3804] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 95.762066][ T3804] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3804] close(3) = 0 [pid 3804] close(4) = 0 [pid 3804] close(5) = -1 EBADF (Bad file descriptor) [pid 3804] close(6) = -1 EBADF (Bad file descriptor) [pid 3804] close(7) = -1 EBADF (Bad file descriptor) [pid 3804] close(8) = -1 EBADF (Bad file descriptor) [pid 3804] close(9) = -1 EBADF (Bad file descriptor) [pid 3804] close(10) = -1 EBADF (Bad file descriptor) [pid 3804] close(11) = -1 EBADF (Bad file descriptor) [pid 3804] close(12) = -1 EBADF (Bad file descriptor) [pid 3804] close(13) = -1 EBADF (Bad file descriptor) [pid 3804] close(14) = -1 EBADF (Bad file descriptor) [pid 3804] close(15) = -1 EBADF (Bad file descriptor) [pid 3804] close(16) = -1 EBADF (Bad file descriptor) [pid 3804] close(17) = -1 EBADF (Bad file descriptor) [pid 3804] close(18) = -1 EBADF (Bad file descriptor) [pid 3804] close(19) = -1 EBADF (Bad file descriptor) [pid 3804] close(20) = -1 EBADF (Bad file descriptor) [pid 3804] close(21) = -1 EBADF (Bad file descriptor) [pid 3804] close(22) = -1 EBADF (Bad file descriptor) [pid 3804] close(23) = -1 EBADF (Bad file descriptor) [pid 3804] close(24) = -1 EBADF (Bad file descriptor) [pid 3804] close(25) = -1 EBADF (Bad file descriptor) [pid 3804] close(26) = -1 EBADF (Bad file descriptor) [pid 3804] close(27) = -1 EBADF (Bad file descriptor) [pid 3804] close(28) = -1 EBADF (Bad file descriptor) [pid 3804] close(29) = -1 EBADF (Bad file descriptor) [pid 3804] exit_group(0) = ? [pid 3804] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=174, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3806 attached , child_tidptr=0x5555570bd5d0) = 175 [pid 3806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3806] setpgid(0, 0) = 0 [ 95.770031][ T3804] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 95.777990][ T3804] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 95.785949][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 95.793909][ T3804] R13: 00000000000f4240 R14: 0000000000017388 R15: 00007ffdc49a5924 [ 95.801884][ T3804] [pid 3806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3806] write(3, "1000", 4) = 4 [pid 3806] close(3) = 0 [pid 3806] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3806] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3806] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3806] write(4, "5", 1) = 1 [pid 3806] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 95.868398][ T3806] FAULT_INJECTION: forcing a failure. [ 95.868398][ T3806] name failslab, interval 1, probability 0, space 0, times 0 [ 95.881026][ T3806] CPU: 0 PID: 3806 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 95.891418][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.901469][ T3806] Call Trace: [ 95.904759][ T3806] [ 95.907672][ T3806] dump_stack_lvl+0xcd/0x134 [ 95.912256][ T3806] should_fail.cold+0x5/0xa [ 95.916762][ T3806] should_failslab+0x5/0x10 [ 95.921251][ T3806] kmem_cache_alloc_trace+0x60/0x3f0 [ 95.926616][ T3806] ? ref_tracker_alloc+0x14c/0x550 [ 95.931734][ T3806] ref_tracker_alloc+0x14c/0x550 [ 95.936759][ T3806] ? ref_tracker_free+0x6b0/0x6b0 [ 95.941772][ T3806] ? lock_release+0x720/0x720 [ 95.946532][ T3806] ? do_raw_spin_lock+0x120/0x2a0 [ 95.951555][ T3806] ? rwlock_bug.part.0+0x90/0x90 [ 95.956488][ T3806] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 95.961863][ T3806] linkwatch_fire_event+0x202/0x260 [ 95.967065][ T3806] netif_carrier_off+0x96/0xb0 [ 95.971823][ T3806] __tun_detach+0xfe7/0x13e0 [ 95.976415][ T3806] tun_chr_close+0xc4/0x180 [ 95.980908][ T3806] __fput+0x277/0x9d0 [ 95.984878][ T3806] ? __tun_detach+0x13e0/0x13e0 [ 95.989726][ T3806] task_work_run+0xdd/0x1a0 [ 95.994236][ T3806] ptrace_notify+0x114/0x140 [ 95.998827][ T3806] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 96.005067][ T3806] syscall_exit_to_user_mode+0x9/0x60 [ 96.010439][ T3806] do_syscall_64+0x42/0xb0 [ 96.014885][ T3806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.020810][ T3806] RIP: 0033:0x7fc6cd2767a3 [ 96.025224][ T3806] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 96.044829][ T3806] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 96.053240][ T3806] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 96.061199][ T3806] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3806] close(3) = 0 [pid 3806] close(4) = 0 [pid 3806] close(5) = -1 EBADF (Bad file descriptor) [pid 3806] close(6) = -1 EBADF (Bad file descriptor) [pid 3806] close(7) = -1 EBADF (Bad file descriptor) [pid 3806] close(8) = -1 EBADF (Bad file descriptor) [pid 3806] close(9) = -1 EBADF (Bad file descriptor) [pid 3806] close(10) = -1 EBADF (Bad file descriptor) [pid 3806] close(11) = -1 EBADF (Bad file descriptor) [pid 3806] close(12) = -1 EBADF (Bad file descriptor) [pid 3806] close(13) = -1 EBADF (Bad file descriptor) [pid 3806] close(14) = -1 EBADF (Bad file descriptor) [pid 3806] close(15) = -1 EBADF (Bad file descriptor) [pid 3806] close(16) = -1 EBADF (Bad file descriptor) [pid 3806] close(17) = -1 EBADF (Bad file descriptor) [pid 3806] close(18) = -1 EBADF (Bad file descriptor) [pid 3806] close(19) = -1 EBADF (Bad file descriptor) [pid 3806] close(20) = -1 EBADF (Bad file descriptor) [pid 3806] close(21) = -1 EBADF (Bad file descriptor) [pid 3806] close(22) = -1 EBADF (Bad file descriptor) [pid 3806] close(23) = -1 EBADF (Bad file descriptor) [pid 3806] close(24) = -1 EBADF (Bad file descriptor) [pid 3806] close(25) = -1 EBADF (Bad file descriptor) [pid 3806] close(26) = -1 EBADF (Bad file descriptor) [pid 3806] close(27) = -1 EBADF (Bad file descriptor) [pid 3806] close(28) = -1 EBADF (Bad file descriptor) [pid 3806] close(29) = -1 EBADF (Bad file descriptor) [pid 3806] exit_group(0) = ? [pid 3806] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=175, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3807 attached , child_tidptr=0x5555570bd5d0) = 176 [pid 3807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3807] setpgid(0, 0) = 0 [pid 3807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3807] write(3, "1000", 4) = 4 [ 96.069161][ T3806] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 96.077121][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 96.085164][ T3806] R13: 00000000000f4240 R14: 0000000000017538 R15: 00007ffdc49a5924 [ 96.093137][ T3806] [pid 3807] close(3) = 0 [pid 3807] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3807] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3807] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3807] write(4, "5", 1) = 1 [pid 3807] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 96.157902][ T3807] FAULT_INJECTION: forcing a failure. [ 96.157902][ T3807] name failslab, interval 1, probability 0, space 0, times 0 [ 96.171015][ T3807] CPU: 0 PID: 3807 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 96.181160][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.191212][ T3807] Call Trace: [ 96.194486][ T3807] [ 96.197414][ T3807] dump_stack_lvl+0xcd/0x134 [ 96.202023][ T3807] should_fail.cold+0x5/0xa [ 96.206535][ T3807] should_failslab+0x5/0x10 [ 96.211057][ T3807] kmem_cache_alloc_trace+0x60/0x3f0 [ 96.216351][ T3807] ? ref_tracker_alloc+0x14c/0x550 [ 96.221486][ T3807] ref_tracker_alloc+0x14c/0x550 [ 96.226432][ T3807] ? ref_tracker_free+0x6b0/0x6b0 [ 96.231452][ T3807] ? lock_release+0x720/0x720 [ 96.236140][ T3807] ? do_raw_spin_lock+0x120/0x2a0 [ 96.241176][ T3807] ? rwlock_bug.part.0+0x90/0x90 [ 96.246117][ T3807] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 96.251493][ T3807] linkwatch_fire_event+0x202/0x260 [ 96.256698][ T3807] netif_carrier_off+0x96/0xb0 [ 96.261460][ T3807] __tun_detach+0xfe7/0x13e0 [ 96.266069][ T3807] tun_chr_close+0xc4/0x180 [ 96.270570][ T3807] __fput+0x277/0x9d0 [ 96.274553][ T3807] ? __tun_detach+0x13e0/0x13e0 [ 96.279406][ T3807] task_work_run+0xdd/0x1a0 [ 96.283914][ T3807] ptrace_notify+0x114/0x140 [ 96.288504][ T3807] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 96.294833][ T3807] syscall_exit_to_user_mode+0x9/0x60 [ 96.300200][ T3807] do_syscall_64+0x42/0xb0 [ 96.304612][ T3807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.310501][ T3807] RIP: 0033:0x7fc6cd2767a3 [ 96.314912][ T3807] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 96.334521][ T3807] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 96.342934][ T3807] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 96.350903][ T3807] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3807] close(3) = 0 [pid 3807] close(4) = 0 [pid 3807] close(5) = -1 EBADF (Bad file descriptor) [pid 3807] close(6) = -1 EBADF (Bad file descriptor) [pid 3807] close(7) = -1 EBADF (Bad file descriptor) [pid 3807] close(8) = -1 EBADF (Bad file descriptor) [pid 3807] close(9) = -1 EBADF (Bad file descriptor) [pid 3807] close(10) = -1 EBADF (Bad file descriptor) [pid 3807] close(11) = -1 EBADF (Bad file descriptor) [pid 3807] close(12) = -1 EBADF (Bad file descriptor) [pid 3807] close(13) = -1 EBADF (Bad file descriptor) [pid 3807] close(14) = -1 EBADF (Bad file descriptor) [ 96.358867][ T3807] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 96.366829][ T3807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 96.374789][ T3807] R13: 00000000000f4240 R14: 000000000001765b R15: 00007ffdc49a5924 [ 96.382771][ T3807] [pid 3807] close(15) = -1 EBADF (Bad file descriptor) [pid 3807] close(16) = -1 EBADF (Bad file descriptor) [pid 3807] close(17) = -1 EBADF (Bad file descriptor) [pid 3807] close(18) = -1 EBADF (Bad file descriptor) [pid 3807] close(19) = -1 EBADF (Bad file descriptor) [pid 3807] close(20) = -1 EBADF (Bad file descriptor) [pid 3807] close(21) = -1 EBADF (Bad file descriptor) [pid 3807] close(22) = -1 EBADF (Bad file descriptor) [pid 3807] close(23) = -1 EBADF (Bad file descriptor) [pid 3807] close(24) = -1 EBADF (Bad file descriptor) [pid 3807] close(25) = -1 EBADF (Bad file descriptor) [pid 3807] close(26) = -1 EBADF (Bad file descriptor) [pid 3807] close(27) = -1 EBADF (Bad file descriptor) [pid 3807] close(28) = -1 EBADF (Bad file descriptor) [pid 3807] close(29) = -1 EBADF (Bad file descriptor) [pid 3807] exit_group(0) = ? [pid 3807] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3808 attached , child_tidptr=0x5555570bd5d0) = 177 [pid 3808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3808] setpgid(0, 0) = 0 [pid 3808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3808] write(3, "1000", 4) = 4 [pid 3808] close(3) = 0 [pid 3808] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3808] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3808] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3808] write(4, "5", 1) = 1 [pid 3808] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 96.455210][ T3808] FAULT_INJECTION: forcing a failure. [ 96.455210][ T3808] name failslab, interval 1, probability 0, space 0, times 0 [ 96.468338][ T3808] CPU: 0 PID: 3808 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 96.479104][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.489349][ T3808] Call Trace: [ 96.492631][ T3808] [ 96.495549][ T3808] dump_stack_lvl+0xcd/0x134 [ 96.500141][ T3808] should_fail.cold+0x5/0xa [ 96.504643][ T3808] should_failslab+0x5/0x10 [ 96.509144][ T3808] kmem_cache_alloc_trace+0x60/0x3f0 [ 96.514457][ T3808] ? ref_tracker_alloc+0x14c/0x550 [ 96.519568][ T3808] ref_tracker_alloc+0x14c/0x550 [ 96.524498][ T3808] ? ref_tracker_free+0x6b0/0x6b0 [ 96.529508][ T3808] ? lock_release+0x720/0x720 [ 96.534179][ T3808] ? do_raw_spin_lock+0x120/0x2a0 [ 96.539197][ T3808] ? rwlock_bug.part.0+0x90/0x90 [ 96.544135][ T3808] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 96.549596][ T3808] linkwatch_fire_event+0x202/0x260 [ 96.554791][ T3808] netif_carrier_off+0x96/0xb0 [ 96.559550][ T3808] __tun_detach+0xfe7/0x13e0 [ 96.564147][ T3808] tun_chr_close+0xc4/0x180 [ 96.568641][ T3808] __fput+0x277/0x9d0 [ 96.572613][ T3808] ? __tun_detach+0x13e0/0x13e0 [ 96.577455][ T3808] task_work_run+0xdd/0x1a0 [ 96.581952][ T3808] ptrace_notify+0x114/0x140 [ 96.586531][ T3808] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 96.592764][ T3808] syscall_exit_to_user_mode+0x9/0x60 [ 96.598127][ T3808] do_syscall_64+0x42/0xb0 [ 96.602539][ T3808] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.608426][ T3808] RIP: 0033:0x7fc6cd2767a3 [ 96.612829][ T3808] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 96.632609][ T3808] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 96.641019][ T3808] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 96.648983][ T3808] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 96.656942][ T3808] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 96.664898][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 96.672856][ T3808] R13: 00000000000f4240 R14: 000000000001777d R15: 00007ffdc49a5924 [ 96.680837][ T3808] [pid 3808] close(3) = 0 [pid 3808] close(4) = 0 [pid 3808] close(5) = -1 EBADF (Bad file descriptor) [pid 3808] close(6) = -1 EBADF (Bad file descriptor) [pid 3808] close(7) = -1 EBADF (Bad file descriptor) [pid 3808] close(8) = -1 EBADF (Bad file descriptor) [pid 3808] close(9) = -1 EBADF (Bad file descriptor) [pid 3808] close(10) = -1 EBADF (Bad file descriptor) [pid 3808] close(11) = -1 EBADF (Bad file descriptor) [pid 3808] close(12) = -1 EBADF (Bad file descriptor) [pid 3808] close(13) = -1 EBADF (Bad file descriptor) [pid 3808] close(14) = -1 EBADF (Bad file descriptor) [pid 3808] close(15) = -1 EBADF (Bad file descriptor) [pid 3808] close(16) = -1 EBADF (Bad file descriptor) [pid 3808] close(17) = -1 EBADF (Bad file descriptor) [pid 3808] close(18) = -1 EBADF (Bad file descriptor) [pid 3808] close(19) = -1 EBADF (Bad file descriptor) [pid 3808] close(20) = -1 EBADF (Bad file descriptor) [pid 3808] close(21) = -1 EBADF (Bad file descriptor) [pid 3808] close(22) = -1 EBADF (Bad file descriptor) [pid 3808] close(23) = -1 EBADF (Bad file descriptor) [pid 3808] close(24) = -1 EBADF (Bad file descriptor) [pid 3808] close(25) = -1 EBADF (Bad file descriptor) [pid 3808] close(26) = -1 EBADF (Bad file descriptor) [pid 3808] close(27) = -1 EBADF (Bad file descriptor) [pid 3808] close(28) = -1 EBADF (Bad file descriptor) [pid 3808] close(29) = -1 EBADF (Bad file descriptor) [pid 3808] exit_group(0) = ? [pid 3808] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=177, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3809 attached , child_tidptr=0x5555570bd5d0) = 178 [pid 3809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3809] setpgid(0, 0) = 0 [pid 3809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3809] write(3, "1000", 4) = 4 [pid 3809] close(3) = 0 [pid 3809] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3809] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3809] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3809] write(4, "5", 1) = 1 [pid 3809] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 96.764737][ T3809] FAULT_INJECTION: forcing a failure. [ 96.764737][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 96.777795][ T3809] CPU: 0 PID: 3809 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 96.788227][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.798277][ T3809] Call Trace: [ 96.801550][ T3809] [ 96.804492][ T3809] dump_stack_lvl+0xcd/0x134 [ 96.809078][ T3809] should_fail.cold+0x5/0xa [ 96.813577][ T3809] should_failslab+0x5/0x10 [ 96.818072][ T3809] kmem_cache_alloc_trace+0x60/0x3f0 [ 96.823362][ T3809] ? ref_tracker_alloc+0x14c/0x550 [ 96.828488][ T3809] ref_tracker_alloc+0x14c/0x550 [ 96.833414][ T3809] ? ref_tracker_free+0x6b0/0x6b0 [ 96.838423][ T3809] ? lock_release+0x720/0x720 [ 96.843090][ T3809] ? do_raw_spin_lock+0x120/0x2a0 [ 96.848105][ T3809] ? rwlock_bug.part.0+0x90/0x90 [ 96.853033][ T3809] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 96.858401][ T3809] linkwatch_fire_event+0x202/0x260 [ 96.863592][ T3809] netif_carrier_off+0x96/0xb0 [ 96.868346][ T3809] __tun_detach+0xfe7/0x13e0 [ 96.872933][ T3809] tun_chr_close+0xc4/0x180 [ 96.877423][ T3809] __fput+0x277/0x9d0 [ 96.881391][ T3809] ? __tun_detach+0x13e0/0x13e0 [ 96.886233][ T3809] task_work_run+0xdd/0x1a0 [ 96.890731][ T3809] ptrace_notify+0x114/0x140 [ 96.895310][ T3809] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 96.901544][ T3809] syscall_exit_to_user_mode+0x9/0x60 [ 96.906929][ T3809] do_syscall_64+0x42/0xb0 [ 96.911338][ T3809] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.917219][ T3809] RIP: 0033:0x7fc6cd2767a3 [ 96.921620][ T3809] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 96.941303][ T3809] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 96.949709][ T3809] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 96.957688][ T3809] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 96.965650][ T3809] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 96.973610][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 96.981565][ T3809] R13: 00000000000f4240 R14: 00000000000178a7 R15: 00007ffdc49a5924 [ 96.989537][ T3809] [pid 3809] close(3) = 0 [pid 3809] close(4) = 0 [pid 3809] close(5) = -1 EBADF (Bad file descriptor) [pid 3809] close(6) = -1 EBADF (Bad file descriptor) [pid 3809] close(7) = -1 EBADF (Bad file descriptor) [pid 3809] close(8) = -1 EBADF (Bad file descriptor) [pid 3809] close(9) = -1 EBADF (Bad file descriptor) [pid 3809] close(10) = -1 EBADF (Bad file descriptor) [pid 3809] close(11) = -1 EBADF (Bad file descriptor) [pid 3809] close(12) = -1 EBADF (Bad file descriptor) [pid 3809] close(13) = -1 EBADF (Bad file descriptor) [pid 3809] close(14) = -1 EBADF (Bad file descriptor) [pid 3809] close(15) = -1 EBADF (Bad file descriptor) [pid 3809] close(16) = -1 EBADF (Bad file descriptor) [pid 3809] close(17) = -1 EBADF (Bad file descriptor) [pid 3809] close(18) = -1 EBADF (Bad file descriptor) [pid 3809] close(19) = -1 EBADF (Bad file descriptor) [pid 3809] close(20) = -1 EBADF (Bad file descriptor) [pid 3809] close(21) = -1 EBADF (Bad file descriptor) [pid 3809] close(22) = -1 EBADF (Bad file descriptor) [pid 3809] close(23) = -1 EBADF (Bad file descriptor) [pid 3809] close(24) = -1 EBADF (Bad file descriptor) [pid 3809] close(25) = -1 EBADF (Bad file descriptor) [pid 3809] close(26) = -1 EBADF (Bad file descriptor) [pid 3809] close(27) = -1 EBADF (Bad file descriptor) [pid 3809] close(28) = -1 EBADF (Bad file descriptor) [pid 3809] close(29) = -1 EBADF (Bad file descriptor) [pid 3809] exit_group(0) = ? [pid 3809] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=178, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3810 attached , child_tidptr=0x5555570bd5d0) = 179 [pid 3810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3810] setpgid(0, 0) = 0 [pid 3810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3810] write(3, "1000", 4) = 4 [pid 3810] close(3) = 0 [pid 3810] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3810] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3810] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3810] write(4, "5", 1) = 1 [pid 3810] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 97.066604][ T3810] FAULT_INJECTION: forcing a failure. [ 97.066604][ T3810] name failslab, interval 1, probability 0, space 0, times 0 [ 97.079220][ T3810] CPU: 1 PID: 3810 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 97.089370][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.099529][ T3810] Call Trace: [ 97.102819][ T3810] [ 97.105749][ T3810] dump_stack_lvl+0xcd/0x134 [ 97.110466][ T3810] should_fail.cold+0x5/0xa [ 97.114984][ T3810] should_failslab+0x5/0x10 [ 97.119495][ T3810] kmem_cache_alloc_trace+0x60/0x3f0 [ 97.124783][ T3810] ? ref_tracker_alloc+0x14c/0x550 [ 97.129901][ T3810] ref_tracker_alloc+0x14c/0x550 [ 97.134851][ T3810] ? ref_tracker_free+0x6b0/0x6b0 [ 97.139891][ T3810] ? lock_release+0x720/0x720 [ 97.144571][ T3810] ? do_raw_spin_lock+0x120/0x2a0 [ 97.149610][ T3810] ? rwlock_bug.part.0+0x90/0x90 [ 97.154567][ T3810] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 97.159989][ T3810] linkwatch_fire_event+0x202/0x260 [ 97.165201][ T3810] netif_carrier_off+0x96/0xb0 [ 97.169977][ T3810] __tun_detach+0xfe7/0x13e0 [ 97.174580][ T3810] tun_chr_close+0xc4/0x180 [ 97.179215][ T3810] __fput+0x277/0x9d0 [ 97.183217][ T3810] ? __tun_detach+0x13e0/0x13e0 [ 97.188088][ T3810] task_work_run+0xdd/0x1a0 [ 97.192596][ T3810] ptrace_notify+0x114/0x140 [ 97.197186][ T3810] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 97.203431][ T3810] syscall_exit_to_user_mode+0x9/0x60 [ 97.208802][ T3810] do_syscall_64+0x42/0xb0 [ 97.213311][ T3810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.219226][ T3810] RIP: 0033:0x7fc6cd2767a3 [ 97.223646][ T3810] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 97.243337][ T3810] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 97.251748][ T3810] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3810] close(3) = 0 [pid 3810] close(4) = 0 [pid 3810] close(5) = -1 EBADF (Bad file descriptor) [pid 3810] close(6) = -1 EBADF (Bad file descriptor) [pid 3810] close(7) = -1 EBADF (Bad file descriptor) [ 97.259806][ T3810] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 97.267778][ T3810] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 97.275752][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 97.283829][ T3810] R13: 00000000000f4240 R14: 00000000000179dd R15: 00007ffdc49a5924 [ 97.291917][ T3810] [pid 3810] close(8) = -1 EBADF (Bad file descriptor) [pid 3810] close(9) = -1 EBADF (Bad file descriptor) [pid 3810] close(10) = -1 EBADF (Bad file descriptor) [pid 3810] close(11) = -1 EBADF (Bad file descriptor) [pid 3810] close(12) = -1 EBADF (Bad file descriptor) [pid 3810] close(13) = -1 EBADF (Bad file descriptor) [pid 3810] close(14) = -1 EBADF (Bad file descriptor) [pid 3810] close(15) = -1 EBADF (Bad file descriptor) [pid 3810] close(16) = -1 EBADF (Bad file descriptor) [pid 3810] close(17) = -1 EBADF (Bad file descriptor) [pid 3810] close(18) = -1 EBADF (Bad file descriptor) [pid 3810] close(19) = -1 EBADF (Bad file descriptor) [pid 3810] close(20) = -1 EBADF (Bad file descriptor) [pid 3810] close(21) = -1 EBADF (Bad file descriptor) [pid 3810] close(22) = -1 EBADF (Bad file descriptor) [pid 3810] close(23) = -1 EBADF (Bad file descriptor) [pid 3810] close(24) = -1 EBADF (Bad file descriptor) [pid 3810] close(25) = -1 EBADF (Bad file descriptor) [pid 3810] close(26) = -1 EBADF (Bad file descriptor) [pid 3810] close(27) = -1 EBADF (Bad file descriptor) [pid 3810] close(28) = -1 EBADF (Bad file descriptor) [pid 3810] close(29) = -1 EBADF (Bad file descriptor) [pid 3810] exit_group(0) = ? [pid 3810] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 180 ./strace-static-x86_64: Process 3811 attached [pid 3811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3811] setpgid(0, 0) = 0 [pid 3811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3811] write(3, "1000", 4) = 4 [pid 3811] close(3) = 0 [pid 3811] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3811] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3811] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3811] write(4, "5", 1) = 1 [pid 3811] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 97.368359][ T3811] FAULT_INJECTION: forcing a failure. [ 97.368359][ T3811] name failslab, interval 1, probability 0, space 0, times 0 [ 97.381295][ T3811] CPU: 0 PID: 3811 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 97.391478][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.401551][ T3811] Call Trace: [ 97.404824][ T3811] [ 97.407754][ T3811] dump_stack_lvl+0xcd/0x134 [ 97.412371][ T3811] should_fail.cold+0x5/0xa [ 97.416892][ T3811] should_failslab+0x5/0x10 [ 97.421541][ T3811] kmem_cache_alloc_trace+0x60/0x3f0 [ 97.426830][ T3811] ? ref_tracker_alloc+0x14c/0x550 [ 97.431936][ T3811] ref_tracker_alloc+0x14c/0x550 [ 97.437120][ T3811] ? ref_tracker_free+0x6b0/0x6b0 [ 97.442148][ T3811] ? lock_release+0x720/0x720 [ 97.446833][ T3811] ? do_raw_spin_lock+0x120/0x2a0 [ 97.451856][ T3811] ? rwlock_bug.part.0+0x90/0x90 [ 97.456783][ T3811] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 97.462179][ T3811] linkwatch_fire_event+0x202/0x260 [ 97.467386][ T3811] netif_carrier_off+0x96/0xb0 [ 97.472144][ T3811] __tun_detach+0xfe7/0x13e0 [ 97.476726][ T3811] tun_chr_close+0xc4/0x180 [ 97.481213][ T3811] __fput+0x277/0x9d0 [ 97.485182][ T3811] ? __tun_detach+0x13e0/0x13e0 [ 97.490026][ T3811] task_work_run+0xdd/0x1a0 [ 97.494554][ T3811] ptrace_notify+0x114/0x140 [ 97.499148][ T3811] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 97.505418][ T3811] syscall_exit_to_user_mode+0x9/0x60 [ 97.510821][ T3811] do_syscall_64+0x42/0xb0 [ 97.515263][ T3811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.521165][ T3811] RIP: 0033:0x7fc6cd2767a3 [ 97.525590][ T3811] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 97.545484][ T3811] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 97.553895][ T3811] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3811] close(3) = 0 [pid 3811] close(4) = 0 [pid 3811] close(5) = -1 EBADF (Bad file descriptor) [pid 3811] close(6) = -1 EBADF (Bad file descriptor) [pid 3811] close(7) = -1 EBADF (Bad file descriptor) [pid 3811] close(8) = -1 EBADF (Bad file descriptor) [pid 3811] close(9) = -1 EBADF (Bad file descriptor) [pid 3811] close(10) = -1 EBADF (Bad file descriptor) [pid 3811] close(11) = -1 EBADF (Bad file descriptor) [pid 3811] close(12) = -1 EBADF (Bad file descriptor) [pid 3811] close(13) = -1 EBADF (Bad file descriptor) [pid 3811] close(14) = -1 EBADF (Bad file descriptor) [pid 3811] close(15) = -1 EBADF (Bad file descriptor) [pid 3811] close(16) = -1 EBADF (Bad file descriptor) [pid 3811] close(17) = -1 EBADF (Bad file descriptor) [pid 3811] close(18) = -1 EBADF (Bad file descriptor) [pid 3811] close(19) = -1 EBADF (Bad file descriptor) [pid 3811] close(20) = -1 EBADF (Bad file descriptor) [ 97.561862][ T3811] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 97.569829][ T3811] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 97.577799][ T3811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 97.585767][ T3811] R13: 00000000000f4240 R14: 0000000000017b09 R15: 00007ffdc49a5924 [ 97.593747][ T3811] [pid 3811] close(21) = -1 EBADF (Bad file descriptor) [pid 3811] close(22) = -1 EBADF (Bad file descriptor) [pid 3811] close(23) = -1 EBADF (Bad file descriptor) [pid 3811] close(24) = -1 EBADF (Bad file descriptor) [pid 3811] close(25) = -1 EBADF (Bad file descriptor) [pid 3811] close(26) = -1 EBADF (Bad file descriptor) [pid 3811] close(27) = -1 EBADF (Bad file descriptor) [pid 3811] close(28) = -1 EBADF (Bad file descriptor) [pid 3811] close(29) = -1 EBADF (Bad file descriptor) [pid 3811] exit_group(0) = ? [pid 3811] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=180, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 181 ./strace-static-x86_64: Process 3812 attached [pid 3812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3812] setpgid(0, 0) = 0 [pid 3812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3812] write(3, "1000", 4) = 4 [pid 3812] close(3) = 0 [pid 3812] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3812] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3812] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3812] write(4, "5", 1) = 1 [pid 3812] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 97.664884][ T3812] FAULT_INJECTION: forcing a failure. [ 97.664884][ T3812] name failslab, interval 1, probability 0, space 0, times 0 [ 97.677628][ T3812] CPU: 0 PID: 3812 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 97.687787][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.697830][ T3812] Call Trace: [ 97.701097][ T3812] [ 97.704257][ T3812] dump_stack_lvl+0xcd/0x134 [ 97.709056][ T3812] should_fail.cold+0x5/0xa [ 97.713571][ T3812] should_failslab+0x5/0x10 [ 97.718074][ T3812] kmem_cache_alloc_trace+0x60/0x3f0 [ 97.723357][ T3812] ? ref_tracker_alloc+0x14c/0x550 [ 97.728467][ T3812] ref_tracker_alloc+0x14c/0x550 [ 97.733433][ T3812] ? ref_tracker_free+0x6b0/0x6b0 [ 97.738456][ T3812] ? lock_release+0x720/0x720 [ 97.743138][ T3812] ? do_raw_spin_lock+0x120/0x2a0 [ 97.748161][ T3812] ? rwlock_bug.part.0+0x90/0x90 [ 97.753103][ T3812] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 97.758496][ T3812] linkwatch_fire_event+0x202/0x260 [ 97.763703][ T3812] netif_carrier_off+0x96/0xb0 [ 97.768465][ T3812] __tun_detach+0xfe7/0x13e0 [ 97.773064][ T3812] tun_chr_close+0xc4/0x180 [ 97.777560][ T3812] __fput+0x277/0x9d0 [ 97.781534][ T3812] ? __tun_detach+0x13e0/0x13e0 [ 97.786378][ T3812] task_work_run+0xdd/0x1a0 [ 97.790875][ T3812] ptrace_notify+0x114/0x140 [ 97.795459][ T3812] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 97.801701][ T3812] syscall_exit_to_user_mode+0x9/0x60 [ 97.807327][ T3812] do_syscall_64+0x42/0xb0 [ 97.811742][ T3812] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.817636][ T3812] RIP: 0033:0x7fc6cd2767a3 [ 97.822047][ T3812] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 97.841648][ T3812] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 97.850056][ T3812] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3812] close(3) = 0 [pid 3812] close(4) = 0 [pid 3812] close(5) = -1 EBADF (Bad file descriptor) [pid 3812] close(6) = -1 EBADF (Bad file descriptor) [pid 3812] close(7) = -1 EBADF (Bad file descriptor) [pid 3812] close(8) = -1 EBADF (Bad file descriptor) [pid 3812] close(9) = -1 EBADF (Bad file descriptor) [pid 3812] close(10) = -1 EBADF (Bad file descriptor) [pid 3812] close(11) = -1 EBADF (Bad file descriptor) [pid 3812] close(12) = -1 EBADF (Bad file descriptor) [pid 3812] close(13) = -1 EBADF (Bad file descriptor) [pid 3812] close(14) = -1 EBADF (Bad file descriptor) [pid 3812] close(15) = -1 EBADF (Bad file descriptor) [pid 3812] close(16) = -1 EBADF (Bad file descriptor) [pid 3812] close(17) = -1 EBADF (Bad file descriptor) [pid 3812] close(18) = -1 EBADF (Bad file descriptor) [pid 3812] close(19) = -1 EBADF (Bad file descriptor) [pid 3812] close(20) = -1 EBADF (Bad file descriptor) [pid 3812] close(21) = -1 EBADF (Bad file descriptor) [pid 3812] close(22) = -1 EBADF (Bad file descriptor) [pid 3812] close(23) = -1 EBADF (Bad file descriptor) [pid 3812] close(24) = -1 EBADF (Bad file descriptor) [pid 3812] close(25) = -1 EBADF (Bad file descriptor) [pid 3812] close(26) = -1 EBADF (Bad file descriptor) [pid 3812] close(27) = -1 EBADF (Bad file descriptor) [pid 3812] close(28) = -1 EBADF (Bad file descriptor) [pid 3812] close(29) = -1 EBADF (Bad file descriptor) [ 97.858026][ T3812] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 97.865991][ T3812] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 97.873948][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 97.881908][ T3812] R13: 00000000000f4240 R14: 0000000000017c37 R15: 00007ffdc49a5924 [ 97.889891][ T3812] [pid 3812] exit_group(0) = ? [pid 3812] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=181, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3813 attached , child_tidptr=0x5555570bd5d0) = 182 [pid 3813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3813] setpgid(0, 0) = 0 [pid 3813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3813] write(3, "1000", 4) = 4 [pid 3813] close(3) = 0 [pid 3813] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3813] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3813] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3813] write(4, "5", 1) = 1 [pid 3813] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 97.966122][ T3813] FAULT_INJECTION: forcing a failure. [ 97.966122][ T3813] name failslab, interval 1, probability 0, space 0, times 0 [ 97.979082][ T3813] CPU: 1 PID: 3813 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 97.989303][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.999427][ T3813] Call Trace: [ 98.002688][ T3813] [ 98.005604][ T3813] dump_stack_lvl+0xcd/0x134 [ 98.010204][ T3813] should_fail.cold+0x5/0xa [ 98.014703][ T3813] should_failslab+0x5/0x10 [ 98.019211][ T3813] kmem_cache_alloc_trace+0x60/0x3f0 [ 98.024730][ T3813] ? ref_tracker_alloc+0x14c/0x550 [ 98.029835][ T3813] ref_tracker_alloc+0x14c/0x550 [ 98.034764][ T3813] ? ref_tracker_free+0x6b0/0x6b0 [ 98.039787][ T3813] ? lock_release+0x720/0x720 [ 98.044453][ T3813] ? do_raw_spin_lock+0x120/0x2a0 [ 98.049471][ T3813] ? rwlock_bug.part.0+0x90/0x90 [ 98.054417][ T3813] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 98.059779][ T3813] linkwatch_fire_event+0x202/0x260 [ 98.064970][ T3813] netif_carrier_off+0x96/0xb0 [ 98.069721][ T3813] __tun_detach+0xfe7/0x13e0 [ 98.074305][ T3813] tun_chr_close+0xc4/0x180 [ 98.078794][ T3813] __fput+0x277/0x9d0 [ 98.082766][ T3813] ? __tun_detach+0x13e0/0x13e0 [ 98.087611][ T3813] task_work_run+0xdd/0x1a0 [ 98.092109][ T3813] ptrace_notify+0x114/0x140 [ 98.096701][ T3813] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 98.102933][ T3813] syscall_exit_to_user_mode+0x9/0x60 [ 98.108485][ T3813] do_syscall_64+0x42/0xb0 [ 98.112890][ T3813] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.118768][ T3813] RIP: 0033:0x7fc6cd2767a3 [ 98.123163][ T3813] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 98.143306][ T3813] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.151989][ T3813] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3813] close(3) = 0 [pid 3813] close(4) = 0 [pid 3813] close(5) = -1 EBADF (Bad file descriptor) [pid 3813] close(6) = -1 EBADF (Bad file descriptor) [pid 3813] close(7) = -1 EBADF (Bad file descriptor) [pid 3813] close(8) = -1 EBADF (Bad file descriptor) [pid 3813] close(9) = -1 EBADF (Bad file descriptor) [pid 3813] close(10) = -1 EBADF (Bad file descriptor) [pid 3813] close(11) = -1 EBADF (Bad file descriptor) [pid 3813] close(12) = -1 EBADF (Bad file descriptor) [pid 3813] close(13) = -1 EBADF (Bad file descriptor) [pid 3813] close(14) = -1 EBADF (Bad file descriptor) [pid 3813] close(15) = -1 EBADF (Bad file descriptor) [pid 3813] close(16) = -1 EBADF (Bad file descriptor) [pid 3813] close(17) = -1 EBADF (Bad file descriptor) [pid 3813] close(18) = -1 EBADF (Bad file descriptor) [pid 3813] close(19) = -1 EBADF (Bad file descriptor) [pid 3813] close(20) = -1 EBADF (Bad file descriptor) [pid 3813] close(21) = -1 EBADF (Bad file descriptor) [pid 3813] close(22) = -1 EBADF (Bad file descriptor) [pid 3813] close(23) = -1 EBADF (Bad file descriptor) [pid 3813] close(24) = -1 EBADF (Bad file descriptor) [pid 3813] close(25) = -1 EBADF (Bad file descriptor) [pid 3813] close(26) = -1 EBADF (Bad file descriptor) [pid 3813] close(27) = -1 EBADF (Bad file descriptor) [pid 3813] close(28) = -1 EBADF (Bad file descriptor) [pid 3813] close(29) = -1 EBADF (Bad file descriptor) [pid 3813] exit_group(0) = ? [pid 3813] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3814 attached , child_tidptr=0x5555570bd5d0) = 183 [pid 3814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3814] setpgid(0, 0) = 0 [ 98.160047][ T3813] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 98.168095][ T3813] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 98.176073][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 98.184042][ T3813] R13: 00000000000f4240 R14: 0000000000017d61 R15: 00007ffdc49a5924 [ 98.192126][ T3813] [pid 3814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3814] write(3, "1000", 4) = 4 [pid 3814] close(3) = 0 [pid 3814] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3814] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3814] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3814] write(4, "5", 1) = 1 [pid 3814] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 98.257103][ T3814] FAULT_INJECTION: forcing a failure. [ 98.257103][ T3814] name failslab, interval 1, probability 0, space 0, times 0 [ 98.269730][ T3814] CPU: 1 PID: 3814 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 98.279879][ T3814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.290216][ T3814] Call Trace: [ 98.293513][ T3814] [ 98.296598][ T3814] dump_stack_lvl+0xcd/0x134 [ 98.301217][ T3814] should_fail.cold+0x5/0xa [ 98.305761][ T3814] should_failslab+0x5/0x10 [ 98.310280][ T3814] kmem_cache_alloc_trace+0x60/0x3f0 [ 98.315568][ T3814] ? ref_tracker_alloc+0x14c/0x550 [ 98.320692][ T3814] ref_tracker_alloc+0x14c/0x550 [ 98.325623][ T3814] ? ref_tracker_free+0x6b0/0x6b0 [ 98.330644][ T3814] ? lock_release+0x720/0x720 [ 98.335322][ T3814] ? do_raw_spin_lock+0x120/0x2a0 [ 98.340356][ T3814] ? rwlock_bug.part.0+0x90/0x90 [ 98.345312][ T3814] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 98.350699][ T3814] linkwatch_fire_event+0x202/0x260 [ 98.355911][ T3814] netif_carrier_off+0x96/0xb0 [ 98.360674][ T3814] __tun_detach+0xfe7/0x13e0 [ 98.365263][ T3814] tun_chr_close+0xc4/0x180 [ 98.369758][ T3814] __fput+0x277/0x9d0 [ 98.373734][ T3814] ? __tun_detach+0x13e0/0x13e0 [ 98.378585][ T3814] task_work_run+0xdd/0x1a0 [ 98.383186][ T3814] ptrace_notify+0x114/0x140 [ 98.387784][ T3814] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 98.394025][ T3814] syscall_exit_to_user_mode+0x9/0x60 [ 98.399395][ T3814] do_syscall_64+0x42/0xb0 [ 98.403804][ T3814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.409693][ T3814] RIP: 0033:0x7fc6cd2767a3 [ 98.414100][ T3814] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 98.433731][ T3814] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.442147][ T3814] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 98.450158][ T3814] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3814] close(3) = 0 [pid 3814] close(4) = 0 [pid 3814] close(5) = -1 EBADF (Bad file descriptor) [pid 3814] close(6) = -1 EBADF (Bad file descriptor) [pid 3814] close(7) = -1 EBADF (Bad file descriptor) [pid 3814] close(8) = -1 EBADF (Bad file descriptor) [pid 3814] close(9) = -1 EBADF (Bad file descriptor) [pid 3814] close(10) = -1 EBADF (Bad file descriptor) [pid 3814] close(11) = -1 EBADF (Bad file descriptor) [pid 3814] close(12) = -1 EBADF (Bad file descriptor) [pid 3814] close(13) = -1 EBADF (Bad file descriptor) [pid 3814] close(14) = -1 EBADF (Bad file descriptor) [pid 3814] close(15) = -1 EBADF (Bad file descriptor) [pid 3814] close(16) = -1 EBADF (Bad file descriptor) [pid 3814] close(17) = -1 EBADF (Bad file descriptor) [pid 3814] close(18) = -1 EBADF (Bad file descriptor) [pid 3814] close(19) = -1 EBADF (Bad file descriptor) [pid 3814] close(20) = -1 EBADF (Bad file descriptor) [pid 3814] close(21) = -1 EBADF (Bad file descriptor) [pid 3814] close(22) = -1 EBADF (Bad file descriptor) [pid 3814] close(23) = -1 EBADF (Bad file descriptor) [pid 3814] close(24) = -1 EBADF (Bad file descriptor) [pid 3814] close(25) = -1 EBADF (Bad file descriptor) [pid 3814] close(26) = -1 EBADF (Bad file descriptor) [pid 3814] close(27) = -1 EBADF (Bad file descriptor) [pid 3814] close(28) = -1 EBADF (Bad file descriptor) [pid 3814] close(29) = -1 EBADF (Bad file descriptor) [pid 3814] exit_group(0) = ? [pid 3814] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=183, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 184 ./strace-static-x86_64: Process 3815 attached [pid 3815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3815] setpgid(0, 0) = 0 [pid 3815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3815] write(3, "1000", 4) = 4 [pid 3815] close(3) = 0 [pid 3815] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3815] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3815] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3815] write(4, "5", 1) = 1 [pid 3815] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 98.458130][ T3814] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 98.466091][ T3814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 98.474052][ T3814] R13: 00000000000f4240 R14: 0000000000017e8e R15: 00007ffdc49a5924 [ 98.482026][ T3814] [ 98.532385][ T3815] FAULT_INJECTION: forcing a failure. [ 98.532385][ T3815] name failslab, interval 1, probability 0, space 0, times 0 [ 98.545316][ T3815] CPU: 0 PID: 3815 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 98.555460][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.565507][ T3815] Call Trace: [ 98.568766][ T3815] [ 98.571672][ T3815] dump_stack_lvl+0xcd/0x134 [ 98.576249][ T3815] should_fail.cold+0x5/0xa [ 98.580736][ T3815] should_failslab+0x5/0x10 [ 98.585214][ T3815] kmem_cache_alloc_trace+0x60/0x3f0 [ 98.590477][ T3815] ? ref_tracker_alloc+0x14c/0x550 [ 98.595572][ T3815] ref_tracker_alloc+0x14c/0x550 [ 98.600488][ T3815] ? ref_tracker_free+0x6b0/0x6b0 [ 98.605488][ T3815] ? lock_release+0x720/0x720 [ 98.610144][ T3815] ? do_raw_spin_lock+0x120/0x2a0 [ 98.615150][ T3815] ? rwlock_bug.part.0+0x90/0x90 [ 98.620072][ T3815] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 98.625447][ T3815] linkwatch_fire_event+0x202/0x260 [ 98.630656][ T3815] netif_carrier_off+0x96/0xb0 [ 98.635412][ T3815] __tun_detach+0xfe7/0x13e0 [ 98.640015][ T3815] tun_chr_close+0xc4/0x180 [ 98.644608][ T3815] __fput+0x277/0x9d0 [ 98.648586][ T3815] ? __tun_detach+0x13e0/0x13e0 [ 98.653435][ T3815] task_work_run+0xdd/0x1a0 [ 98.657956][ T3815] ptrace_notify+0x114/0x140 [ 98.662547][ T3815] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 98.668776][ T3815] syscall_exit_to_user_mode+0x9/0x60 [ 98.674139][ T3815] do_syscall_64+0x42/0xb0 [ 98.678735][ T3815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.684616][ T3815] RIP: 0033:0x7fc6cd2767a3 [ 98.689018][ T3815] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 98.708614][ T3815] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.717017][ T3815] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 98.724975][ T3815] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3815] close(3) = 0 [pid 3815] close(4) = 0 [pid 3815] close(5) = -1 EBADF (Bad file descriptor) [pid 3815] close(6) = -1 EBADF (Bad file descriptor) [pid 3815] close(7) = -1 EBADF (Bad file descriptor) [pid 3815] close(8) = -1 EBADF (Bad file descriptor) [pid 3815] close(9) = -1 EBADF (Bad file descriptor) [pid 3815] close(10) = -1 EBADF (Bad file descriptor) [pid 3815] close(11) = -1 EBADF (Bad file descriptor) [pid 3815] close(12) = -1 EBADF (Bad file descriptor) [pid 3815] close(13) = -1 EBADF (Bad file descriptor) [pid 3815] close(14) = -1 EBADF (Bad file descriptor) [pid 3815] close(15) = -1 EBADF (Bad file descriptor) [pid 3815] close(16) = -1 EBADF (Bad file descriptor) [pid 3815] close(17) = -1 EBADF (Bad file descriptor) [pid 3815] close(18) = -1 EBADF (Bad file descriptor) [pid 3815] close(19) = -1 EBADF (Bad file descriptor) [pid 3815] close(20) = -1 EBADF (Bad file descriptor) [pid 3815] close(21) = -1 EBADF (Bad file descriptor) [pid 3815] close(22) = -1 EBADF (Bad file descriptor) [pid 3815] close(23) = -1 EBADF (Bad file descriptor) [pid 3815] close(24) = -1 EBADF (Bad file descriptor) [pid 3815] close(25) = -1 EBADF (Bad file descriptor) [pid 3815] close(26) = -1 EBADF (Bad file descriptor) [pid 3815] close(27) = -1 EBADF (Bad file descriptor) [pid 3815] close(28) = -1 EBADF (Bad file descriptor) [ 98.733019][ T3815] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 98.740979][ T3815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 98.748949][ T3815] R13: 00000000000f4240 R14: 0000000000017fb1 R15: 00007ffdc49a5924 [ 98.756924][ T3815] [pid 3815] close(29) = -1 EBADF (Bad file descriptor) [pid 3815] exit_group(0) = ? [pid 3815] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=184, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3816 attached , child_tidptr=0x5555570bd5d0) = 185 [pid 3816] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3816] setpgid(0, 0) = 0 [pid 3816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3816] write(3, "1000", 4) = 4 [pid 3816] close(3) = 0 [pid 3816] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3816] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3816] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3816] write(4, "5", 1) = 1 [pid 3816] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 98.826086][ T3816] FAULT_INJECTION: forcing a failure. [ 98.826086][ T3816] name failslab, interval 1, probability 0, space 0, times 0 [ 98.839447][ T3816] CPU: 0 PID: 3816 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 98.850009][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.860059][ T3816] Call Trace: [ 98.863332][ T3816] [ 98.866255][ T3816] dump_stack_lvl+0xcd/0x134 [ 98.870854][ T3816] should_fail.cold+0x5/0xa [ 98.875357][ T3816] should_failslab+0x5/0x10 [ 98.879863][ T3816] kmem_cache_alloc_trace+0x60/0x3f0 [ 98.885135][ T3816] ? ref_tracker_alloc+0x14c/0x550 [ 98.890243][ T3816] ref_tracker_alloc+0x14c/0x550 [ 98.895181][ T3816] ? ref_tracker_free+0x6b0/0x6b0 [ 98.900192][ T3816] ? lock_release+0x720/0x720 [ 98.904868][ T3816] ? do_raw_spin_lock+0x120/0x2a0 [ 98.909972][ T3816] ? rwlock_bug.part.0+0x90/0x90 [ 98.914904][ T3816] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 98.920276][ T3816] linkwatch_fire_event+0x202/0x260 [ 98.925498][ T3816] netif_carrier_off+0x96/0xb0 [ 98.930254][ T3816] __tun_detach+0xfe7/0x13e0 [ 98.934930][ T3816] tun_chr_close+0xc4/0x180 [ 98.939430][ T3816] __fput+0x277/0x9d0 [ 98.943430][ T3816] ? __tun_detach+0x13e0/0x13e0 [ 98.948287][ T3816] task_work_run+0xdd/0x1a0 [ 98.952795][ T3816] ptrace_notify+0x114/0x140 [ 98.957402][ T3816] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 98.963643][ T3816] syscall_exit_to_user_mode+0x9/0x60 [ 98.969028][ T3816] do_syscall_64+0x42/0xb0 [ 98.973444][ T3816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.979354][ T3816] RIP: 0033:0x7fc6cd2767a3 [ 98.983757][ T3816] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 99.003446][ T3816] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 99.011861][ T3816] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3816] close(3) = 0 [pid 3816] close(4) = 0 [pid 3816] close(5) = -1 EBADF (Bad file descriptor) [pid 3816] close(6) = -1 EBADF (Bad file descriptor) [pid 3816] close(7) = -1 EBADF (Bad file descriptor) [pid 3816] close(8) = -1 EBADF (Bad file descriptor) [pid 3816] close(9) = -1 EBADF (Bad file descriptor) [pid 3816] close(10) = -1 EBADF (Bad file descriptor) [pid 3816] close(11) = -1 EBADF (Bad file descriptor) [pid 3816] close(12) = -1 EBADF (Bad file descriptor) [pid 3816] close(13) = -1 EBADF (Bad file descriptor) [pid 3816] close(14) = -1 EBADF (Bad file descriptor) [pid 3816] close(15) = -1 EBADF (Bad file descriptor) [pid 3816] close(16) = -1 EBADF (Bad file descriptor) [pid 3816] close(17) = -1 EBADF (Bad file descriptor) [pid 3816] close(18) = -1 EBADF (Bad file descriptor) [pid 3816] close(19) = -1 EBADF (Bad file descriptor) [pid 3816] close(20) = -1 EBADF (Bad file descriptor) [pid 3816] close(21) = -1 EBADF (Bad file descriptor) [pid 3816] close(22) = -1 EBADF (Bad file descriptor) [pid 3816] close(23) = -1 EBADF (Bad file descriptor) [pid 3816] close(24) = -1 EBADF (Bad file descriptor) [pid 3816] close(25) = -1 EBADF (Bad file descriptor) [pid 3816] close(26) = -1 EBADF (Bad file descriptor) [pid 3816] close(27) = -1 EBADF (Bad file descriptor) [pid 3816] close(28) = -1 EBADF (Bad file descriptor) [pid 3816] close(29) = -1 EBADF (Bad file descriptor) [pid 3816] exit_group(0) = ? [pid 3816] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3818 attached , child_tidptr=0x5555570bd5d0) = 186 [pid 3818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3818] setpgid(0, 0) = 0 [ 99.019825][ T3816] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 99.027875][ T3816] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 99.035846][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 99.043813][ T3816] R13: 00000000000f4240 R14: 00000000000180c9 R15: 00007ffdc49a5924 [ 99.051794][ T3816] [pid 3818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3818] write(3, "1000", 4) = 4 [pid 3818] close(3) = 0 [pid 3818] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3818] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3818] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3818] write(4, "5", 1) = 1 [pid 3818] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 99.116539][ T3818] FAULT_INJECTION: forcing a failure. [ 99.116539][ T3818] name failslab, interval 1, probability 0, space 0, times 0 [ 99.129254][ T3818] CPU: 0 PID: 3818 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 99.139400][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.149452][ T3818] Call Trace: [ 99.152732][ T3818] [ 99.155657][ T3818] dump_stack_lvl+0xcd/0x134 [ 99.160260][ T3818] should_fail.cold+0x5/0xa [ 99.164792][ T3818] should_failslab+0x5/0x10 [ 99.169299][ T3818] kmem_cache_alloc_trace+0x60/0x3f0 [ 99.174631][ T3818] ? ref_tracker_alloc+0x14c/0x550 [ 99.179756][ T3818] ref_tracker_alloc+0x14c/0x550 [ 99.184810][ T3818] ? ref_tracker_free+0x6b0/0x6b0 [ 99.189878][ T3818] ? lock_release+0x720/0x720 [ 99.194561][ T3818] ? do_raw_spin_lock+0x120/0x2a0 [ 99.199605][ T3818] ? rwlock_bug.part.0+0x90/0x90 [ 99.204568][ T3818] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 99.209952][ T3818] linkwatch_fire_event+0x202/0x260 [ 99.215170][ T3818] netif_carrier_off+0x96/0xb0 [ 99.219944][ T3818] __tun_detach+0xfe7/0x13e0 [ 99.224554][ T3818] tun_chr_close+0xc4/0x180 [ 99.229067][ T3818] __fput+0x277/0x9d0 [ 99.233071][ T3818] ? __tun_detach+0x13e0/0x13e0 [ 99.237942][ T3818] task_work_run+0xdd/0x1a0 [ 99.242457][ T3818] ptrace_notify+0x114/0x140 [ 99.247052][ T3818] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 99.253386][ T3818] syscall_exit_to_user_mode+0x9/0x60 [ 99.258765][ T3818] do_syscall_64+0x42/0xb0 [ 99.263195][ T3818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 99.269096][ T3818] RIP: 0033:0x7fc6cd2767a3 [ 99.273516][ T3818] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 99.293220][ T3818] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 99.301661][ T3818] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 99.309629][ T3818] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 99.317602][ T3818] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 99.325579][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 99.333791][ T3818] R13: 00000000000f4240 R14: 00000000000181ed R15: 00007ffdc49a5924 [ 99.341780][ T3818] [pid 3818] close(3) = 0 [pid 3818] close(4) = 0 [pid 3818] close(5) = -1 EBADF (Bad file descriptor) [pid 3818] close(6) = -1 EBADF (Bad file descriptor) [pid 3818] close(7) = -1 EBADF (Bad file descriptor) [pid 3818] close(8) = -1 EBADF (Bad file descriptor) [pid 3818] close(9) = -1 EBADF (Bad file descriptor) [pid 3818] close(10) = -1 EBADF (Bad file descriptor) [pid 3818] close(11) = -1 EBADF (Bad file descriptor) [pid 3818] close(12) = -1 EBADF (Bad file descriptor) [pid 3818] close(13) = -1 EBADF (Bad file descriptor) [pid 3818] close(14) = -1 EBADF (Bad file descriptor) [pid 3818] close(15) = -1 EBADF (Bad file descriptor) [pid 3818] close(16) = -1 EBADF (Bad file descriptor) [pid 3818] close(17) = -1 EBADF (Bad file descriptor) [pid 3818] close(18) = -1 EBADF (Bad file descriptor) [pid 3818] close(19) = -1 EBADF (Bad file descriptor) [pid 3818] close(20) = -1 EBADF (Bad file descriptor) [pid 3818] close(21) = -1 EBADF (Bad file descriptor) [pid 3818] close(22) = -1 EBADF (Bad file descriptor) [pid 3818] close(23) = -1 EBADF (Bad file descriptor) [pid 3818] close(24) = -1 EBADF (Bad file descriptor) [pid 3818] close(25) = -1 EBADF (Bad file descriptor) [pid 3818] close(26) = -1 EBADF (Bad file descriptor) [pid 3818] close(27) = -1 EBADF (Bad file descriptor) [pid 3818] close(28) = -1 EBADF (Bad file descriptor) [pid 3818] close(29) = -1 EBADF (Bad file descriptor) [pid 3818] exit_group(0) = ? [pid 3818] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=186, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3819 attached , child_tidptr=0x5555570bd5d0) = 187 [pid 3819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3819] setpgid(0, 0) = 0 [pid 3819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3819] write(3, "1000", 4) = 4 [pid 3819] close(3) = 0 [pid 3819] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3819] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3819] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3819] write(4, "5", 1) = 1 [pid 3819] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 99.427520][ T3819] FAULT_INJECTION: forcing a failure. [ 99.427520][ T3819] name failslab, interval 1, probability 0, space 0, times 0 [ 99.440444][ T3819] CPU: 0 PID: 3819 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 99.451337][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.461484][ T3819] Call Trace: [ 99.464766][ T3819] [ 99.467686][ T3819] dump_stack_lvl+0xcd/0x134 [ 99.472280][ T3819] should_fail.cold+0x5/0xa [ 99.476815][ T3819] should_failslab+0x5/0x10 [ 99.481320][ T3819] kmem_cache_alloc_trace+0x60/0x3f0 [ 99.486623][ T3819] ? ref_tracker_alloc+0x14c/0x550 [ 99.491755][ T3819] ref_tracker_alloc+0x14c/0x550 [ 99.496698][ T3819] ? ref_tracker_free+0x6b0/0x6b0 [ 99.501714][ T3819] ? lock_release+0x720/0x720 [ 99.506383][ T3819] ? do_raw_spin_lock+0x120/0x2a0 [ 99.511400][ T3819] ? rwlock_bug.part.0+0x90/0x90 [ 99.516327][ T3819] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 99.521696][ T3819] linkwatch_fire_event+0x202/0x260 [ 99.526892][ T3819] netif_carrier_off+0x96/0xb0 [ 99.531651][ T3819] __tun_detach+0xfe7/0x13e0 [ 99.536419][ T3819] tun_chr_close+0xc4/0x180 [ 99.540914][ T3819] __fput+0x277/0x9d0 [ 99.544886][ T3819] ? __tun_detach+0x13e0/0x13e0 [ 99.549732][ T3819] task_work_run+0xdd/0x1a0 [ 99.554234][ T3819] ptrace_notify+0x114/0x140 [ 99.558820][ T3819] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 99.565057][ T3819] syscall_exit_to_user_mode+0x9/0x60 [ 99.570424][ T3819] do_syscall_64+0x42/0xb0 [ 99.574844][ T3819] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 99.580735][ T3819] RIP: 0033:0x7fc6cd2767a3 [ 99.585157][ T3819] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 99.604848][ T3819] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 99.613264][ T3819] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3819] close(3) = 0 [pid 3819] close(4) = 0 [pid 3819] close(5) = -1 EBADF (Bad file descriptor) [pid 3819] close(6) = -1 EBADF (Bad file descriptor) [pid 3819] close(7) = -1 EBADF (Bad file descriptor) [pid 3819] close(8) = -1 EBADF (Bad file descriptor) [pid 3819] close(9) = -1 EBADF (Bad file descriptor) [pid 3819] close(10) = -1 EBADF (Bad file descriptor) [pid 3819] close(11) = -1 EBADF (Bad file descriptor) [pid 3819] close(12) = -1 EBADF (Bad file descriptor) [pid 3819] close(13) = -1 EBADF (Bad file descriptor) [pid 3819] close(14) = -1 EBADF (Bad file descriptor) [pid 3819] close(15) = -1 EBADF (Bad file descriptor) [ 99.621321][ T3819] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 99.629288][ T3819] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 99.637253][ T3819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 99.645235][ T3819] R13: 00000000000f4240 R14: 000000000001830c R15: 00007ffdc49a5924 [ 99.653209][ T3819] [pid 3819] close(16) = -1 EBADF (Bad file descriptor) [pid 3819] close(17) = -1 EBADF (Bad file descriptor) [pid 3819] close(18) = -1 EBADF (Bad file descriptor) [pid 3819] close(19) = -1 EBADF (Bad file descriptor) [pid 3819] close(20) = -1 EBADF (Bad file descriptor) [pid 3819] close(21) = -1 EBADF (Bad file descriptor) [pid 3819] close(22) = -1 EBADF (Bad file descriptor) [pid 3819] close(23) = -1 EBADF (Bad file descriptor) [pid 3819] close(24) = -1 EBADF (Bad file descriptor) [pid 3819] close(25) = -1 EBADF (Bad file descriptor) [pid 3819] close(26) = -1 EBADF (Bad file descriptor) [pid 3819] close(27) = -1 EBADF (Bad file descriptor) [pid 3819] close(28) = -1 EBADF (Bad file descriptor) [pid 3819] close(29) = -1 EBADF (Bad file descriptor) [pid 3819] exit_group(0) = ? [pid 3819] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=187, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 188 ./strace-static-x86_64: Process 3820 attached [pid 3820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3820] setpgid(0, 0) = 0 [pid 3820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3820] write(3, "1000", 4) = 4 [pid 3820] close(3) = 0 [pid 3820] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3820] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3820] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3820] write(4, "5", 1) = 1 [pid 3820] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 99.725006][ T3820] FAULT_INJECTION: forcing a failure. [ 99.725006][ T3820] name failslab, interval 1, probability 0, space 0, times 0 [ 99.737641][ T3820] CPU: 0 PID: 3820 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 99.747990][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.758224][ T3820] Call Trace: [ 99.761491][ T3820] [ 99.764400][ T3820] dump_stack_lvl+0xcd/0x134 [ 99.768999][ T3820] should_fail.cold+0x5/0xa [ 99.773490][ T3820] should_failslab+0x5/0x10 [ 99.777978][ T3820] kmem_cache_alloc_trace+0x60/0x3f0 [ 99.783259][ T3820] ? ref_tracker_alloc+0x14c/0x550 [ 99.788368][ T3820] ref_tracker_alloc+0x14c/0x550 [ 99.793296][ T3820] ? ref_tracker_free+0x6b0/0x6b0 [ 99.798307][ T3820] ? lock_release+0x720/0x720 [ 99.803065][ T3820] ? do_raw_spin_lock+0x120/0x2a0 [ 99.808094][ T3820] ? rwlock_bug.part.0+0x90/0x90 [ 99.813025][ T3820] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 99.818396][ T3820] linkwatch_fire_event+0x202/0x260 [ 99.823595][ T3820] netif_carrier_off+0x96/0xb0 [ 99.828348][ T3820] __tun_detach+0xfe7/0x13e0 [ 99.832940][ T3820] tun_chr_close+0xc4/0x180 [ 99.837432][ T3820] __fput+0x277/0x9d0 [ 99.841404][ T3820] ? __tun_detach+0x13e0/0x13e0 [ 99.846264][ T3820] task_work_run+0xdd/0x1a0 [ 99.850775][ T3820] ptrace_notify+0x114/0x140 [ 99.855356][ T3820] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 99.861588][ T3820] syscall_exit_to_user_mode+0x9/0x60 [ 99.866983][ T3820] do_syscall_64+0x42/0xb0 [ 99.871387][ T3820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 99.877271][ T3820] RIP: 0033:0x7fc6cd2767a3 [ 99.881671][ T3820] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 99.901270][ T3820] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 99.909855][ T3820] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 99.917829][ T3820] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3820] close(3) = 0 [ 99.925785][ T3820] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 99.933742][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 99.941700][ T3820] R13: 00000000000f4240 R14: 0000000000018443 R15: 00007ffdc49a5924 [ 99.949672][ T3820] [pid 3820] close(4) = 0 [pid 3820] close(5) = -1 EBADF (Bad file descriptor) [pid 3820] close(6) = -1 EBADF (Bad file descriptor) [pid 3820] close(7) = -1 EBADF (Bad file descriptor) [pid 3820] close(8) = -1 EBADF (Bad file descriptor) [pid 3820] close(9) = -1 EBADF (Bad file descriptor) [pid 3820] close(10) = -1 EBADF (Bad file descriptor) [pid 3820] close(11) = -1 EBADF (Bad file descriptor) [pid 3820] close(12) = -1 EBADF (Bad file descriptor) [pid 3820] close(13) = -1 EBADF (Bad file descriptor) [pid 3820] close(14) = -1 EBADF (Bad file descriptor) [pid 3820] close(15) = -1 EBADF (Bad file descriptor) [pid 3820] close(16) = -1 EBADF (Bad file descriptor) [pid 3820] close(17) = -1 EBADF (Bad file descriptor) [pid 3820] close(18) = -1 EBADF (Bad file descriptor) [pid 3820] close(19) = -1 EBADF (Bad file descriptor) [pid 3820] close(20) = -1 EBADF (Bad file descriptor) [pid 3820] close(21) = -1 EBADF (Bad file descriptor) [pid 3820] close(22) = -1 EBADF (Bad file descriptor) [pid 3820] close(23) = -1 EBADF (Bad file descriptor) [pid 3820] close(24) = -1 EBADF (Bad file descriptor) [pid 3820] close(25) = -1 EBADF (Bad file descriptor) [pid 3820] close(26) = -1 EBADF (Bad file descriptor) [pid 3820] close(27) = -1 EBADF (Bad file descriptor) [pid 3820] close(28) = -1 EBADF (Bad file descriptor) [pid 3820] close(29) = -1 EBADF (Bad file descriptor) [pid 3820] exit_group(0) = ? [pid 3820] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 189 ./strace-static-x86_64: Process 3821 attached [pid 3821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3821] setpgid(0, 0) = 0 [pid 3821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3821] write(3, "1000", 4) = 4 [pid 3821] close(3) = 0 [pid 3821] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3821] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3821] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3821] write(4, "5", 1) = 1 [pid 3821] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 100.029598][ T3821] FAULT_INJECTION: forcing a failure. [ 100.029598][ T3821] name failslab, interval 1, probability 0, space 0, times 0 [ 100.042664][ T3821] CPU: 0 PID: 3821 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 100.053025][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.063073][ T3821] Call Trace: [ 100.066340][ T3821] [ 100.069268][ T3821] dump_stack_lvl+0xcd/0x134 [ 100.073861][ T3821] should_fail.cold+0x5/0xa [ 100.078353][ T3821] should_failslab+0x5/0x10 [ 100.082845][ T3821] kmem_cache_alloc_trace+0x60/0x3f0 [ 100.088130][ T3821] ? ref_tracker_alloc+0x14c/0x550 [ 100.093240][ T3821] ref_tracker_alloc+0x14c/0x550 [ 100.098160][ T3821] ? ref_tracker_free+0x6b0/0x6b0 [ 100.103166][ T3821] ? lock_release+0x720/0x720 [ 100.107828][ T3821] ? do_raw_spin_lock+0x120/0x2a0 [ 100.112840][ T3821] ? rwlock_bug.part.0+0x90/0x90 [ 100.117767][ T3821] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 100.123135][ T3821] linkwatch_fire_event+0x202/0x260 [ 100.128431][ T3821] netif_carrier_off+0x96/0xb0 [ 100.133188][ T3821] __tun_detach+0xfe7/0x13e0 [ 100.137789][ T3821] tun_chr_close+0xc4/0x180 [ 100.142294][ T3821] __fput+0x277/0x9d0 [ 100.146265][ T3821] ? __tun_detach+0x13e0/0x13e0 [ 100.151117][ T3821] task_work_run+0xdd/0x1a0 [ 100.155632][ T3821] ptrace_notify+0x114/0x140 [ 100.160499][ T3821] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 100.167023][ T3821] syscall_exit_to_user_mode+0x9/0x60 [ 100.173196][ T3821] do_syscall_64+0x42/0xb0 [ 100.177612][ T3821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.183512][ T3821] RIP: 0033:0x7fc6cd2767a3 [ 100.187920][ T3821] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 100.207745][ T3821] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.216186][ T3821] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 100.224155][ T3821] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 100.232129][ T3821] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 100.240101][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 100.248067][ T3821] R13: 00000000000f4240 R14: 000000000001856d R15: 00007ffdc49a5924 [ 100.256295][ T3821] [pid 3821] close(3) = 0 [pid 3821] close(4) = 0 [pid 3821] close(5) = -1 EBADF (Bad file descriptor) [pid 3821] close(6) = -1 EBADF (Bad file descriptor) [pid 3821] close(7) = -1 EBADF (Bad file descriptor) [pid 3821] close(8) = -1 EBADF (Bad file descriptor) [pid 3821] close(9) = -1 EBADF (Bad file descriptor) [pid 3821] close(10) = -1 EBADF (Bad file descriptor) [pid 3821] close(11) = -1 EBADF (Bad file descriptor) [pid 3821] close(12) = -1 EBADF (Bad file descriptor) [pid 3821] close(13) = -1 EBADF (Bad file descriptor) [pid 3821] close(14) = -1 EBADF (Bad file descriptor) [pid 3821] close(15) = -1 EBADF (Bad file descriptor) [pid 3821] close(16) = -1 EBADF (Bad file descriptor) [pid 3821] close(17) = -1 EBADF (Bad file descriptor) [pid 3821] close(18) = -1 EBADF (Bad file descriptor) [pid 3821] close(19) = -1 EBADF (Bad file descriptor) [pid 3821] close(20) = -1 EBADF (Bad file descriptor) [pid 3821] close(21) = -1 EBADF (Bad file descriptor) [pid 3821] close(22) = -1 EBADF (Bad file descriptor) [pid 3821] close(23) = -1 EBADF (Bad file descriptor) [pid 3821] close(24) = -1 EBADF (Bad file descriptor) [pid 3821] close(25) = -1 EBADF (Bad file descriptor) [pid 3821] close(26) = -1 EBADF (Bad file descriptor) [pid 3821] close(27) = -1 EBADF (Bad file descriptor) [pid 3821] close(28) = -1 EBADF (Bad file descriptor) [pid 3821] close(29) = -1 EBADF (Bad file descriptor) [pid 3821] exit_group(0) = ? [pid 3821] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=189, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 190 ./strace-static-x86_64: Process 3822 attached [pid 3822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3822] setpgid(0, 0) = 0 [pid 3822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3822] write(3, "1000", 4) = 4 [pid 3822] close(3) = 0 [pid 3822] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3822] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3822] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3822] write(4, "5", 1) = 1 [pid 3822] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 100.335222][ T3822] FAULT_INJECTION: forcing a failure. [ 100.335222][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 100.348334][ T3822] CPU: 0 PID: 3822 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 100.358502][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.368556][ T3822] Call Trace: [ 100.371832][ T3822] [ 100.374763][ T3822] dump_stack_lvl+0xcd/0x134 [ 100.379359][ T3822] should_fail.cold+0x5/0xa [ 100.383871][ T3822] should_failslab+0x5/0x10 [ 100.388368][ T3822] kmem_cache_alloc_trace+0x60/0x3f0 [ 100.393651][ T3822] ? ref_tracker_alloc+0x14c/0x550 [ 100.398936][ T3822] ref_tracker_alloc+0x14c/0x550 [ 100.403876][ T3822] ? ref_tracker_free+0x6b0/0x6b0 [ 100.408893][ T3822] ? lock_release+0x720/0x720 [ 100.413567][ T3822] ? do_raw_spin_lock+0x120/0x2a0 [ 100.418590][ T3822] ? rwlock_bug.part.0+0x90/0x90 [ 100.423531][ T3822] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 100.428922][ T3822] linkwatch_fire_event+0x202/0x260 [ 100.434137][ T3822] netif_carrier_off+0x96/0xb0 [ 100.438898][ T3822] __tun_detach+0xfe7/0x13e0 [ 100.443490][ T3822] tun_chr_close+0xc4/0x180 [ 100.447986][ T3822] __fput+0x277/0x9d0 [ 100.451968][ T3822] ? __tun_detach+0x13e0/0x13e0 [ 100.456811][ T3822] task_work_run+0xdd/0x1a0 [ 100.461309][ T3822] ptrace_notify+0x114/0x140 [ 100.465893][ T3822] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 100.472129][ T3822] syscall_exit_to_user_mode+0x9/0x60 [ 100.477492][ T3822] do_syscall_64+0x42/0xb0 [ 100.481909][ T3822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.487793][ T3822] RIP: 0033:0x7fc6cd2767a3 [ 100.492195][ T3822] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 100.511788][ T3822] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.520191][ T3822] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 100.528146][ T3822] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3822] close(3) = 0 [ 100.536104][ T3822] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 100.544060][ T3822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 100.552016][ T3822] R13: 00000000000f4240 R14: 00000000000186a2 R15: 00007ffdc49a5924 [ 100.560075][ T3822] [pid 3822] close(4) = 0 [pid 3822] close(5) = -1 EBADF (Bad file descriptor) [pid 3822] close(6) = -1 EBADF (Bad file descriptor) [pid 3822] close(7) = -1 EBADF (Bad file descriptor) [pid 3822] close(8) = -1 EBADF (Bad file descriptor) [pid 3822] close(9) = -1 EBADF (Bad file descriptor) [pid 3822] close(10) = -1 EBADF (Bad file descriptor) [pid 3822] close(11) = -1 EBADF (Bad file descriptor) [pid 3822] close(12) = -1 EBADF (Bad file descriptor) [pid 3822] close(13) = -1 EBADF (Bad file descriptor) [pid 3822] close(14) = -1 EBADF (Bad file descriptor) [pid 3822] close(15) = -1 EBADF (Bad file descriptor) [pid 3822] close(16) = -1 EBADF (Bad file descriptor) [pid 3822] close(17) = -1 EBADF (Bad file descriptor) [pid 3822] close(18) = -1 EBADF (Bad file descriptor) [pid 3822] close(19) = -1 EBADF (Bad file descriptor) [pid 3822] close(20) = -1 EBADF (Bad file descriptor) [pid 3822] close(21) = -1 EBADF (Bad file descriptor) [pid 3822] close(22) = -1 EBADF (Bad file descriptor) [pid 3822] close(23) = -1 EBADF (Bad file descriptor) [pid 3822] close(24) = -1 EBADF (Bad file descriptor) [pid 3822] close(25) = -1 EBADF (Bad file descriptor) [pid 3822] close(26) = -1 EBADF (Bad file descriptor) [pid 3822] close(27) = -1 EBADF (Bad file descriptor) [pid 3822] close(28) = -1 EBADF (Bad file descriptor) [pid 3822] close(29) = -1 EBADF (Bad file descriptor) [pid 3822] exit_group(0) = ? [pid 3822] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=190, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3823 attached , child_tidptr=0x5555570bd5d0) = 191 [pid 3823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3823] setpgid(0, 0) = 0 [pid 3823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3823] write(3, "1000", 4) = 4 [pid 3823] close(3) = 0 [pid 3823] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3823] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3823] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3823] write(4, "5", 1) = 1 [ 100.641539][ T3823] FAULT_INJECTION: forcing a failure. [ 100.641539][ T3823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.654840][ T3823] CPU: 0 PID: 3823 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 100.664991][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.675042][ T3823] Call Trace: [ 100.678300][ T3823] [ 100.681212][ T3823] dump_stack_lvl+0xcd/0x134 [ 100.685884][ T3823] should_fail.cold+0x5/0xa [ 100.690379][ T3823] prepare_alloc_pages+0x17b/0x570 [ 100.695483][ T3823] __alloc_pages+0x12f/0x500 [ 100.700065][ T3823] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 100.706947][ T3823] ? ___slab_alloc+0x47e/0xf20 [ 100.711724][ T3823] alloc_pages+0x1aa/0x310 [ 100.716127][ T3823] ? mark_held_locks+0x9f/0xe0 [ 100.720891][ T3823] allocate_slab+0x26c/0x3c0 [ 100.725477][ T3823] ___slab_alloc+0x8df/0xf20 [ 100.730055][ T3823] ? napi_skb_cache_get+0xeb/0x170 [ 100.735159][ T3823] ? mark_held_locks+0x9f/0xe0 [ 100.739916][ T3823] kmem_cache_alloc_bulk+0x21c/0x720 [ 100.745191][ T3823] napi_skb_cache_get+0xeb/0x170 [ 100.750119][ T3823] __alloc_skb+0x9b/0x340 [ 100.754435][ T3823] ? __lock_acquire+0xbca/0x56c0 [ 100.759372][ T3823] __napi_alloc_skb+0x70/0x310 [ 100.764128][ T3823] napi_get_frags+0x5e/0x140 [ 100.768708][ T3823] tun_get_user+0xa07/0x3b00 [ 100.773299][ T3823] ? tun_build_skb+0x1170/0x1170 [ 100.778225][ T3823] ? lock_downgrade+0x6e0/0x6e0 [ 100.783150][ T3823] ? find_held_lock+0x2d/0x110 [ 100.787910][ T3823] tun_chr_write_iter+0xdb/0x200 [ 100.792835][ T3823] do_iter_readv_writev+0x3d1/0x640 [ 100.798019][ T3823] ? new_sync_write+0x560/0x560 [ 100.802860][ T3823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 100.809086][ T3823] ? security_file_permission+0xab/0xd0 [ 100.814631][ T3823] do_iter_write+0x182/0x700 [ 100.819211][ T3823] ? import_iovec+0x10c/0x150 [ 100.823876][ T3823] vfs_writev+0x1aa/0x630 [ 100.828190][ T3823] ? vfs_iter_write+0xa0/0xa0 [ 100.832853][ T3823] ? do_raw_spin_lock+0x120/0x2a0 [ 100.837868][ T3823] ? rwlock_bug.part.0+0x90/0x90 [ 100.842791][ T3823] ? _raw_spin_lock_irq+0x41/0x50 [ 100.847803][ T3823] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 100.854046][ T3823] ? find_held_lock+0x2d/0x110 [ 100.858798][ T3823] ? ptrace_notify+0xfa/0x140 [ 100.863466][ T3823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 100.869688][ T3823] ? __fget_light+0x20f/0x270 [ 100.874351][ T3823] do_writev+0x133/0x2f0 [ 100.878593][ T3823] ? vfs_writev+0x630/0x630 [ 100.883080][ T3823] ? lockdep_hardirqs_on+0x79/0x100 [ 100.888263][ T3823] ? _raw_spin_unlock_irq+0x2a/0x40 [ 100.893447][ T3823] ? ptrace_notify+0xfa/0x140 [ 100.898202][ T3823] do_syscall_64+0x35/0xb0 [ 100.902610][ T3823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.908507][ T3823] RIP: 0033:0x7fc6cd2b4c39 [ 100.912915][ T3823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 100.932518][ T3823] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3823] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 100.940926][ T3823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 100.948885][ T3823] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 100.956854][ T3823] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 100.964899][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 100.972853][ T3823] R13: 00000000000f4240 R14: 00000000000187cf R15: 00007ffdc49a5924 [ 100.980820][ T3823] [pid 3823] close(3) = 0 [pid 3823] close(4) = 0 [pid 3823] close(5) = -1 EBADF (Bad file descriptor) [pid 3823] close(6) = -1 EBADF (Bad file descriptor) [pid 3823] close(7) = -1 EBADF (Bad file descriptor) [pid 3823] close(8) = -1 EBADF (Bad file descriptor) [pid 3823] close(9) = -1 EBADF (Bad file descriptor) [pid 3823] close(10) = -1 EBADF (Bad file descriptor) [pid 3823] close(11) = -1 EBADF (Bad file descriptor) [pid 3823] close(12) = -1 EBADF (Bad file descriptor) [pid 3823] close(13) = -1 EBADF (Bad file descriptor) [pid 3823] close(14) = -1 EBADF (Bad file descriptor) [pid 3823] close(15) = -1 EBADF (Bad file descriptor) [pid 3823] close(16) = -1 EBADF (Bad file descriptor) [pid 3823] close(17) = -1 EBADF (Bad file descriptor) [pid 3823] close(18) = -1 EBADF (Bad file descriptor) [pid 3823] close(19) = -1 EBADF (Bad file descriptor) [pid 3823] close(20) = -1 EBADF (Bad file descriptor) [pid 3823] close(21) = -1 EBADF (Bad file descriptor) [pid 3823] close(22) = -1 EBADF (Bad file descriptor) [pid 3823] close(23) = -1 EBADF (Bad file descriptor) [pid 3823] close(24) = -1 EBADF (Bad file descriptor) [pid 3823] close(25) = -1 EBADF (Bad file descriptor) [pid 3823] close(26) = -1 EBADF (Bad file descriptor) [pid 3823] close(27) = -1 EBADF (Bad file descriptor) [pid 3823] close(28) = -1 EBADF (Bad file descriptor) [pid 3823] close(29) = -1 EBADF (Bad file descriptor) [pid 3823] exit_group(0) = ? [pid 3823] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3824 attached , child_tidptr=0x5555570bd5d0) = 192 [pid 3824] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3824] setpgid(0, 0) = 0 [pid 3824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3824] write(3, "1000", 4) = 4 [pid 3824] close(3) = 0 [pid 3824] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3824] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3824] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3824] write(4, "5", 1) = 1 [pid 3824] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 101.056237][ T3824] FAULT_INJECTION: forcing a failure. [ 101.056237][ T3824] name failslab, interval 1, probability 0, space 0, times 0 [ 101.069152][ T3824] CPU: 1 PID: 3824 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 101.079320][ T3824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.089458][ T3824] Call Trace: [ 101.092727][ T3824] [ 101.095642][ T3824] dump_stack_lvl+0xcd/0x134 [ 101.100256][ T3824] should_fail.cold+0x5/0xa [ 101.104753][ T3824] should_failslab+0x5/0x10 [ 101.109261][ T3824] kmem_cache_alloc_trace+0x60/0x3f0 [ 101.114550][ T3824] ? ref_tracker_alloc+0x14c/0x550 [ 101.119658][ T3824] ref_tracker_alloc+0x14c/0x550 [ 101.124593][ T3824] ? ref_tracker_free+0x6b0/0x6b0 [ 101.129612][ T3824] ? lock_release+0x720/0x720 [ 101.134283][ T3824] ? do_raw_spin_lock+0x120/0x2a0 [ 101.139299][ T3824] ? rwlock_bug.part.0+0x90/0x90 [ 101.144229][ T3824] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 101.149602][ T3824] linkwatch_fire_event+0x202/0x260 [ 101.154800][ T3824] netif_carrier_off+0x96/0xb0 [ 101.159554][ T3824] __tun_detach+0xfe7/0x13e0 [ 101.164141][ T3824] tun_chr_close+0xc4/0x180 [ 101.168630][ T3824] __fput+0x277/0x9d0 [ 101.172600][ T3824] ? __tun_detach+0x13e0/0x13e0 [ 101.177441][ T3824] task_work_run+0xdd/0x1a0 [ 101.181940][ T3824] ptrace_notify+0x114/0x140 [ 101.186611][ T3824] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 101.192931][ T3824] syscall_exit_to_user_mode+0x9/0x60 [ 101.198298][ T3824] do_syscall_64+0x42/0xb0 [ 101.202709][ T3824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 101.208591][ T3824] RIP: 0033:0x7fc6cd2767a3 [ 101.213000][ T3824] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 101.232687][ T3824] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 101.241101][ T3824] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 101.249062][ T3824] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 101.257198][ T3824] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 101.265157][ T3824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 101.273129][ T3824] R13: 00000000000f4240 R14: 0000000000018905 R15: 00007ffdc49a5924 [ 101.281105][ T3824] [pid 3824] close(3) = 0 [pid 3824] close(4) = 0 [pid 3824] close(5) = -1 EBADF (Bad file descriptor) [pid 3824] close(6) = -1 EBADF (Bad file descriptor) [pid 3824] close(7) = -1 EBADF (Bad file descriptor) [pid 3824] close(8) = -1 EBADF (Bad file descriptor) [pid 3824] close(9) = -1 EBADF (Bad file descriptor) [pid 3824] close(10) = -1 EBADF (Bad file descriptor) [pid 3824] close(11) = -1 EBADF (Bad file descriptor) [pid 3824] close(12) = -1 EBADF (Bad file descriptor) [pid 3824] close(13) = -1 EBADF (Bad file descriptor) [pid 3824] close(14) = -1 EBADF (Bad file descriptor) [pid 3824] close(15) = -1 EBADF (Bad file descriptor) [pid 3824] close(16) = -1 EBADF (Bad file descriptor) [pid 3824] close(17) = -1 EBADF (Bad file descriptor) [pid 3824] close(18) = -1 EBADF (Bad file descriptor) [pid 3824] close(19) = -1 EBADF (Bad file descriptor) [pid 3824] close(20) = -1 EBADF (Bad file descriptor) [pid 3824] close(21) = -1 EBADF (Bad file descriptor) [pid 3824] close(22) = -1 EBADF (Bad file descriptor) [pid 3824] close(23) = -1 EBADF (Bad file descriptor) [pid 3824] close(24) = -1 EBADF (Bad file descriptor) [pid 3824] close(25) = -1 EBADF (Bad file descriptor) [pid 3824] close(26) = -1 EBADF (Bad file descriptor) [pid 3824] close(27) = -1 EBADF (Bad file descriptor) [pid 3824] close(28) = -1 EBADF (Bad file descriptor) [pid 3824] close(29) = -1 EBADF (Bad file descriptor) [pid 3824] exit_group(0) = ? [pid 3824] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=192, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3825 attached , child_tidptr=0x5555570bd5d0) = 193 [pid 3825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3825] setpgid(0, 0) = 0 [pid 3825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3825] write(3, "1000", 4) = 4 [pid 3825] close(3) = 0 [pid 3825] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3825] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3825] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3825] write(4, "5", 1) = 1 [pid 3825] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 101.353588][ T3825] FAULT_INJECTION: forcing a failure. [ 101.353588][ T3825] name failslab, interval 1, probability 0, space 0, times 0 [ 101.366439][ T3825] CPU: 0 PID: 3825 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 101.376863][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.387335][ T3825] Call Trace: [ 101.390705][ T3825] [ 101.393628][ T3825] dump_stack_lvl+0xcd/0x134 [ 101.399170][ T3825] should_fail.cold+0x5/0xa [ 101.403658][ T3825] should_failslab+0x5/0x10 [ 101.408139][ T3825] kmem_cache_alloc_trace+0x60/0x3f0 [ 101.413616][ T3825] ? ref_tracker_alloc+0x14c/0x550 [ 101.418706][ T3825] ref_tracker_alloc+0x14c/0x550 [ 101.423815][ T3825] ? ref_tracker_free+0x6b0/0x6b0 [ 101.428814][ T3825] ? lock_release+0x720/0x720 [ 101.433473][ T3825] ? do_raw_spin_lock+0x120/0x2a0 [ 101.438481][ T3825] ? rwlock_bug.part.0+0x90/0x90 [ 101.443402][ T3825] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 101.448758][ T3825] linkwatch_fire_event+0x202/0x260 [ 101.453940][ T3825] netif_carrier_off+0x96/0xb0 [ 101.458684][ T3825] __tun_detach+0xfe7/0x13e0 [ 101.463260][ T3825] tun_chr_close+0xc4/0x180 [ 101.467743][ T3825] __fput+0x277/0x9d0 [ 101.471705][ T3825] ? __tun_detach+0x13e0/0x13e0 [ 101.476620][ T3825] task_work_run+0xdd/0x1a0 [ 101.481107][ T3825] ptrace_notify+0x114/0x140 [ 101.485766][ T3825] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 101.491999][ T3825] syscall_exit_to_user_mode+0x9/0x60 [ 101.497350][ T3825] do_syscall_64+0x42/0xb0 [ 101.501746][ T3825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 101.507625][ T3825] RIP: 0033:0x7fc6cd2767a3 [ 101.512019][ T3825] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 101.531604][ T3825] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 101.539994][ T3825] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 101.547941][ T3825] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 101.555893][ T3825] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 101.563952][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 101.571899][ T3825] R13: 00000000000f4240 R14: 0000000000018a9f R15: 00007ffdc49a5924 [ 101.579859][ T3825] [pid 3825] close(3) = 0 [pid 3825] close(4) = 0 [pid 3825] close(5) = -1 EBADF (Bad file descriptor) [pid 3825] close(6) = -1 EBADF (Bad file descriptor) [pid 3825] close(7) = -1 EBADF (Bad file descriptor) [pid 3825] close(8) = -1 EBADF (Bad file descriptor) [pid 3825] close(9) = -1 EBADF (Bad file descriptor) [pid 3825] close(10) = -1 EBADF (Bad file descriptor) [pid 3825] close(11) = -1 EBADF (Bad file descriptor) [pid 3825] close(12) = -1 EBADF (Bad file descriptor) [pid 3825] close(13) = -1 EBADF (Bad file descriptor) [pid 3825] close(14) = -1 EBADF (Bad file descriptor) [pid 3825] close(15) = -1 EBADF (Bad file descriptor) [pid 3825] close(16) = -1 EBADF (Bad file descriptor) [pid 3825] close(17) = -1 EBADF (Bad file descriptor) [pid 3825] close(18) = -1 EBADF (Bad file descriptor) [pid 3825] close(19) = -1 EBADF (Bad file descriptor) [pid 3825] close(20) = -1 EBADF (Bad file descriptor) [pid 3825] close(21) = -1 EBADF (Bad file descriptor) [pid 3825] close(22) = -1 EBADF (Bad file descriptor) [pid 3825] close(23) = -1 EBADF (Bad file descriptor) [pid 3825] close(24) = -1 EBADF (Bad file descriptor) [pid 3825] close(25) = -1 EBADF (Bad file descriptor) [pid 3825] close(26) = -1 EBADF (Bad file descriptor) [pid 3825] close(27) = -1 EBADF (Bad file descriptor) [pid 3825] close(28) = -1 EBADF (Bad file descriptor) [pid 3825] close(29) = -1 EBADF (Bad file descriptor) [pid 3825] exit_group(0) = ? [pid 3825] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=193, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3826 attached [pid 3826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3826] setpgid(0, 0) = 0 [pid 3826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 194 [pid 3826] write(3, "1000", 4) = 4 [pid 3826] close(3) = 0 [pid 3826] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3826] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3826] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3826] write(4, "5", 1) = 1 [pid 3826] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 101.651636][ T3826] FAULT_INJECTION: forcing a failure. [ 101.651636][ T3826] name failslab, interval 1, probability 0, space 0, times 0 [ 101.664286][ T3826] CPU: 0 PID: 3826 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 101.674435][ T3826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.684483][ T3826] Call Trace: [ 101.687751][ T3826] [ 101.690665][ T3826] dump_stack_lvl+0xcd/0x134 [ 101.695248][ T3826] should_fail.cold+0x5/0xa [ 101.699753][ T3826] should_failslab+0x5/0x10 [ 101.704241][ T3826] kmem_cache_alloc_trace+0x60/0x3f0 [ 101.709512][ T3826] ? ref_tracker_alloc+0x14c/0x550 [ 101.714619][ T3826] ref_tracker_alloc+0x14c/0x550 [ 101.719544][ T3826] ? ref_tracker_free+0x6b0/0x6b0 [ 101.724552][ T3826] ? lock_release+0x720/0x720 [ 101.729220][ T3826] ? do_raw_spin_lock+0x120/0x2a0 [ 101.734235][ T3826] ? rwlock_bug.part.0+0x90/0x90 [ 101.739160][ T3826] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 101.744529][ T3826] linkwatch_fire_event+0x202/0x260 [ 101.749810][ T3826] netif_carrier_off+0x96/0xb0 [ 101.754563][ T3826] __tun_detach+0xfe7/0x13e0 [ 101.759149][ T3826] tun_chr_close+0xc4/0x180 [ 101.763643][ T3826] __fput+0x277/0x9d0 [ 101.767625][ T3826] ? __tun_detach+0x13e0/0x13e0 [ 101.772479][ T3826] task_work_run+0xdd/0x1a0 [ 101.776972][ T3826] ptrace_notify+0x114/0x140 [ 101.781560][ T3826] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 101.787791][ T3826] syscall_exit_to_user_mode+0x9/0x60 [ 101.793150][ T3826] do_syscall_64+0x42/0xb0 [ 101.797569][ T3826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 101.803449][ T3826] RIP: 0033:0x7fc6cd2767a3 [ 101.808030][ T3826] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 101.827904][ T3826] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 101.836310][ T3826] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 101.844354][ T3826] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3826] close(3) = 0 [pid 3826] close(4) = 0 [pid 3826] close(5) = -1 EBADF (Bad file descriptor) [pid 3826] close(6) = -1 EBADF (Bad file descriptor) [pid 3826] close(7) = -1 EBADF (Bad file descriptor) [pid 3826] close(8) = -1 EBADF (Bad file descriptor) [pid 3826] close(9) = -1 EBADF (Bad file descriptor) [pid 3826] close(10) = -1 EBADF (Bad file descriptor) [pid 3826] close(11) = -1 EBADF (Bad file descriptor) [pid 3826] close(12) = -1 EBADF (Bad file descriptor) [pid 3826] close(13) = -1 EBADF (Bad file descriptor) [pid 3826] close(14) = -1 EBADF (Bad file descriptor) [pid 3826] close(15) = -1 EBADF (Bad file descriptor) [pid 3826] close(16) = -1 EBADF (Bad file descriptor) [pid 3826] close(17) = -1 EBADF (Bad file descriptor) [pid 3826] close(18) = -1 EBADF (Bad file descriptor) [pid 3826] close(19) = -1 EBADF (Bad file descriptor) [pid 3826] close(20) = -1 EBADF (Bad file descriptor) [pid 3826] close(21) = -1 EBADF (Bad file descriptor) [pid 3826] close(22) = -1 EBADF (Bad file descriptor) [pid 3826] close(23) = -1 EBADF (Bad file descriptor) [pid 3826] close(24) = -1 EBADF (Bad file descriptor) [pid 3826] close(25) = -1 EBADF (Bad file descriptor) [pid 3826] close(26) = -1 EBADF (Bad file descriptor) [pid 3826] close(27) = -1 EBADF (Bad file descriptor) [pid 3826] close(28) = -1 EBADF (Bad file descriptor) [pid 3826] close(29) = -1 EBADF (Bad file descriptor) [pid 3826] exit_group(0) = ? [pid 3826] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 195 ./strace-static-x86_64: Process 3827 attached [pid 3827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3827] setpgid(0, 0) = 0 [pid 3827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3827] write(3, "1000", 4) = 4 [pid 3827] close(3) = 0 [pid 3827] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3827] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3827] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3827] write(4, "5", 1) = 1 [pid 3827] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 101.852320][ T3826] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 101.860274][ T3826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 101.868228][ T3826] R13: 00000000000f4240 R14: 0000000000018bcc R15: 00007ffdc49a5924 [ 101.876198][ T3826] [ 101.928669][ T3827] FAULT_INJECTION: forcing a failure. [ 101.928669][ T3827] name failslab, interval 1, probability 0, space 0, times 0 [ 101.941899][ T3827] CPU: 1 PID: 3827 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 101.952035][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.962073][ T3827] Call Trace: [ 101.965335][ T3827] [ 101.968256][ T3827] dump_stack_lvl+0xcd/0x134 [ 101.972842][ T3827] should_fail.cold+0x5/0xa [ 101.977333][ T3827] should_failslab+0x5/0x10 [ 101.981821][ T3827] kmem_cache_alloc_trace+0x60/0x3f0 [ 101.987090][ T3827] ? ref_tracker_alloc+0x14c/0x550 [ 101.992201][ T3827] ref_tracker_alloc+0x14c/0x550 [ 101.997120][ T3827] ? ref_tracker_free+0x6b0/0x6b0 [ 102.002126][ T3827] ? lock_release+0x720/0x720 [ 102.006789][ T3827] ? do_raw_spin_lock+0x120/0x2a0 [ 102.011807][ T3827] ? rwlock_bug.part.0+0x90/0x90 [ 102.016732][ T3827] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 102.022200][ T3827] linkwatch_fire_event+0x202/0x260 [ 102.027391][ T3827] netif_carrier_off+0x96/0xb0 [ 102.032146][ T3827] __tun_detach+0xfe7/0x13e0 [ 102.036743][ T3827] tun_chr_close+0xc4/0x180 [ 102.041252][ T3827] __fput+0x277/0x9d0 [ 102.045235][ T3827] ? __tun_detach+0x13e0/0x13e0 [ 102.050100][ T3827] task_work_run+0xdd/0x1a0 [ 102.054626][ T3827] ptrace_notify+0x114/0x140 [ 102.059223][ T3827] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 102.065559][ T3827] syscall_exit_to_user_mode+0x9/0x60 [ 102.070938][ T3827] do_syscall_64+0x42/0xb0 [ 102.075606][ T3827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 102.081517][ T3827] RIP: 0033:0x7fc6cd2767a3 [ 102.085935][ T3827] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 102.105648][ T3827] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 102.114075][ T3827] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3827] close(3) = 0 [pid 3827] close(4) = 0 [pid 3827] close(5) = -1 EBADF (Bad file descriptor) [pid 3827] close(6) = -1 EBADF (Bad file descriptor) [pid 3827] close(7) = -1 EBADF (Bad file descriptor) [pid 3827] close(8) = -1 EBADF (Bad file descriptor) [pid 3827] close(9) = -1 EBADF (Bad file descriptor) [pid 3827] close(10) = -1 EBADF (Bad file descriptor) [pid 3827] close(11) = -1 EBADF (Bad file descriptor) [pid 3827] close(12) = -1 EBADF (Bad file descriptor) [pid 3827] close(13) = -1 EBADF (Bad file descriptor) [pid 3827] close(14) = -1 EBADF (Bad file descriptor) [pid 3827] close(15) = -1 EBADF (Bad file descriptor) [pid 3827] close(16) = -1 EBADF (Bad file descriptor) [pid 3827] close(17) = -1 EBADF (Bad file descriptor) [pid 3827] close(18) = -1 EBADF (Bad file descriptor) [pid 3827] close(19) = -1 EBADF (Bad file descriptor) [pid 3827] close(20) = -1 EBADF (Bad file descriptor) [pid 3827] close(21) = -1 EBADF (Bad file descriptor) [pid 3827] close(22) = -1 EBADF (Bad file descriptor) [pid 3827] close(23) = -1 EBADF (Bad file descriptor) [pid 3827] close(24) = -1 EBADF (Bad file descriptor) [pid 3827] close(25) = -1 EBADF (Bad file descriptor) [pid 3827] close(26) = -1 EBADF (Bad file descriptor) [pid 3827] close(27) = -1 EBADF (Bad file descriptor) [pid 3827] close(28) = -1 EBADF (Bad file descriptor) [pid 3827] close(29) = -1 EBADF (Bad file descriptor) [pid 3827] exit_group(0) = ? [pid 3827] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=195, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 102.122066][ T3827] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 102.130034][ T3827] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 102.138001][ T3827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 102.145972][ T3827] R13: 00000000000f4240 R14: 0000000000018cfb R15: 00007ffdc49a5924 [ 102.153973][ T3827] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 196 ./strace-static-x86_64: Process 3828 attached [pid 3828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3828] setpgid(0, 0) = 0 [pid 3828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3828] write(3, "1000", 4) = 4 [pid 3828] close(3) = 0 [pid 3828] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3828] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3828] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3828] write(4, "5", 1) = 1 [pid 3828] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 102.220851][ T3828] FAULT_INJECTION: forcing a failure. [ 102.220851][ T3828] name failslab, interval 1, probability 0, space 0, times 0 [ 102.233562][ T3828] CPU: 1 PID: 3828 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 102.243715][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.253766][ T3828] Call Trace: [ 102.257025][ T3828] [ 102.259940][ T3828] dump_stack_lvl+0xcd/0x134 [ 102.264524][ T3828] should_fail.cold+0x5/0xa [ 102.269016][ T3828] should_failslab+0x5/0x10 [ 102.273508][ T3828] kmem_cache_alloc_trace+0x60/0x3f0 [ 102.278778][ T3828] ? ref_tracker_alloc+0x14c/0x550 [ 102.283879][ T3828] ref_tracker_alloc+0x14c/0x550 [ 102.288807][ T3828] ? ref_tracker_free+0x6b0/0x6b0 [ 102.293816][ T3828] ? lock_release+0x720/0x720 [ 102.298488][ T3828] ? do_raw_spin_lock+0x120/0x2a0 [ 102.303502][ T3828] ? rwlock_bug.part.0+0x90/0x90 [ 102.308427][ T3828] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 102.313794][ T3828] linkwatch_fire_event+0x202/0x260 [ 102.318989][ T3828] netif_carrier_off+0x96/0xb0 [ 102.323741][ T3828] __tun_detach+0xfe7/0x13e0 [ 102.328500][ T3828] tun_chr_close+0xc4/0x180 [ 102.333009][ T3828] __fput+0x277/0x9d0 [ 102.336977][ T3828] ? __tun_detach+0x13e0/0x13e0 [ 102.341821][ T3828] task_work_run+0xdd/0x1a0 [ 102.346315][ T3828] ptrace_notify+0x114/0x140 [ 102.350898][ T3828] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 102.357131][ T3828] syscall_exit_to_user_mode+0x9/0x60 [ 102.362492][ T3828] do_syscall_64+0x42/0xb0 [ 102.366900][ T3828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 102.372780][ T3828] RIP: 0033:0x7fc6cd2767a3 [ 102.377183][ T3828] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 102.396783][ T3828] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 102.405186][ T3828] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 102.413144][ T3828] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 102.421207][ T3828] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 102.429180][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 102.437145][ T3828] R13: 00000000000f4240 R14: 0000000000018e09 R15: 00007ffdc49a5924 [ 102.445121][ T3828] [pid 3828] close(3) = 0 [pid 3828] close(4) = 0 [pid 3828] close(5) = -1 EBADF (Bad file descriptor) [pid 3828] close(6) = -1 EBADF (Bad file descriptor) [pid 3828] close(7) = -1 EBADF (Bad file descriptor) [pid 3828] close(8) = -1 EBADF (Bad file descriptor) [pid 3828] close(9) = -1 EBADF (Bad file descriptor) [pid 3828] close(10) = -1 EBADF (Bad file descriptor) [pid 3828] close(11) = -1 EBADF (Bad file descriptor) [pid 3828] close(12) = -1 EBADF (Bad file descriptor) [pid 3828] close(13) = -1 EBADF (Bad file descriptor) [pid 3828] close(14) = -1 EBADF (Bad file descriptor) [pid 3828] close(15) = -1 EBADF (Bad file descriptor) [pid 3828] close(16) = -1 EBADF (Bad file descriptor) [pid 3828] close(17) = -1 EBADF (Bad file descriptor) [pid 3828] close(18) = -1 EBADF (Bad file descriptor) [pid 3828] close(19) = -1 EBADF (Bad file descriptor) [pid 3828] close(20) = -1 EBADF (Bad file descriptor) [pid 3828] close(21) = -1 EBADF (Bad file descriptor) [pid 3828] close(22) = -1 EBADF (Bad file descriptor) [pid 3828] close(23) = -1 EBADF (Bad file descriptor) [pid 3828] close(24) = -1 EBADF (Bad file descriptor) [pid 3828] close(25) = -1 EBADF (Bad file descriptor) [pid 3828] close(26) = -1 EBADF (Bad file descriptor) [pid 3828] close(27) = -1 EBADF (Bad file descriptor) [pid 3828] close(28) = -1 EBADF (Bad file descriptor) [pid 3828] close(29) = -1 EBADF (Bad file descriptor) [pid 3828] exit_group(0) = ? [pid 3828] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=196, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 197 ./strace-static-x86_64: Process 3830 attached [pid 3830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3830] setpgid(0, 0) = 0 [pid 3830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3830] write(3, "1000", 4) = 4 [pid 3830] close(3) = 0 [pid 3830] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3830] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3830] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3830] write(4, "5", 1) = 1 [pid 3830] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 102.523302][ T3830] FAULT_INJECTION: forcing a failure. [ 102.523302][ T3830] name failslab, interval 1, probability 0, space 0, times 0 [ 102.536160][ T3830] CPU: 0 PID: 3830 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 102.546654][ T3830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.556804][ T3830] Call Trace: [ 102.560226][ T3830] [ 102.563143][ T3830] dump_stack_lvl+0xcd/0x134 [ 102.567725][ T3830] should_fail.cold+0x5/0xa [ 102.572214][ T3830] should_failslab+0x5/0x10 [ 102.576701][ T3830] kmem_cache_alloc_trace+0x60/0x3f0 [ 102.581977][ T3830] ? ref_tracker_alloc+0x14c/0x550 [ 102.587078][ T3830] ref_tracker_alloc+0x14c/0x550 [ 102.592018][ T3830] ? ref_tracker_free+0x6b0/0x6b0 [ 102.597025][ T3830] ? lock_release+0x720/0x720 [ 102.601691][ T3830] ? do_raw_spin_lock+0x120/0x2a0 [ 102.606790][ T3830] ? rwlock_bug.part.0+0x90/0x90 [ 102.611715][ T3830] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 102.617079][ T3830] linkwatch_fire_event+0x202/0x260 [ 102.622270][ T3830] netif_carrier_off+0x96/0xb0 [ 102.627044][ T3830] __tun_detach+0xfe7/0x13e0 [ 102.631633][ T3830] tun_chr_close+0xc4/0x180 [ 102.636120][ T3830] __fput+0x277/0x9d0 [ 102.640087][ T3830] ? __tun_detach+0x13e0/0x13e0 [ 102.644932][ T3830] task_work_run+0xdd/0x1a0 [ 102.649624][ T3830] ptrace_notify+0x114/0x140 [ 102.654223][ T3830] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 102.660456][ T3830] syscall_exit_to_user_mode+0x9/0x60 [ 102.665824][ T3830] do_syscall_64+0x42/0xb0 [ 102.670229][ T3830] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 102.676110][ T3830] RIP: 0033:0x7fc6cd2767a3 [ 102.680513][ T3830] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 102.700105][ T3830] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 102.708589][ T3830] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 102.716542][ T3830] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 102.724498][ T3830] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 102.732464][ T3830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 102.740430][ T3830] R13: 00000000000f4240 R14: 0000000000018f2d R15: 00007ffdc49a5924 [ 102.748402][ T3830] [pid 3830] close(3) = 0 [pid 3830] close(4) = 0 [pid 3830] close(5) = -1 EBADF (Bad file descriptor) [pid 3830] close(6) = -1 EBADF (Bad file descriptor) [pid 3830] close(7) = -1 EBADF (Bad file descriptor) [pid 3830] close(8) = -1 EBADF (Bad file descriptor) [pid 3830] close(9) = -1 EBADF (Bad file descriptor) [pid 3830] close(10) = -1 EBADF (Bad file descriptor) [pid 3830] close(11) = -1 EBADF (Bad file descriptor) [pid 3830] close(12) = -1 EBADF (Bad file descriptor) [pid 3830] close(13) = -1 EBADF (Bad file descriptor) [pid 3830] close(14) = -1 EBADF (Bad file descriptor) [pid 3830] close(15) = -1 EBADF (Bad file descriptor) [pid 3830] close(16) = -1 EBADF (Bad file descriptor) [pid 3830] close(17) = -1 EBADF (Bad file descriptor) [pid 3830] close(18) = -1 EBADF (Bad file descriptor) [pid 3830] close(19) = -1 EBADF (Bad file descriptor) [pid 3830] close(20) = -1 EBADF (Bad file descriptor) [pid 3830] close(21) = -1 EBADF (Bad file descriptor) [pid 3830] close(22) = -1 EBADF (Bad file descriptor) [pid 3830] close(23) = -1 EBADF (Bad file descriptor) [pid 3830] close(24) = -1 EBADF (Bad file descriptor) [pid 3830] close(25) = -1 EBADF (Bad file descriptor) [pid 3830] close(26) = -1 EBADF (Bad file descriptor) [pid 3830] close(27) = -1 EBADF (Bad file descriptor) [pid 3830] close(28) = -1 EBADF (Bad file descriptor) [pid 3830] close(29) = -1 EBADF (Bad file descriptor) [pid 3830] exit_group(0) = ? [pid 3830] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3831 attached , child_tidptr=0x5555570bd5d0) = 198 [pid 3831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3831] setpgid(0, 0) = 0 [pid 3831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3831] write(3, "1000", 4) = 4 [pid 3831] close(3) = 0 [pid 3831] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3831] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3831] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3831] write(4, "5", 1) = 1 [pid 3831] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 102.838406][ T3831] FAULT_INJECTION: forcing a failure. [ 102.838406][ T3831] name failslab, interval 1, probability 0, space 0, times 0 [ 102.851239][ T3831] CPU: 1 PID: 3831 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 102.861401][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.871465][ T3831] Call Trace: [ 102.874750][ T3831] [ 102.877661][ T3831] dump_stack_lvl+0xcd/0x134 [ 102.882245][ T3831] should_fail.cold+0x5/0xa [ 102.886754][ T3831] should_failslab+0x5/0x10 [ 102.891247][ T3831] kmem_cache_alloc_trace+0x60/0x3f0 [ 102.896529][ T3831] ? ref_tracker_alloc+0x14c/0x550 [ 102.901691][ T3831] ref_tracker_alloc+0x14c/0x550 [ 102.906656][ T3831] ? ref_tracker_free+0x6b0/0x6b0 [ 102.911688][ T3831] ? lock_release+0x720/0x720 [ 102.916368][ T3831] ? do_raw_spin_lock+0x120/0x2a0 [ 102.921420][ T3831] ? rwlock_bug.part.0+0x90/0x90 [ 102.926390][ T3831] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 102.931784][ T3831] linkwatch_fire_event+0x202/0x260 [ 102.936999][ T3831] netif_carrier_off+0x96/0xb0 [ 102.941764][ T3831] __tun_detach+0xfe7/0x13e0 [ 102.946355][ T3831] tun_chr_close+0xc4/0x180 [ 102.950850][ T3831] __fput+0x277/0x9d0 [ 102.954822][ T3831] ? __tun_detach+0x13e0/0x13e0 [ 102.959669][ T3831] task_work_run+0xdd/0x1a0 [ 102.964175][ T3831] ptrace_notify+0x114/0x140 [ 102.968760][ T3831] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 102.975023][ T3831] syscall_exit_to_user_mode+0x9/0x60 [ 102.980393][ T3831] do_syscall_64+0x42/0xb0 [ 102.984816][ T3831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 102.990804][ T3831] RIP: 0033:0x7fc6cd2767a3 [ 102.995222][ T3831] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 103.014821][ T3831] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.023253][ T3831] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 103.031234][ T3831] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3831] close(3) = 0 [pid 3831] close(4) = 0 [pid 3831] close(5) = -1 EBADF (Bad file descriptor) [pid 3831] close(6) = -1 EBADF (Bad file descriptor) [pid 3831] close(7) = -1 EBADF (Bad file descriptor) [pid 3831] close(8) = -1 EBADF (Bad file descriptor) [pid 3831] close(9) = -1 EBADF (Bad file descriptor) [pid 3831] close(10) = -1 EBADF (Bad file descriptor) [pid 3831] close(11) = -1 EBADF (Bad file descriptor) [pid 3831] close(12) = -1 EBADF (Bad file descriptor) [pid 3831] close(13) = -1 EBADF (Bad file descriptor) [pid 3831] close(14) = -1 EBADF (Bad file descriptor) [pid 3831] close(15) = -1 EBADF (Bad file descriptor) [pid 3831] close(16) = -1 EBADF (Bad file descriptor) [pid 3831] close(17) = -1 EBADF (Bad file descriptor) [pid 3831] close(18) = -1 EBADF (Bad file descriptor) [pid 3831] close(19) = -1 EBADF (Bad file descriptor) [pid 3831] close(20) = -1 EBADF (Bad file descriptor) [pid 3831] close(21) = -1 EBADF (Bad file descriptor) [ 103.039219][ T3831] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 103.047194][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 103.055149][ T3831] R13: 00000000000f4240 R14: 000000000001905f R15: 00007ffdc49a5924 [ 103.063121][ T3831] [pid 3831] close(22) = -1 EBADF (Bad file descriptor) [pid 3831] close(23) = -1 EBADF (Bad file descriptor) [pid 3831] close(24) = -1 EBADF (Bad file descriptor) [pid 3831] close(25) = -1 EBADF (Bad file descriptor) [pid 3831] close(26) = -1 EBADF (Bad file descriptor) [pid 3831] close(27) = -1 EBADF (Bad file descriptor) [pid 3831] close(28) = -1 EBADF (Bad file descriptor) [pid 3831] close(29) = -1 EBADF (Bad file descriptor) [pid 3831] exit_group(0) = ? [pid 3831] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=198, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 199 ./strace-static-x86_64: Process 3832 attached [pid 3832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3832] setpgid(0, 0) = 0 [pid 3832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3832] write(3, "1000", 4) = 4 [pid 3832] close(3) = 0 [pid 3832] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3832] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3832] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3832] write(4, "5", 1) = 1 [pid 3832] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 103.137749][ T3832] FAULT_INJECTION: forcing a failure. [ 103.137749][ T3832] name failslab, interval 1, probability 0, space 0, times 0 [ 103.150627][ T3832] CPU: 1 PID: 3832 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 103.160783][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.170832][ T3832] Call Trace: [ 103.174098][ T3832] [ 103.177115][ T3832] dump_stack_lvl+0xcd/0x134 [ 103.181705][ T3832] should_fail.cold+0x5/0xa [ 103.186217][ T3832] should_failslab+0x5/0x10 [ 103.190717][ T3832] kmem_cache_alloc_trace+0x60/0x3f0 [ 103.196010][ T3832] ? ref_tracker_alloc+0x14c/0x550 [ 103.201128][ T3832] ref_tracker_alloc+0x14c/0x550 [ 103.206068][ T3832] ? ref_tracker_free+0x6b0/0x6b0 [ 103.211084][ T3832] ? lock_release+0x720/0x720 [ 103.215771][ T3832] ? do_raw_spin_lock+0x120/0x2a0 [ 103.220789][ T3832] ? rwlock_bug.part.0+0x90/0x90 [ 103.225739][ T3832] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 103.231112][ T3832] linkwatch_fire_event+0x202/0x260 [ 103.236332][ T3832] netif_carrier_off+0x96/0xb0 [ 103.241107][ T3832] __tun_detach+0xfe7/0x13e0 [ 103.245699][ T3832] tun_chr_close+0xc4/0x180 [ 103.250194][ T3832] __fput+0x277/0x9d0 [ 103.254165][ T3832] ? __tun_detach+0x13e0/0x13e0 [ 103.259013][ T3832] task_work_run+0xdd/0x1a0 [ 103.263528][ T3832] ptrace_notify+0x114/0x140 [ 103.268115][ T3832] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 103.274374][ T3832] syscall_exit_to_user_mode+0x9/0x60 [ 103.279757][ T3832] do_syscall_64+0x42/0xb0 [ 103.284177][ T3832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 103.290081][ T3832] RIP: 0033:0x7fc6cd2767a3 [ 103.294503][ T3832] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 103.314110][ T3832] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.322534][ T3832] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 103.330506][ T3832] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3832] close(3) = 0 [pid 3832] close(4) = 0 [pid 3832] close(5) = -1 EBADF (Bad file descriptor) [pid 3832] close(6) = -1 EBADF (Bad file descriptor) [pid 3832] close(7) = -1 EBADF (Bad file descriptor) [ 103.338498][ T3832] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 103.346484][ T3832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 103.354457][ T3832] R13: 00000000000f4240 R14: 0000000000019196 R15: 00007ffdc49a5924 [ 103.362446][ T3832] [pid 3832] close(8) = -1 EBADF (Bad file descriptor) [pid 3832] close(9) = -1 EBADF (Bad file descriptor) [pid 3832] close(10) = -1 EBADF (Bad file descriptor) [pid 3832] close(11) = -1 EBADF (Bad file descriptor) [pid 3832] close(12) = -1 EBADF (Bad file descriptor) [pid 3832] close(13) = -1 EBADF (Bad file descriptor) [pid 3832] close(14) = -1 EBADF (Bad file descriptor) [pid 3832] close(15) = -1 EBADF (Bad file descriptor) [pid 3832] close(16) = -1 EBADF (Bad file descriptor) [pid 3832] close(17) = -1 EBADF (Bad file descriptor) [pid 3832] close(18) = -1 EBADF (Bad file descriptor) [pid 3832] close(19) = -1 EBADF (Bad file descriptor) [pid 3832] close(20) = -1 EBADF (Bad file descriptor) [pid 3832] close(21) = -1 EBADF (Bad file descriptor) [pid 3832] close(22) = -1 EBADF (Bad file descriptor) [pid 3832] close(23) = -1 EBADF (Bad file descriptor) [pid 3832] close(24) = -1 EBADF (Bad file descriptor) [pid 3832] close(25) = -1 EBADF (Bad file descriptor) [pid 3832] close(26) = -1 EBADF (Bad file descriptor) [pid 3832] close(27) = -1 EBADF (Bad file descriptor) [pid 3832] close(28) = -1 EBADF (Bad file descriptor) [pid 3832] close(29) = -1 EBADF (Bad file descriptor) [pid 3832] exit_group(0) = ? [pid 3832] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=199, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 200 ./strace-static-x86_64: Process 3833 attached [pid 3833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3833] setpgid(0, 0) = 0 [pid 3833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3833] write(3, "1000", 4) = 4 [pid 3833] close(3) = 0 [pid 3833] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3833] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3833] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3833] write(4, "5", 1) = 1 [pid 3833] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 103.445180][ T3833] FAULT_INJECTION: forcing a failure. [ 103.445180][ T3833] name failslab, interval 1, probability 0, space 0, times 0 [ 103.458335][ T3833] CPU: 1 PID: 3833 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 103.468499][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.478568][ T3833] Call Trace: [ 103.481843][ T3833] [ 103.484765][ T3833] dump_stack_lvl+0xcd/0x134 [ 103.489394][ T3833] should_fail.cold+0x5/0xa [ 103.493920][ T3833] should_failslab+0x5/0x10 [ 103.498422][ T3833] kmem_cache_alloc_trace+0x60/0x3f0 [ 103.504139][ T3833] ? ref_tracker_alloc+0x14c/0x550 [ 103.509251][ T3833] ref_tracker_alloc+0x14c/0x550 [ 103.514186][ T3833] ? ref_tracker_free+0x6b0/0x6b0 [ 103.519201][ T3833] ? lock_release+0x720/0x720 [ 103.523871][ T3833] ? do_raw_spin_lock+0x120/0x2a0 [ 103.528885][ T3833] ? rwlock_bug.part.0+0x90/0x90 [ 103.533912][ T3833] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 103.539371][ T3833] linkwatch_fire_event+0x202/0x260 [ 103.544568][ T3833] netif_carrier_off+0x96/0xb0 [ 103.549323][ T3833] __tun_detach+0xfe7/0x13e0 [ 103.553911][ T3833] tun_chr_close+0xc4/0x180 [ 103.558402][ T3833] __fput+0x277/0x9d0 [ 103.562378][ T3833] ? __tun_detach+0x13e0/0x13e0 [ 103.567219][ T3833] task_work_run+0xdd/0x1a0 [ 103.571719][ T3833] ptrace_notify+0x114/0x140 [ 103.576299][ T3833] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 103.582531][ T3833] syscall_exit_to_user_mode+0x9/0x60 [ 103.587892][ T3833] do_syscall_64+0x42/0xb0 [ 103.592299][ T3833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 103.598185][ T3833] RIP: 0033:0x7fc6cd2767a3 [ 103.602588][ T3833] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 103.622188][ T3833] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.630615][ T3833] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3833] close(3) = 0 [pid 3833] close(4) = 0 [pid 3833] close(5) = -1 EBADF (Bad file descriptor) [pid 3833] close(6) = -1 EBADF (Bad file descriptor) [pid 3833] close(7) = -1 EBADF (Bad file descriptor) [pid 3833] close(8) = -1 EBADF (Bad file descriptor) [pid 3833] close(9) = -1 EBADF (Bad file descriptor) [pid 3833] close(10) = -1 EBADF (Bad file descriptor) [pid 3833] close(11) = -1 EBADF (Bad file descriptor) [pid 3833] close(12) = -1 EBADF (Bad file descriptor) [pid 3833] close(13) = -1 EBADF (Bad file descriptor) [pid 3833] close(14) = -1 EBADF (Bad file descriptor) [pid 3833] close(15) = -1 EBADF (Bad file descriptor) [pid 3833] close(16) = -1 EBADF (Bad file descriptor) [pid 3833] close(17) = -1 EBADF (Bad file descriptor) [pid 3833] close(18) = -1 EBADF (Bad file descriptor) [pid 3833] close(19) = -1 EBADF (Bad file descriptor) [pid 3833] close(20) = -1 EBADF (Bad file descriptor) [pid 3833] close(21) = -1 EBADF (Bad file descriptor) [pid 3833] close(22) = -1 EBADF (Bad file descriptor) [pid 3833] close(23) = -1 EBADF (Bad file descriptor) [pid 3833] close(24) = -1 EBADF (Bad file descriptor) [pid 3833] close(25) = -1 EBADF (Bad file descriptor) [pid 3833] close(26) = -1 EBADF (Bad file descriptor) [pid 3833] close(27) = -1 EBADF (Bad file descriptor) [pid 3833] close(28) = -1 EBADF (Bad file descriptor) [pid 3833] close(29) = -1 EBADF (Bad file descriptor) [pid 3833] exit_group(0) = ? [pid 3833] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 201 ./strace-static-x86_64: Process 3834 attached [pid 3834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3834] setpgid(0, 0) = 0 [ 103.638576][ T3833] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 103.646537][ T3833] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 103.654500][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 103.662461][ T3833] R13: 00000000000f4240 R14: 00000000000192c1 R15: 00007ffdc49a5924 [ 103.670443][ T3833] [pid 3834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3834] write(3, "1000", 4) = 4 [pid 3834] close(3) = 0 [pid 3834] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3834] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3834] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3834] write(4, "5", 1) = 1 [pid 3834] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 103.736149][ T3834] FAULT_INJECTION: forcing a failure. [ 103.736149][ T3834] name failslab, interval 1, probability 0, space 0, times 0 [ 103.748794][ T3834] CPU: 1 PID: 3834 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 103.759059][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.769121][ T3834] Call Trace: [ 103.772393][ T3834] [ 103.775310][ T3834] dump_stack_lvl+0xcd/0x134 [ 103.779895][ T3834] should_fail.cold+0x5/0xa [ 103.784391][ T3834] should_failslab+0x5/0x10 [ 103.788899][ T3834] kmem_cache_alloc_trace+0x60/0x3f0 [ 103.794452][ T3834] ? ref_tracker_alloc+0x14c/0x550 [ 103.799559][ T3834] ref_tracker_alloc+0x14c/0x550 [ 103.804511][ T3834] ? ref_tracker_free+0x6b0/0x6b0 [ 103.809531][ T3834] ? lock_release+0x720/0x720 [ 103.814217][ T3834] ? do_raw_spin_lock+0x120/0x2a0 [ 103.819237][ T3834] ? rwlock_bug.part.0+0x90/0x90 [ 103.824266][ T3834] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 103.829652][ T3834] linkwatch_fire_event+0x202/0x260 [ 103.834847][ T3834] netif_carrier_off+0x96/0xb0 [ 103.839603][ T3834] __tun_detach+0xfe7/0x13e0 [ 103.844204][ T3834] tun_chr_close+0xc4/0x180 [ 103.848708][ T3834] __fput+0x277/0x9d0 [ 103.852674][ T3834] ? __tun_detach+0x13e0/0x13e0 [ 103.857516][ T3834] task_work_run+0xdd/0x1a0 [ 103.862014][ T3834] ptrace_notify+0x114/0x140 [ 103.866601][ T3834] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 103.872837][ T3834] syscall_exit_to_user_mode+0x9/0x60 [ 103.878200][ T3834] do_syscall_64+0x42/0xb0 [ 103.882602][ T3834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 103.888568][ T3834] RIP: 0033:0x7fc6cd2767a3 [ 103.892967][ T3834] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 103.912565][ T3834] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.920975][ T3834] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3834] close(3) = 0 [pid 3834] close(4) = 0 [pid 3834] close(5) = -1 EBADF (Bad file descriptor) [pid 3834] close(6) = -1 EBADF (Bad file descriptor) [pid 3834] close(7) = -1 EBADF (Bad file descriptor) [pid 3834] close(8) = -1 EBADF (Bad file descriptor) [pid 3834] close(9) = -1 EBADF (Bad file descriptor) [pid 3834] close(10) = -1 EBADF (Bad file descriptor) [pid 3834] close(11) = -1 EBADF (Bad file descriptor) [pid 3834] close(12) = -1 EBADF (Bad file descriptor) [pid 3834] close(13) = -1 EBADF (Bad file descriptor) [pid 3834] close(14) = -1 EBADF (Bad file descriptor) [pid 3834] close(15) = -1 EBADF (Bad file descriptor) [pid 3834] close(16) = -1 EBADF (Bad file descriptor) [pid 3834] close(17) = -1 EBADF (Bad file descriptor) [pid 3834] close(18) = -1 EBADF (Bad file descriptor) [pid 3834] close(19) = -1 EBADF (Bad file descriptor) [pid 3834] close(20) = -1 EBADF (Bad file descriptor) [pid 3834] close(21) = -1 EBADF (Bad file descriptor) [pid 3834] close(22) = -1 EBADF (Bad file descriptor) [pid 3834] close(23) = -1 EBADF (Bad file descriptor) [pid 3834] close(24) = -1 EBADF (Bad file descriptor) [pid 3834] close(25) = -1 EBADF (Bad file descriptor) [pid 3834] close(26) = -1 EBADF (Bad file descriptor) [pid 3834] close(27) = -1 EBADF (Bad file descriptor) [pid 3834] close(28) = -1 EBADF (Bad file descriptor) [pid 3834] close(29) = -1 EBADF (Bad file descriptor) [pid 3834] exit_group(0) = ? [pid 3834] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=201, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 202 ./strace-static-x86_64: Process 3835 attached [pid 3835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3835] setpgid(0, 0) = 0 [pid 3835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3835] write(3, "1000", 4) = 4 [pid 3835] close(3) = 0 [pid 3835] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3835] ioctl(3, TUNSETIFF, 0x20000000) = 0 [ 103.928938][ T3834] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 103.937685][ T3834] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 103.945655][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 103.953636][ T3834] R13: 00000000000f4240 R14: 00000000000193f6 R15: 00007ffdc49a5924 [ 103.961620][ T3834] [pid 3835] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3835] write(4, "5", 1) = 1 [pid 3835] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 104.020564][ T3835] FAULT_INJECTION: forcing a failure. [ 104.020564][ T3835] name failslab, interval 1, probability 0, space 0, times 0 [ 104.033201][ T3835] CPU: 1 PID: 3835 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 104.043349][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.053420][ T3835] Call Trace: [ 104.056689][ T3835] [ 104.059604][ T3835] dump_stack_lvl+0xcd/0x134 [ 104.064184][ T3835] should_fail.cold+0x5/0xa [ 104.068677][ T3835] should_failslab+0x5/0x10 [ 104.073164][ T3835] kmem_cache_alloc_trace+0x60/0x3f0 [ 104.078431][ T3835] ? ref_tracker_alloc+0x14c/0x550 [ 104.083543][ T3835] ref_tracker_alloc+0x14c/0x550 [ 104.088474][ T3835] ? ref_tracker_free+0x6b0/0x6b0 [ 104.093493][ T3835] ? lock_release+0x720/0x720 [ 104.098161][ T3835] ? do_raw_spin_lock+0x120/0x2a0 [ 104.103179][ T3835] ? rwlock_bug.part.0+0x90/0x90 [ 104.108109][ T3835] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 104.113482][ T3835] linkwatch_fire_event+0x202/0x260 [ 104.118679][ T3835] netif_carrier_off+0x96/0xb0 [ 104.123441][ T3835] __tun_detach+0xfe7/0x13e0 [ 104.128036][ T3835] tun_chr_close+0xc4/0x180 [ 104.132532][ T3835] __fput+0x277/0x9d0 [ 104.136503][ T3835] ? __tun_detach+0x13e0/0x13e0 [ 104.141346][ T3835] task_work_run+0xdd/0x1a0 [ 104.145844][ T3835] ptrace_notify+0x114/0x140 [ 104.150425][ T3835] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 104.156658][ T3835] syscall_exit_to_user_mode+0x9/0x60 [ 104.162037][ T3835] do_syscall_64+0x42/0xb0 [ 104.166445][ T3835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.172327][ T3835] RIP: 0033:0x7fc6cd2767a3 [ 104.176730][ T3835] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 104.196333][ T3835] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 104.204745][ T3835] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 104.212713][ T3835] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3835] close(3) = 0 [pid 3835] close(4) = 0 [pid 3835] close(5) = -1 EBADF (Bad file descriptor) [pid 3835] close(6) = -1 EBADF (Bad file descriptor) [pid 3835] close(7) = -1 EBADF (Bad file descriptor) [pid 3835] close(8) = -1 EBADF (Bad file descriptor) [pid 3835] close(9) = -1 EBADF (Bad file descriptor) [pid 3835] close(10) = -1 EBADF (Bad file descriptor) [pid 3835] close(11) = -1 EBADF (Bad file descriptor) [pid 3835] close(12) = -1 EBADF (Bad file descriptor) [pid 3835] close(13) = -1 EBADF (Bad file descriptor) [pid 3835] close(14) = -1 EBADF (Bad file descriptor) [pid 3835] close(15) = -1 EBADF (Bad file descriptor) [pid 3835] close(16) = -1 EBADF (Bad file descriptor) [pid 3835] close(17) = -1 EBADF (Bad file descriptor) [pid 3835] close(18) = -1 EBADF (Bad file descriptor) [pid 3835] close(19) = -1 EBADF (Bad file descriptor) [pid 3835] close(20) = -1 EBADF (Bad file descriptor) [pid 3835] close(21) = -1 EBADF (Bad file descriptor) [pid 3835] close(22) = -1 EBADF (Bad file descriptor) [pid 3835] close(23) = -1 EBADF (Bad file descriptor) [ 104.220687][ T3835] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 104.228651][ T3835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 104.236609][ T3835] R13: 00000000000f4240 R14: 0000000000019518 R15: 00007ffdc49a5924 [ 104.244580][ T3835] [pid 3835] close(24) = -1 EBADF (Bad file descriptor) [pid 3835] close(25) = -1 EBADF (Bad file descriptor) [pid 3835] close(26) = -1 EBADF (Bad file descriptor) [pid 3835] close(27) = -1 EBADF (Bad file descriptor) [pid 3835] close(28) = -1 EBADF (Bad file descriptor) [pid 3835] close(29) = -1 EBADF (Bad file descriptor) [pid 3835] exit_group(0) = ? [pid 3835] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=202, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 203 ./strace-static-x86_64: Process 3836 attached [pid 3836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3836] setpgid(0, 0) = 0 [pid 3836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3836] write(3, "1000", 4) = 4 [pid 3836] close(3) = 0 [pid 3836] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3836] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3836] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3836] write(4, "5", 1) = 1 [pid 3836] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 104.319038][ T3836] FAULT_INJECTION: forcing a failure. [ 104.319038][ T3836] name failslab, interval 1, probability 0, space 0, times 0 [ 104.332165][ T3836] CPU: 1 PID: 3836 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 104.342330][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.352719][ T3836] Call Trace: [ 104.355997][ T3836] [ 104.358922][ T3836] dump_stack_lvl+0xcd/0x134 [ 104.363539][ T3836] should_fail.cold+0x5/0xa [ 104.368036][ T3836] should_failslab+0x5/0x10 [ 104.372528][ T3836] kmem_cache_alloc_trace+0x60/0x3f0 [ 104.377892][ T3836] ? ref_tracker_alloc+0x14c/0x550 [ 104.382998][ T3836] ref_tracker_alloc+0x14c/0x550 [ 104.387929][ T3836] ? ref_tracker_free+0x6b0/0x6b0 [ 104.392960][ T3836] ? lock_release+0x720/0x720 [ 104.397632][ T3836] ? do_raw_spin_lock+0x120/0x2a0 [ 104.402650][ T3836] ? rwlock_bug.part.0+0x90/0x90 [ 104.407579][ T3836] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 104.412953][ T3836] linkwatch_fire_event+0x202/0x260 [ 104.418162][ T3836] netif_carrier_off+0x96/0xb0 [ 104.422925][ T3836] __tun_detach+0xfe7/0x13e0 [ 104.427525][ T3836] tun_chr_close+0xc4/0x180 [ 104.432032][ T3836] __fput+0x277/0x9d0 [ 104.436004][ T3836] ? __tun_detach+0x13e0/0x13e0 [ 104.440852][ T3836] task_work_run+0xdd/0x1a0 [ 104.445360][ T3836] ptrace_notify+0x114/0x140 [ 104.449953][ T3836] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 104.456199][ T3836] syscall_exit_to_user_mode+0x9/0x60 [ 104.461567][ T3836] do_syscall_64+0x42/0xb0 [ 104.465986][ T3836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.471876][ T3836] RIP: 0033:0x7fc6cd2767a3 [ 104.476281][ T3836] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 104.495887][ T3836] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 104.504300][ T3836] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3836] close(3) = 0 [pid 3836] close(4) = 0 [pid 3836] close(5) = -1 EBADF (Bad file descriptor) [pid 3836] close(6) = -1 EBADF (Bad file descriptor) [pid 3836] close(7) = -1 EBADF (Bad file descriptor) [pid 3836] close(8) = -1 EBADF (Bad file descriptor) [pid 3836] close(9) = -1 EBADF (Bad file descriptor) [pid 3836] close(10) = -1 EBADF (Bad file descriptor) [pid 3836] close(11) = -1 EBADF (Bad file descriptor) [pid 3836] close(12) = -1 EBADF (Bad file descriptor) [pid 3836] close(13) = -1 EBADF (Bad file descriptor) [pid 3836] close(14) = -1 EBADF (Bad file descriptor) [pid 3836] close(15) = -1 EBADF (Bad file descriptor) [pid 3836] close(16) = -1 EBADF (Bad file descriptor) [pid 3836] close(17) = -1 EBADF (Bad file descriptor) [pid 3836] close(18) = -1 EBADF (Bad file descriptor) [pid 3836] close(19) = -1 EBADF (Bad file descriptor) [pid 3836] close(20) = -1 EBADF (Bad file descriptor) [pid 3836] close(21) = -1 EBADF (Bad file descriptor) [pid 3836] close(22) = -1 EBADF (Bad file descriptor) [pid 3836] close(23) = -1 EBADF (Bad file descriptor) [pid 3836] close(24) = -1 EBADF (Bad file descriptor) [pid 3836] close(25) = -1 EBADF (Bad file descriptor) [pid 3836] close(26) = -1 EBADF (Bad file descriptor) [pid 3836] close(27) = -1 EBADF (Bad file descriptor) [pid 3836] close(28) = -1 EBADF (Bad file descriptor) [pid 3836] close(29) = -1 EBADF (Bad file descriptor) [pid 3836] exit_group(0) = ? [pid 3836] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 104.512267][ T3836] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 104.520239][ T3836] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 104.528431][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 104.536402][ T3836] R13: 00000000000f4240 R14: 0000000000019634 R15: 00007ffdc49a5924 [ 104.544380][ T3836] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 204 ./strace-static-x86_64: Process 3837 attached [pid 3837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3837] setpgid(0, 0) = 0 [pid 3837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3837] write(3, "1000", 4) = 4 [pid 3837] close(3) = 0 [pid 3837] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3837] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3837] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3837] write(4, "5", 1) = 1 [pid 3837] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 104.607486][ T3837] FAULT_INJECTION: forcing a failure. [ 104.607486][ T3837] name failslab, interval 1, probability 0, space 0, times 0 [ 104.620206][ T3837] CPU: 0 PID: 3837 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 104.630355][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.640438][ T3837] Call Trace: [ 104.643709][ T3837] [ 104.646638][ T3837] dump_stack_lvl+0xcd/0x134 [ 104.651238][ T3837] should_fail.cold+0x5/0xa [ 104.655739][ T3837] should_failslab+0x5/0x10 [ 104.660243][ T3837] kmem_cache_alloc_trace+0x60/0x3f0 [ 104.665533][ T3837] ? ref_tracker_alloc+0x14c/0x550 [ 104.671511][ T3837] ref_tracker_alloc+0x14c/0x550 [ 104.676440][ T3837] ? ref_tracker_free+0x6b0/0x6b0 [ 104.681453][ T3837] ? lock_release+0x720/0x720 [ 104.686129][ T3837] ? do_raw_spin_lock+0x120/0x2a0 [ 104.691138][ T3837] ? rwlock_bug.part.0+0x90/0x90 [ 104.696062][ T3837] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 104.701425][ T3837] linkwatch_fire_event+0x202/0x260 [ 104.706618][ T3837] netif_carrier_off+0x96/0xb0 [ 104.711379][ T3837] __tun_detach+0xfe7/0x13e0 [ 104.715964][ T3837] tun_chr_close+0xc4/0x180 [ 104.720451][ T3837] __fput+0x277/0x9d0 [ 104.724448][ T3837] ? __tun_detach+0x13e0/0x13e0 [ 104.729286][ T3837] task_work_run+0xdd/0x1a0 [ 104.733778][ T3837] ptrace_notify+0x114/0x140 [ 104.738358][ T3837] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 104.744585][ T3837] syscall_exit_to_user_mode+0x9/0x60 [ 104.749950][ T3837] do_syscall_64+0x42/0xb0 [ 104.754372][ T3837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.760255][ T3837] RIP: 0033:0x7fc6cd2767a3 [ 104.764662][ T3837] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 104.784285][ T3837] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 104.793143][ T3837] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3837] close(3) = 0 [pid 3837] close(4) = 0 [pid 3837] close(5) = -1 EBADF (Bad file descriptor) [pid 3837] close(6) = -1 EBADF (Bad file descriptor) [pid 3837] close(7) = -1 EBADF (Bad file descriptor) [pid 3837] close(8) = -1 EBADF (Bad file descriptor) [pid 3837] close(9) = -1 EBADF (Bad file descriptor) [pid 3837] close(10) = -1 EBADF (Bad file descriptor) [pid 3837] close(11) = -1 EBADF (Bad file descriptor) [pid 3837] close(12) = -1 EBADF (Bad file descriptor) [pid 3837] close(13) = -1 EBADF (Bad file descriptor) [pid 3837] close(14) = -1 EBADF (Bad file descriptor) [pid 3837] close(15) = -1 EBADF (Bad file descriptor) [pid 3837] close(16) = -1 EBADF (Bad file descriptor) [pid 3837] close(17) = -1 EBADF (Bad file descriptor) [pid 3837] close(18) = -1 EBADF (Bad file descriptor) [ 104.801105][ T3837] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 104.809068][ T3837] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 104.817029][ T3837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 104.824988][ T3837] R13: 00000000000f4240 R14: 0000000000019760 R15: 00007ffdc49a5924 [ 104.832977][ T3837] [pid 3837] close(19) = -1 EBADF (Bad file descriptor) [pid 3837] close(20) = -1 EBADF (Bad file descriptor) [pid 3837] close(21) = -1 EBADF (Bad file descriptor) [pid 3837] close(22) = -1 EBADF (Bad file descriptor) [pid 3837] close(23) = -1 EBADF (Bad file descriptor) [pid 3837] close(24) = -1 EBADF (Bad file descriptor) [pid 3837] close(25) = -1 EBADF (Bad file descriptor) [pid 3837] close(26) = -1 EBADF (Bad file descriptor) [pid 3837] close(27) = -1 EBADF (Bad file descriptor) [pid 3837] close(28) = -1 EBADF (Bad file descriptor) [pid 3837] close(29) = -1 EBADF (Bad file descriptor) [pid 3837] exit_group(0) = ? [pid 3837] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=204, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 205 ./strace-static-x86_64: Process 3838 attached [pid 3838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3838] setpgid(0, 0) = 0 [pid 3838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3838] write(3, "1000", 4) = 4 [pid 3838] close(3) = 0 [pid 3838] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3838] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3838] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3838] write(4, "5", 1) = 1 [pid 3838] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 104.909244][ T3838] FAULT_INJECTION: forcing a failure. [ 104.909244][ T3838] name failslab, interval 1, probability 0, space 0, times 0 [ 104.922483][ T3838] CPU: 1 PID: 3838 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 104.932850][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.942908][ T3838] Call Trace: [ 104.946201][ T3838] [ 104.949133][ T3838] dump_stack_lvl+0xcd/0x134 [ 104.953738][ T3838] should_fail.cold+0x5/0xa [ 104.958254][ T3838] should_failslab+0x5/0x10 [ 104.962769][ T3838] kmem_cache_alloc_trace+0x60/0x3f0 [ 104.968064][ T3838] ? ref_tracker_alloc+0x14c/0x550 [ 104.973189][ T3838] ref_tracker_alloc+0x14c/0x550 [ 104.978141][ T3838] ? ref_tracker_free+0x6b0/0x6b0 [ 104.983194][ T3838] ? lock_release+0x720/0x720 [ 104.987886][ T3838] ? do_raw_spin_lock+0x120/0x2a0 [ 104.992919][ T3838] ? rwlock_bug.part.0+0x90/0x90 [ 104.997875][ T3838] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 105.003367][ T3838] linkwatch_fire_event+0x202/0x260 [ 105.008713][ T3838] netif_carrier_off+0x96/0xb0 [ 105.013495][ T3838] __tun_detach+0xfe7/0x13e0 [ 105.018132][ T3838] tun_chr_close+0xc4/0x180 [ 105.022665][ T3838] __fput+0x277/0x9d0 [ 105.026673][ T3838] ? __tun_detach+0x13e0/0x13e0 [ 105.031541][ T3838] task_work_run+0xdd/0x1a0 [ 105.036062][ T3838] ptrace_notify+0x114/0x140 [ 105.040653][ T3838] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 105.046906][ T3838] syscall_exit_to_user_mode+0x9/0x60 [ 105.052279][ T3838] do_syscall_64+0x42/0xb0 [ 105.056703][ T3838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 105.062603][ T3838] RIP: 0033:0x7fc6cd2767a3 [ 105.067015][ T3838] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 105.086635][ T3838] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.095041][ T3838] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3838] close(3) = 0 [pid 3838] close(4) = 0 [pid 3838] close(5) = -1 EBADF (Bad file descriptor) [pid 3838] close(6) = -1 EBADF (Bad file descriptor) [pid 3838] close(7) = -1 EBADF (Bad file descriptor) [pid 3838] close(8) = -1 EBADF (Bad file descriptor) [pid 3838] close(9) = -1 EBADF (Bad file descriptor) [pid 3838] close(10) = -1 EBADF (Bad file descriptor) [pid 3838] close(11) = -1 EBADF (Bad file descriptor) [pid 3838] close(12) = -1 EBADF (Bad file descriptor) [pid 3838] close(13) = -1 EBADF (Bad file descriptor) [pid 3838] close(14) = -1 EBADF (Bad file descriptor) [pid 3838] close(15) = -1 EBADF (Bad file descriptor) [pid 3838] close(16) = -1 EBADF (Bad file descriptor) [pid 3838] close(17) = -1 EBADF (Bad file descriptor) [pid 3838] close(18) = -1 EBADF (Bad file descriptor) [pid 3838] close(19) = -1 EBADF (Bad file descriptor) [pid 3838] close(20) = -1 EBADF (Bad file descriptor) [pid 3838] close(21) = -1 EBADF (Bad file descriptor) [pid 3838] close(22) = -1 EBADF (Bad file descriptor) [pid 3838] close(23) = -1 EBADF (Bad file descriptor) [pid 3838] close(24) = -1 EBADF (Bad file descriptor) [pid 3838] close(25) = -1 EBADF (Bad file descriptor) [pid 3838] close(26) = -1 EBADF (Bad file descriptor) [pid 3838] close(27) = -1 EBADF (Bad file descriptor) [pid 3838] close(28) = -1 EBADF (Bad file descriptor) [pid 3838] close(29) = -1 EBADF (Bad file descriptor) [pid 3838] exit_group(0) = ? [pid 3838] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=205, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 206 ./strace-static-x86_64: Process 3839 attached [pid 3839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3839] setpgid(0, 0) = 0 [pid 3839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 105.103013][ T3838] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 105.110980][ T3838] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 105.119038][ T3838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 105.127019][ T3838] R13: 00000000000f4240 R14: 0000000000019887 R15: 00007ffdc49a5924 [ 105.134997][ T3838] [pid 3839] write(3, "1000", 4) = 4 [pid 3839] close(3) = 0 [pid 3839] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3839] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3839] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3839] write(4, "5", 1) = 1 [pid 3839] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 105.196949][ T3839] FAULT_INJECTION: forcing a failure. [ 105.196949][ T3839] name failslab, interval 1, probability 0, space 0, times 0 [ 105.209584][ T3839] CPU: 1 PID: 3839 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 105.219727][ T3839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.229772][ T3839] Call Trace: [ 105.233035][ T3839] [ 105.236172][ T3839] dump_stack_lvl+0xcd/0x134 [ 105.240990][ T3839] should_fail.cold+0x5/0xa [ 105.245496][ T3839] should_failslab+0x5/0x10 [ 105.250002][ T3839] kmem_cache_alloc_trace+0x60/0x3f0 [ 105.255283][ T3839] ? ref_tracker_alloc+0x14c/0x550 [ 105.260398][ T3839] ref_tracker_alloc+0x14c/0x550 [ 105.265343][ T3839] ? ref_tracker_free+0x6b0/0x6b0 [ 105.270365][ T3839] ? lock_release+0x720/0x720 [ 105.275052][ T3839] ? do_raw_spin_lock+0x120/0x2a0 [ 105.280102][ T3839] ? rwlock_bug.part.0+0x90/0x90 [ 105.285043][ T3839] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 105.290422][ T3839] linkwatch_fire_event+0x202/0x260 [ 105.295631][ T3839] netif_carrier_off+0x96/0xb0 [ 105.300388][ T3839] __tun_detach+0xfe7/0x13e0 [ 105.304979][ T3839] tun_chr_close+0xc4/0x180 [ 105.309491][ T3839] __fput+0x277/0x9d0 [ 105.313463][ T3839] ? __tun_detach+0x13e0/0x13e0 [ 105.318308][ T3839] task_work_run+0xdd/0x1a0 [ 105.322813][ T3839] ptrace_notify+0x114/0x140 [ 105.327489][ T3839] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 105.333729][ T3839] syscall_exit_to_user_mode+0x9/0x60 [ 105.339104][ T3839] do_syscall_64+0x42/0xb0 [ 105.343521][ T3839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 105.349519][ T3839] RIP: 0033:0x7fc6cd2767a3 [ 105.353929][ T3839] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 105.373533][ T3839] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.382120][ T3839] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 105.390086][ T3839] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 105.398048][ T3839] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 105.406015][ T3839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 105.413999][ T3839] R13: 00000000000f4240 R14: 00000000000199ad R15: 00007ffdc49a5924 [ 105.422109][ T3839] [pid 3839] close(3) = 0 [pid 3839] close(4) = 0 [pid 3839] close(5) = -1 EBADF (Bad file descriptor) [pid 3839] close(6) = -1 EBADF (Bad file descriptor) [pid 3839] close(7) = -1 EBADF (Bad file descriptor) [pid 3839] close(8) = -1 EBADF (Bad file descriptor) [pid 3839] close(9) = -1 EBADF (Bad file descriptor) [pid 3839] close(10) = -1 EBADF (Bad file descriptor) [pid 3839] close(11) = -1 EBADF (Bad file descriptor) [pid 3839] close(12) = -1 EBADF (Bad file descriptor) [pid 3839] close(13) = -1 EBADF (Bad file descriptor) [pid 3839] close(14) = -1 EBADF (Bad file descriptor) [pid 3839] close(15) = -1 EBADF (Bad file descriptor) [pid 3839] close(16) = -1 EBADF (Bad file descriptor) [pid 3839] close(17) = -1 EBADF (Bad file descriptor) [pid 3839] close(18) = -1 EBADF (Bad file descriptor) [pid 3839] close(19) = -1 EBADF (Bad file descriptor) [pid 3839] close(20) = -1 EBADF (Bad file descriptor) [pid 3839] close(21) = -1 EBADF (Bad file descriptor) [pid 3839] close(22) = -1 EBADF (Bad file descriptor) [pid 3839] close(23) = -1 EBADF (Bad file descriptor) [pid 3839] close(24) = -1 EBADF (Bad file descriptor) [pid 3839] close(25) = -1 EBADF (Bad file descriptor) [pid 3839] close(26) = -1 EBADF (Bad file descriptor) [pid 3839] close(27) = -1 EBADF (Bad file descriptor) [pid 3839] close(28) = -1 EBADF (Bad file descriptor) [pid 3839] close(29) = -1 EBADF (Bad file descriptor) [pid 3839] exit_group(0) = ? [pid 3839] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3840 attached , child_tidptr=0x5555570bd5d0) = 207 [pid 3840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3840] setpgid(0, 0) = 0 [pid 3840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3840] write(3, "1000", 4) = 4 [pid 3840] close(3) = 0 [pid 3840] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3840] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3840] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3840] write(4, "5", 1) = 1 [pid 3840] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 105.512969][ T3840] FAULT_INJECTION: forcing a failure. [ 105.512969][ T3840] name failslab, interval 1, probability 0, space 0, times 0 [ 105.525875][ T3840] CPU: 0 PID: 3840 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 105.536208][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.546243][ T3840] Call Trace: [ 105.549499][ T3840] [ 105.552408][ T3840] dump_stack_lvl+0xcd/0x134 [ 105.556993][ T3840] should_fail.cold+0x5/0xa [ 105.561599][ T3840] should_failslab+0x5/0x10 [ 105.566092][ T3840] kmem_cache_alloc_trace+0x60/0x3f0 [ 105.571389][ T3840] ? ref_tracker_alloc+0x14c/0x550 [ 105.576681][ T3840] ref_tracker_alloc+0x14c/0x550 [ 105.581602][ T3840] ? ref_tracker_free+0x6b0/0x6b0 [ 105.586605][ T3840] ? lock_release+0x720/0x720 [ 105.591264][ T3840] ? do_raw_spin_lock+0x120/0x2a0 [ 105.596269][ T3840] ? rwlock_bug.part.0+0x90/0x90 [ 105.601187][ T3840] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 105.606800][ T3840] linkwatch_fire_event+0x202/0x260 [ 105.612115][ T3840] netif_carrier_off+0x96/0xb0 [ 105.616870][ T3840] __tun_detach+0xfe7/0x13e0 [ 105.621467][ T3840] tun_chr_close+0xc4/0x180 [ 105.625965][ T3840] __fput+0x277/0x9d0 [ 105.629958][ T3840] ? __tun_detach+0x13e0/0x13e0 [ 105.634885][ T3840] task_work_run+0xdd/0x1a0 [ 105.639382][ T3840] ptrace_notify+0x114/0x140 [ 105.643973][ T3840] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 105.650215][ T3840] syscall_exit_to_user_mode+0x9/0x60 [ 105.655601][ T3840] do_syscall_64+0x42/0xb0 [ 105.660010][ T3840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 105.665894][ T3840] RIP: 0033:0x7fc6cd2767a3 [ 105.670303][ T3840] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 105.689911][ T3840] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.698315][ T3840] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 105.706359][ T3840] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 105.714311][ T3840] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 105.722272][ T3840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 105.730234][ T3840] R13: 00000000000f4240 R14: 0000000000019acf R15: 00007ffdc49a5924 [ 105.738204][ T3840] [pid 3840] close(3) = 0 [pid 3840] close(4) = 0 [pid 3840] close(5) = -1 EBADF (Bad file descriptor) [pid 3840] close(6) = -1 EBADF (Bad file descriptor) [pid 3840] close(7) = -1 EBADF (Bad file descriptor) [pid 3840] close(8) = -1 EBADF (Bad file descriptor) [pid 3840] close(9) = -1 EBADF (Bad file descriptor) [pid 3840] close(10) = -1 EBADF (Bad file descriptor) [pid 3840] close(11) = -1 EBADF (Bad file descriptor) [pid 3840] close(12) = -1 EBADF (Bad file descriptor) [pid 3840] close(13) = -1 EBADF (Bad file descriptor) [pid 3840] close(14) = -1 EBADF (Bad file descriptor) [pid 3840] close(15) = -1 EBADF (Bad file descriptor) [pid 3840] close(16) = -1 EBADF (Bad file descriptor) [pid 3840] close(17) = -1 EBADF (Bad file descriptor) [pid 3840] close(18) = -1 EBADF (Bad file descriptor) [pid 3840] close(19) = -1 EBADF (Bad file descriptor) [pid 3840] close(20) = -1 EBADF (Bad file descriptor) [pid 3840] close(21) = -1 EBADF (Bad file descriptor) [pid 3840] close(22) = -1 EBADF (Bad file descriptor) [pid 3840] close(23) = -1 EBADF (Bad file descriptor) [pid 3840] close(24) = -1 EBADF (Bad file descriptor) [pid 3840] close(25) = -1 EBADF (Bad file descriptor) [pid 3840] close(26) = -1 EBADF (Bad file descriptor) [pid 3840] close(27) = -1 EBADF (Bad file descriptor) [pid 3840] close(28) = -1 EBADF (Bad file descriptor) [pid 3840] close(29) = -1 EBADF (Bad file descriptor) [pid 3840] exit_group(0) = ? [pid 3840] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=207, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 208 ./strace-static-x86_64: Process 3842 attached [pid 3842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3842] setpgid(0, 0) = 0 [pid 3842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3842] write(3, "1000", 4) = 4 [pid 3842] close(3) = 0 [pid 3842] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3842] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3842] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3842] write(4, "5", 1) = 1 [pid 3842] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 105.818697][ T3842] FAULT_INJECTION: forcing a failure. [ 105.818697][ T3842] name failslab, interval 1, probability 0, space 0, times 0 [ 105.831327][ T3842] CPU: 0 PID: 3842 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 105.841477][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.851528][ T3842] Call Trace: [ 105.854810][ T3842] [ 105.857736][ T3842] dump_stack_lvl+0xcd/0x134 [ 105.862338][ T3842] should_fail.cold+0x5/0xa [ 105.866867][ T3842] should_failslab+0x5/0x10 [ 105.871448][ T3842] kmem_cache_alloc_trace+0x60/0x3f0 [ 105.876828][ T3842] ? ref_tracker_alloc+0x14c/0x550 [ 105.881943][ T3842] ref_tracker_alloc+0x14c/0x550 [ 105.886874][ T3842] ? ref_tracker_free+0x6b0/0x6b0 [ 105.891908][ T3842] ? lock_release+0x720/0x720 [ 105.896580][ T3842] ? do_raw_spin_lock+0x120/0x2a0 [ 105.901617][ T3842] ? rwlock_bug.part.0+0x90/0x90 [ 105.906546][ T3842] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 105.911920][ T3842] linkwatch_fire_event+0x202/0x260 [ 105.917118][ T3842] netif_carrier_off+0x96/0xb0 [ 105.921872][ T3842] __tun_detach+0xfe7/0x13e0 [ 105.926463][ T3842] tun_chr_close+0xc4/0x180 [ 105.930966][ T3842] __fput+0x277/0x9d0 [ 105.934940][ T3842] ? __tun_detach+0x13e0/0x13e0 [ 105.939791][ T3842] task_work_run+0xdd/0x1a0 [ 105.944293][ T3842] ptrace_notify+0x114/0x140 [ 105.948877][ T3842] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 105.955110][ T3842] syscall_exit_to_user_mode+0x9/0x60 [ 105.960481][ T3842] do_syscall_64+0x42/0xb0 [ 105.964894][ T3842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 105.970776][ T3842] RIP: 0033:0x7fc6cd2767a3 [ 105.975181][ T3842] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 105.994887][ T3842] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.003343][ T3842] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 106.011408][ T3842] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3842] close(3) = 0 [pid 3842] close(4) = 0 [pid 3842] close(5) = -1 EBADF (Bad file descriptor) [pid 3842] close(6) = -1 EBADF (Bad file descriptor) [pid 3842] close(7) = -1 EBADF (Bad file descriptor) [pid 3842] close(8) = -1 EBADF (Bad file descriptor) [pid 3842] close(9) = -1 EBADF (Bad file descriptor) [pid 3842] close(10) = -1 EBADF (Bad file descriptor) [pid 3842] close(11) = -1 EBADF (Bad file descriptor) [pid 3842] close(12) = -1 EBADF (Bad file descriptor) [pid 3842] close(13) = -1 EBADF (Bad file descriptor) [pid 3842] close(14) = -1 EBADF (Bad file descriptor) [pid 3842] close(15) = -1 EBADF (Bad file descriptor) [pid 3842] close(16) = -1 EBADF (Bad file descriptor) [pid 3842] close(17) = -1 EBADF (Bad file descriptor) [pid 3842] close(18) = -1 EBADF (Bad file descriptor) [pid 3842] close(19) = -1 EBADF (Bad file descriptor) [pid 3842] close(20) = -1 EBADF (Bad file descriptor) [pid 3842] close(21) = -1 EBADF (Bad file descriptor) [pid 3842] close(22) = -1 EBADF (Bad file descriptor) [pid 3842] close(23) = -1 EBADF (Bad file descriptor) [pid 3842] close(24) = -1 EBADF (Bad file descriptor) [pid 3842] close(25) = -1 EBADF (Bad file descriptor) [pid 3842] close(26) = -1 EBADF (Bad file descriptor) [pid 3842] close(27) = -1 EBADF (Bad file descriptor) [pid 3842] close(28) = -1 EBADF (Bad file descriptor) [pid 3842] close(29) = -1 EBADF (Bad file descriptor) [pid 3842] exit_group(0) = ? [pid 3842] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=208, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 209 ./strace-static-x86_64: Process 3843 attached [pid 3843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3843] setpgid(0, 0) = 0 [ 106.019379][ T3842] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 106.027348][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.035313][ T3842] R13: 00000000000f4240 R14: 0000000000019c0c R15: 00007ffdc49a5924 [ 106.043288][ T3842] [pid 3843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3843] write(3, "1000", 4) = 4 [pid 3843] close(3) = 0 [pid 3843] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3843] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3843] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3843] write(4, "5", 1) = 1 [pid 3843] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 106.108778][ T3843] FAULT_INJECTION: forcing a failure. [ 106.108778][ T3843] name failslab, interval 1, probability 0, space 0, times 0 [ 106.121613][ T3843] CPU: 0 PID: 3843 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 106.131760][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.141829][ T3843] Call Trace: [ 106.145099][ T3843] [ 106.148018][ T3843] dump_stack_lvl+0xcd/0x134 [ 106.152608][ T3843] should_fail.cold+0x5/0xa [ 106.157102][ T3843] should_failslab+0x5/0x10 [ 106.161596][ T3843] kmem_cache_alloc_trace+0x60/0x3f0 [ 106.166870][ T3843] ? ref_tracker_alloc+0x14c/0x550 [ 106.171990][ T3843] ref_tracker_alloc+0x14c/0x550 [ 106.176926][ T3843] ? ref_tracker_free+0x6b0/0x6b0 [ 106.181969][ T3843] ? lock_release+0x720/0x720 [ 106.186644][ T3843] ? do_raw_spin_lock+0x120/0x2a0 [ 106.191663][ T3843] ? rwlock_bug.part.0+0x90/0x90 [ 106.196595][ T3843] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 106.201963][ T3843] linkwatch_fire_event+0x202/0x260 [ 106.207162][ T3843] netif_carrier_off+0x96/0xb0 [ 106.211921][ T3843] __tun_detach+0xfe7/0x13e0 [ 106.216510][ T3843] tun_chr_close+0xc4/0x180 [ 106.221008][ T3843] __fput+0x277/0x9d0 [ 106.224979][ T3843] ? __tun_detach+0x13e0/0x13e0 [ 106.229829][ T3843] task_work_run+0xdd/0x1a0 [ 106.234336][ T3843] ptrace_notify+0x114/0x140 [ 106.238921][ T3843] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 106.245161][ T3843] syscall_exit_to_user_mode+0x9/0x60 [ 106.250529][ T3843] do_syscall_64+0x42/0xb0 [ 106.254945][ T3843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 106.260835][ T3843] RIP: 0033:0x7fc6cd2767a3 [ 106.265245][ T3843] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 106.284843][ T3843] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.293292][ T3843] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 106.301348][ T3843] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3843] close(3) = 0 [pid 3843] close(4) = 0 [pid 3843] close(5) = -1 EBADF (Bad file descriptor) [pid 3843] close(6) = -1 EBADF (Bad file descriptor) [pid 3843] close(7) = -1 EBADF (Bad file descriptor) [pid 3843] close(8) = -1 EBADF (Bad file descriptor) [pid 3843] close(9) = -1 EBADF (Bad file descriptor) [pid 3843] close(10) = -1 EBADF (Bad file descriptor) [pid 3843] close(11) = -1 EBADF (Bad file descriptor) [pid 3843] close(12) = -1 EBADF (Bad file descriptor) [pid 3843] close(13) = -1 EBADF (Bad file descriptor) [pid 3843] close(14) = -1 EBADF (Bad file descriptor) [pid 3843] close(15) = -1 EBADF (Bad file descriptor) [pid 3843] close(16) = -1 EBADF (Bad file descriptor) [pid 3843] close(17) = -1 EBADF (Bad file descriptor) [pid 3843] close(18) = -1 EBADF (Bad file descriptor) [pid 3843] close(19) = -1 EBADF (Bad file descriptor) [pid 3843] close(20) = -1 EBADF (Bad file descriptor) [pid 3843] close(21) = -1 EBADF (Bad file descriptor) [pid 3843] close(22) = -1 EBADF (Bad file descriptor) [pid 3843] close(23) = -1 EBADF (Bad file descriptor) [pid 3843] close(24) = -1 EBADF (Bad file descriptor) [pid 3843] close(25) = -1 EBADF (Bad file descriptor) [pid 3843] close(26) = -1 EBADF (Bad file descriptor) [pid 3843] close(27) = -1 EBADF (Bad file descriptor) [pid 3843] close(28) = -1 EBADF (Bad file descriptor) [pid 3843] close(29) = -1 EBADF (Bad file descriptor) [pid 3843] exit_group(0) = ? [pid 3843] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [ 106.309317][ T3843] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 106.317288][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.325256][ T3843] R13: 00000000000f4240 R14: 0000000000019d3d R15: 00007ffdc49a5924 [ 106.333233][ T3843] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3844 attached , child_tidptr=0x5555570bd5d0) = 210 [pid 3844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3844] setpgid(0, 0) = 0 [pid 3844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3844] write(3, "1000", 4) = 4 [pid 3844] close(3) = 0 [pid 3844] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3844] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3844] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3844] write(4, "5", 1) = 1 [pid 3844] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 106.403092][ T3844] FAULT_INJECTION: forcing a failure. [ 106.403092][ T3844] name failslab, interval 1, probability 0, space 0, times 0 [ 106.415719][ T3844] CPU: 0 PID: 3844 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 106.425862][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.436002][ T3844] Call Trace: [ 106.439283][ T3844] [ 106.442216][ T3844] dump_stack_lvl+0xcd/0x134 [ 106.446837][ T3844] should_fail.cold+0x5/0xa [ 106.451360][ T3844] should_failslab+0x5/0x10 [ 106.455889][ T3844] kmem_cache_alloc_trace+0x60/0x3f0 [ 106.461199][ T3844] ? ref_tracker_alloc+0x14c/0x550 [ 106.466322][ T3844] ref_tracker_alloc+0x14c/0x550 [ 106.471256][ T3844] ? ref_tracker_free+0x6b0/0x6b0 [ 106.476273][ T3844] ? lock_release+0x720/0x720 [ 106.480950][ T3844] ? do_raw_spin_lock+0x120/0x2a0 [ 106.485968][ T3844] ? rwlock_bug.part.0+0x90/0x90 [ 106.490909][ T3844] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 106.496284][ T3844] linkwatch_fire_event+0x202/0x260 [ 106.501488][ T3844] netif_carrier_off+0x96/0xb0 [ 106.506241][ T3844] __tun_detach+0xfe7/0x13e0 [ 106.510840][ T3844] tun_chr_close+0xc4/0x180 [ 106.515339][ T3844] __fput+0x277/0x9d0 [ 106.519320][ T3844] ? __tun_detach+0x13e0/0x13e0 [ 106.524171][ T3844] task_work_run+0xdd/0x1a0 [ 106.528676][ T3844] ptrace_notify+0x114/0x140 [ 106.533265][ T3844] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 106.539509][ T3844] syscall_exit_to_user_mode+0x9/0x60 [ 106.544878][ T3844] do_syscall_64+0x42/0xb0 [ 106.549293][ T3844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 106.555189][ T3844] RIP: 0033:0x7fc6cd2767a3 [ 106.559609][ T3844] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 106.579218][ T3844] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.587626][ T3844] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 106.595587][ T3844] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3844] close(3) = 0 [pid 3844] close(4) = 0 [pid 3844] close(5) = -1 EBADF (Bad file descriptor) [pid 3844] close(6) = -1 EBADF (Bad file descriptor) [pid 3844] close(7) = -1 EBADF (Bad file descriptor) [pid 3844] close(8) = -1 EBADF (Bad file descriptor) [pid 3844] close(9) = -1 EBADF (Bad file descriptor) [pid 3844] close(10) = -1 EBADF (Bad file descriptor) [pid 3844] close(11) = -1 EBADF (Bad file descriptor) [pid 3844] close(12) = -1 EBADF (Bad file descriptor) [pid 3844] close(13) = -1 EBADF (Bad file descriptor) [pid 3844] close(14) = -1 EBADF (Bad file descriptor) [pid 3844] close(15) = -1 EBADF (Bad file descriptor) [pid 3844] close(16) = -1 EBADF (Bad file descriptor) [pid 3844] close(17) = -1 EBADF (Bad file descriptor) [pid 3844] close(18) = -1 EBADF (Bad file descriptor) [pid 3844] close(19) = -1 EBADF (Bad file descriptor) [pid 3844] close(20) = -1 EBADF (Bad file descriptor) [pid 3844] close(21) = -1 EBADF (Bad file descriptor) [ 106.603544][ T3844] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 106.611506][ T3844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.619474][ T3844] R13: 00000000000f4240 R14: 0000000000019e5d R15: 00007ffdc49a5924 [ 106.627455][ T3844] [pid 3844] close(22) = -1 EBADF (Bad file descriptor) [pid 3844] close(23) = -1 EBADF (Bad file descriptor) [pid 3844] close(24) = -1 EBADF (Bad file descriptor) [pid 3844] close(25) = -1 EBADF (Bad file descriptor) [pid 3844] close(26) = -1 EBADF (Bad file descriptor) [pid 3844] close(27) = -1 EBADF (Bad file descriptor) [pid 3844] close(28) = -1 EBADF (Bad file descriptor) [pid 3844] close(29) = -1 EBADF (Bad file descriptor) [pid 3844] exit_group(0) = ? [pid 3844] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=210, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 211 ./strace-static-x86_64: Process 3845 attached [pid 3845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3845] setpgid(0, 0) = 0 [pid 3845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3845] write(3, "1000", 4) = 4 [pid 3845] close(3) = 0 [pid 3845] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3845] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3845] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3845] write(4, "5", 1) = 1 [pid 3845] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 106.702263][ T3845] FAULT_INJECTION: forcing a failure. [ 106.702263][ T3845] name failslab, interval 1, probability 0, space 0, times 0 [ 106.715808][ T3845] CPU: 0 PID: 3845 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 106.725976][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.736030][ T3845] Call Trace: [ 106.739304][ T3845] [ 106.742320][ T3845] dump_stack_lvl+0xcd/0x134 [ 106.746926][ T3845] should_fail.cold+0x5/0xa [ 106.751442][ T3845] should_failslab+0x5/0x10 [ 106.755976][ T3845] kmem_cache_alloc_trace+0x60/0x3f0 [ 106.761390][ T3845] ? ref_tracker_alloc+0x14c/0x550 [ 106.766597][ T3845] ref_tracker_alloc+0x14c/0x550 [ 106.771542][ T3845] ? ref_tracker_free+0x6b0/0x6b0 [ 106.776584][ T3845] ? lock_release+0x720/0x720 [ 106.781351][ T3845] ? do_raw_spin_lock+0x120/0x2a0 [ 106.786400][ T3845] ? rwlock_bug.part.0+0x90/0x90 [ 106.791339][ T3845] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 106.796728][ T3845] linkwatch_fire_event+0x202/0x260 [ 106.801977][ T3845] netif_carrier_off+0x96/0xb0 [ 106.806771][ T3845] __tun_detach+0xfe7/0x13e0 [ 106.811373][ T3845] tun_chr_close+0xc4/0x180 [ 106.815886][ T3845] __fput+0x277/0x9d0 [ 106.819900][ T3845] ? __tun_detach+0x13e0/0x13e0 [ 106.824775][ T3845] task_work_run+0xdd/0x1a0 [ 106.829293][ T3845] ptrace_notify+0x114/0x140 [ 106.834069][ T3845] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 106.840414][ T3845] syscall_exit_to_user_mode+0x9/0x60 [ 106.845796][ T3845] do_syscall_64+0x42/0xb0 [ 106.850222][ T3845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 106.856141][ T3845] RIP: 0033:0x7fc6cd2767a3 [ 106.860577][ T3845] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 106.880187][ T3845] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.888601][ T3845] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3845] close(3) = 0 [pid 3845] close(4) = 0 [pid 3845] close(5) = -1 EBADF (Bad file descriptor) [pid 3845] close(6) = -1 EBADF (Bad file descriptor) [pid 3845] close(7) = -1 EBADF (Bad file descriptor) [pid 3845] close(8) = -1 EBADF (Bad file descriptor) [pid 3845] close(9) = -1 EBADF (Bad file descriptor) [pid 3845] close(10) = -1 EBADF (Bad file descriptor) [pid 3845] close(11) = -1 EBADF (Bad file descriptor) [pid 3845] close(12) = -1 EBADF (Bad file descriptor) [pid 3845] close(13) = -1 EBADF (Bad file descriptor) [pid 3845] close(14) = -1 EBADF (Bad file descriptor) [pid 3845] close(15) = -1 EBADF (Bad file descriptor) [pid 3845] close(16) = -1 EBADF (Bad file descriptor) [pid 3845] close(17) = -1 EBADF (Bad file descriptor) [pid 3845] close(18) = -1 EBADF (Bad file descriptor) [pid 3845] close(19) = -1 EBADF (Bad file descriptor) [pid 3845] close(20) = -1 EBADF (Bad file descriptor) [pid 3845] close(21) = -1 EBADF (Bad file descriptor) [ 106.896585][ T3845] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 106.904558][ T3845] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 106.912531][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.920503][ T3845] R13: 00000000000f4240 R14: 0000000000019f82 R15: 00007ffdc49a5924 [ 106.928489][ T3845] [pid 3845] close(22) = -1 EBADF (Bad file descriptor) [pid 3845] close(23) = -1 EBADF (Bad file descriptor) [pid 3845] close(24) = -1 EBADF (Bad file descriptor) [pid 3845] close(25) = -1 EBADF (Bad file descriptor) [pid 3845] close(26) = -1 EBADF (Bad file descriptor) [pid 3845] close(27) = -1 EBADF (Bad file descriptor) [pid 3845] close(28) = -1 EBADF (Bad file descriptor) [pid 3845] close(29) = -1 EBADF (Bad file descriptor) [pid 3845] exit_group(0) = ? [pid 3845] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=211, si_uid=0, si_status=0, si_utime=1, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3846 attached , child_tidptr=0x5555570bd5d0) = 212 [pid 3846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3846] setpgid(0, 0) = 0 [pid 3846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3846] write(3, "1000", 4) = 4 [pid 3846] close(3) = 0 [pid 3846] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3846] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3846] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3846] write(4, "5", 1) = 1 [pid 3846] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 106.999382][ T3846] FAULT_INJECTION: forcing a failure. [ 106.999382][ T3846] name failslab, interval 1, probability 0, space 0, times 0 [ 107.012012][ T3846] CPU: 1 PID: 3846 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 107.022163][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.032223][ T3846] Call Trace: [ 107.035517][ T3846] [ 107.038445][ T3846] dump_stack_lvl+0xcd/0x134 [ 107.043048][ T3846] should_fail.cold+0x5/0xa [ 107.047581][ T3846] should_failslab+0x5/0x10 [ 107.052086][ T3846] kmem_cache_alloc_trace+0x60/0x3f0 [ 107.057383][ T3846] ? ref_tracker_alloc+0x14c/0x550 [ 107.062525][ T3846] ref_tracker_alloc+0x14c/0x550 [ 107.067469][ T3846] ? ref_tracker_free+0x6b0/0x6b0 [ 107.072502][ T3846] ? lock_release+0x720/0x720 [ 107.077204][ T3846] ? do_raw_spin_lock+0x120/0x2a0 [ 107.082231][ T3846] ? rwlock_bug.part.0+0x90/0x90 [ 107.087196][ T3846] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 107.092573][ T3846] linkwatch_fire_event+0x202/0x260 [ 107.097773][ T3846] netif_carrier_off+0x96/0xb0 [ 107.102541][ T3846] __tun_detach+0xfe7/0x13e0 [ 107.107144][ T3846] tun_chr_close+0xc4/0x180 [ 107.111656][ T3846] __fput+0x277/0x9d0 [ 107.115647][ T3846] ? __tun_detach+0x13e0/0x13e0 [ 107.120495][ T3846] task_work_run+0xdd/0x1a0 [ 107.125010][ T3846] ptrace_notify+0x114/0x140 [ 107.129593][ T3846] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 107.135835][ T3846] syscall_exit_to_user_mode+0x9/0x60 [ 107.141212][ T3846] do_syscall_64+0x42/0xb0 [ 107.145642][ T3846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 107.151557][ T3846] RIP: 0033:0x7fc6cd2767a3 [ 107.155980][ T3846] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 107.175606][ T3846] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.184048][ T3846] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 107.192018][ T3846] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3846] close(3) = 0 [pid 3846] close(4) = 0 [pid 3846] close(5) = -1 EBADF (Bad file descriptor) [pid 3846] close(6) = -1 EBADF (Bad file descriptor) [pid 3846] close(7) = -1 EBADF (Bad file descriptor) [pid 3846] close(8) = -1 EBADF (Bad file descriptor) [pid 3846] close(9) = -1 EBADF (Bad file descriptor) [pid 3846] close(10) = -1 EBADF (Bad file descriptor) [pid 3846] close(11) = -1 EBADF (Bad file descriptor) [pid 3846] close(12) = -1 EBADF (Bad file descriptor) [pid 3846] close(13) = -1 EBADF (Bad file descriptor) [pid 3846] close(14) = -1 EBADF (Bad file descriptor) [pid 3846] close(15) = -1 EBADF (Bad file descriptor) [pid 3846] close(16) = -1 EBADF (Bad file descriptor) [pid 3846] close(17) = -1 EBADF (Bad file descriptor) [pid 3846] close(18) = -1 EBADF (Bad file descriptor) [pid 3846] close(19) = -1 EBADF (Bad file descriptor) [pid 3846] close(20) = -1 EBADF (Bad file descriptor) [pid 3846] close(21) = -1 EBADF (Bad file descriptor) [pid 3846] close(22) = -1 EBADF (Bad file descriptor) [pid 3846] close(23) = -1 EBADF (Bad file descriptor) [pid 3846] close(24) = -1 EBADF (Bad file descriptor) [pid 3846] close(25) = -1 EBADF (Bad file descriptor) [pid 3846] close(26) = -1 EBADF (Bad file descriptor) [pid 3846] close(27) = -1 EBADF (Bad file descriptor) [pid 3846] close(28) = -1 EBADF (Bad file descriptor) [pid 3846] close(29) = -1 EBADF (Bad file descriptor) [pid 3846] exit_group(0) = ? [pid 3846] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 213 [ 107.199992][ T3846] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 107.207961][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 107.215936][ T3846] R13: 00000000000f4240 R14: 000000000001a0af R15: 00007ffdc49a5924 [ 107.223939][ T3846] ./strace-static-x86_64: Process 3847 attached [pid 3847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3847] setpgid(0, 0) = 0 [pid 3847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3847] write(3, "1000", 4) = 4 [pid 3847] close(3) = 0 [pid 3847] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3847] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3847] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3847] write(4, "5", 1) = 1 [pid 3847] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 107.298112][ T3847] FAULT_INJECTION: forcing a failure. [ 107.298112][ T3847] name failslab, interval 1, probability 0, space 0, times 0 [ 107.310769][ T3847] CPU: 1 PID: 3847 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 107.320938][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.330990][ T3847] Call Trace: [ 107.334453][ T3847] [ 107.337405][ T3847] dump_stack_lvl+0xcd/0x134 [ 107.342001][ T3847] should_fail.cold+0x5/0xa [ 107.346500][ T3847] should_failslab+0x5/0x10 [ 107.350994][ T3847] kmem_cache_alloc_trace+0x60/0x3f0 [ 107.356270][ T3847] ? ref_tracker_alloc+0x14c/0x550 [ 107.361380][ T3847] ref_tracker_alloc+0x14c/0x550 [ 107.366314][ T3847] ? ref_tracker_free+0x6b0/0x6b0 [ 107.371349][ T3847] ? lock_release+0x720/0x720 [ 107.376023][ T3847] ? do_raw_spin_lock+0x120/0x2a0 [ 107.381040][ T3847] ? rwlock_bug.part.0+0x90/0x90 [ 107.385968][ T3847] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 107.391340][ T3847] linkwatch_fire_event+0x202/0x260 [ 107.396537][ T3847] netif_carrier_off+0x96/0xb0 [ 107.401289][ T3847] __tun_detach+0xfe7/0x13e0 [ 107.405879][ T3847] tun_chr_close+0xc4/0x180 [ 107.410393][ T3847] __fput+0x277/0x9d0 [ 107.414378][ T3847] ? __tun_detach+0x13e0/0x13e0 [ 107.419226][ T3847] task_work_run+0xdd/0x1a0 [ 107.423729][ T3847] ptrace_notify+0x114/0x140 [ 107.428311][ T3847] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 107.434544][ T3847] syscall_exit_to_user_mode+0x9/0x60 [ 107.439906][ T3847] do_syscall_64+0x42/0xb0 [ 107.444318][ T3847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 107.450202][ T3847] RIP: 0033:0x7fc6cd2767a3 [ 107.454604][ T3847] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 107.474301][ T3847] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.482709][ T3847] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 107.490674][ T3847] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3847] close(3) = 0 [pid 3847] close(4) = 0 [pid 3847] close(5) = -1 EBADF (Bad file descriptor) [pid 3847] close(6) = -1 EBADF (Bad file descriptor) [pid 3847] close(7) = -1 EBADF (Bad file descriptor) [pid 3847] close(8) = -1 EBADF (Bad file descriptor) [ 107.498631][ T3847] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 107.506587][ T3847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 107.514538][ T3847] R13: 00000000000f4240 R14: 000000000001a1d9 R15: 00007ffdc49a5924 [ 107.522512][ T3847] [pid 3847] close(9) = -1 EBADF (Bad file descriptor) [pid 3847] close(10) = -1 EBADF (Bad file descriptor) [pid 3847] close(11) = -1 EBADF (Bad file descriptor) [pid 3847] close(12) = -1 EBADF (Bad file descriptor) [pid 3847] close(13) = -1 EBADF (Bad file descriptor) [pid 3847] close(14) = -1 EBADF (Bad file descriptor) [pid 3847] close(15) = -1 EBADF (Bad file descriptor) [pid 3847] close(16) = -1 EBADF (Bad file descriptor) [pid 3847] close(17) = -1 EBADF (Bad file descriptor) [pid 3847] close(18) = -1 EBADF (Bad file descriptor) [pid 3847] close(19) = -1 EBADF (Bad file descriptor) [pid 3847] close(20) = -1 EBADF (Bad file descriptor) [pid 3847] close(21) = -1 EBADF (Bad file descriptor) [pid 3847] close(22) = -1 EBADF (Bad file descriptor) [pid 3847] close(23) = -1 EBADF (Bad file descriptor) [pid 3847] close(24) = -1 EBADF (Bad file descriptor) [pid 3847] close(25) = -1 EBADF (Bad file descriptor) [pid 3847] close(26) = -1 EBADF (Bad file descriptor) [pid 3847] close(27) = -1 EBADF (Bad file descriptor) [pid 3847] close(28) = -1 EBADF (Bad file descriptor) [pid 3847] close(29) = -1 EBADF (Bad file descriptor) [pid 3847] exit_group(0) = ? [pid 3847] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=213, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 214 ./strace-static-x86_64: Process 3848 attached [pid 3848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3848] setpgid(0, 0) = 0 [pid 3848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3848] write(3, "1000", 4) = 4 [pid 3848] close(3) = 0 [pid 3848] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3848] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3848] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3848] write(4, "5", 1) = 1 [ 107.604885][ T3848] FAULT_INJECTION: forcing a failure. [ 107.604885][ T3848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.618269][ T3848] CPU: 1 PID: 3848 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 107.628416][ T3848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.638470][ T3848] Call Trace: [ 107.641756][ T3848] [ 107.644686][ T3848] dump_stack_lvl+0xcd/0x134 [ 107.649299][ T3848] should_fail.cold+0x5/0xa [ 107.653814][ T3848] prepare_alloc_pages+0x17b/0x570 [ 107.658961][ T3848] __alloc_pages+0x12f/0x500 [ 107.663575][ T3848] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 107.670364][ T3848] ? ___slab_alloc+0x47e/0xf20 [ 107.675125][ T3848] alloc_pages+0x1aa/0x310 [ 107.679537][ T3848] ? mark_held_locks+0x9f/0xe0 [ 107.684301][ T3848] allocate_slab+0x26c/0x3c0 [ 107.688895][ T3848] ___slab_alloc+0x8df/0xf20 [ 107.693597][ T3848] ? napi_skb_cache_get+0xeb/0x170 [ 107.698718][ T3848] ? mark_held_locks+0x9f/0xe0 [ 107.703492][ T3848] kmem_cache_alloc_bulk+0x21c/0x720 [ 107.708784][ T3848] napi_skb_cache_get+0xeb/0x170 [ 107.713723][ T3848] __alloc_skb+0x9b/0x340 [ 107.718077][ T3848] ? __lock_acquire+0xbca/0x56c0 [ 107.723028][ T3848] __napi_alloc_skb+0x70/0x310 [ 107.727816][ T3848] napi_get_frags+0x5e/0x140 [ 107.732413][ T3848] tun_get_user+0xa07/0x3b00 [ 107.737020][ T3848] ? tun_build_skb+0x1170/0x1170 [ 107.741967][ T3848] ? lock_downgrade+0x6e0/0x6e0 [ 107.746821][ T3848] ? find_held_lock+0x2d/0x110 [ 107.751602][ T3848] tun_chr_write_iter+0xdb/0x200 [ 107.756556][ T3848] do_iter_readv_writev+0x3d1/0x640 [ 107.761776][ T3848] ? new_sync_write+0x560/0x560 [ 107.766637][ T3848] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 107.772902][ T3848] ? security_file_permission+0xab/0xd0 [ 107.778458][ T3848] do_iter_write+0x182/0x700 [ 107.783065][ T3848] ? import_iovec+0x10c/0x150 [ 107.787755][ T3848] vfs_writev+0x1aa/0x630 [ 107.792091][ T3848] ? vfs_iter_write+0xa0/0xa0 [ 107.796782][ T3848] ? do_raw_spin_lock+0x120/0x2a0 [ 107.801810][ T3848] ? rwlock_bug.part.0+0x90/0x90 [ 107.806751][ T3848] ? _raw_spin_lock_irq+0x41/0x50 [ 107.811786][ T3848] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 107.818057][ T3848] ? find_held_lock+0x2d/0x110 [ 107.822831][ T3848] ? ptrace_notify+0xfa/0x140 [ 107.827517][ T3848] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 107.833759][ T3848] ? __fget_light+0x20f/0x270 [ 107.838441][ T3848] do_writev+0x133/0x2f0 [ 107.842695][ T3848] ? vfs_writev+0x630/0x630 [ 107.847218][ T3848] ? lockdep_hardirqs_on+0x79/0x100 [ 107.852425][ T3848] ? _raw_spin_unlock_irq+0x2a/0x40 [ 107.857628][ T3848] ? ptrace_notify+0xfa/0x140 [ 107.862575][ T3848] do_syscall_64+0x35/0xb0 [ 107.866999][ T3848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 107.872904][ T3848] RIP: 0033:0x7fc6cd2b4c39 [ 107.877332][ T3848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 107.896940][ T3848] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3848] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 107.905374][ T3848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 107.913357][ T3848] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 107.921347][ T3848] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 107.929327][ T3848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 107.937294][ T3848] R13: 00000000000f4240 R14: 000000000001a2fd R15: 00007ffdc49a5924 [ 107.945272][ T3848] [pid 3848] close(3) = 0 [pid 3848] close(4) = 0 [pid 3848] close(5) = -1 EBADF (Bad file descriptor) [pid 3848] close(6) = -1 EBADF (Bad file descriptor) [pid 3848] close(7) = -1 EBADF (Bad file descriptor) [pid 3848] close(8) = -1 EBADF (Bad file descriptor) [pid 3848] close(9) = -1 EBADF (Bad file descriptor) [pid 3848] close(10) = -1 EBADF (Bad file descriptor) [pid 3848] close(11) = -1 EBADF (Bad file descriptor) [pid 3848] close(12) = -1 EBADF (Bad file descriptor) [pid 3848] close(13) = -1 EBADF (Bad file descriptor) [pid 3848] close(14) = -1 EBADF (Bad file descriptor) [pid 3848] close(15) = -1 EBADF (Bad file descriptor) [pid 3848] close(16) = -1 EBADF (Bad file descriptor) [pid 3848] close(17) = -1 EBADF (Bad file descriptor) [pid 3848] close(18) = -1 EBADF (Bad file descriptor) [pid 3848] close(19) = -1 EBADF (Bad file descriptor) [pid 3848] close(20) = -1 EBADF (Bad file descriptor) [pid 3848] close(21) = -1 EBADF (Bad file descriptor) [pid 3848] close(22) = -1 EBADF (Bad file descriptor) [pid 3848] close(23) = -1 EBADF (Bad file descriptor) [pid 3848] close(24) = -1 EBADF (Bad file descriptor) [pid 3848] close(25) = -1 EBADF (Bad file descriptor) [pid 3848] close(26) = -1 EBADF (Bad file descriptor) [pid 3848] close(27) = -1 EBADF (Bad file descriptor) [pid 3848] close(28) = -1 EBADF (Bad file descriptor) [pid 3848] close(29) = -1 EBADF (Bad file descriptor) [pid 3848] exit_group(0) = ? [pid 3848] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=214, si_uid=0, si_status=0, si_utime=0, si_stime=34} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 215 ./strace-static-x86_64: Process 3849 attached [pid 3849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3849] setpgid(0, 0) = 0 [pid 3849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3849] write(3, "1000", 4) = 4 [pid 3849] close(3) = 0 [pid 3849] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3849] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3849] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3849] write(4, "5", 1) = 1 [pid 3849] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 108.024398][ T3849] FAULT_INJECTION: forcing a failure. [ 108.024398][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 108.037277][ T3849] CPU: 1 PID: 3849 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 108.047424][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.057480][ T3849] Call Trace: [ 108.060756][ T3849] [ 108.063692][ T3849] dump_stack_lvl+0xcd/0x134 [ 108.068545][ T3849] should_fail.cold+0x5/0xa [ 108.073042][ T3849] should_failslab+0x5/0x10 [ 108.077533][ T3849] kmem_cache_alloc_trace+0x60/0x3f0 [ 108.082805][ T3849] ? ref_tracker_alloc+0x14c/0x550 [ 108.087907][ T3849] ref_tracker_alloc+0x14c/0x550 [ 108.092841][ T3849] ? ref_tracker_free+0x6b0/0x6b0 [ 108.097857][ T3849] ? lock_release+0x720/0x720 [ 108.102526][ T3849] ? do_raw_spin_lock+0x120/0x2a0 [ 108.107543][ T3849] ? rwlock_bug.part.0+0x90/0x90 [ 108.112471][ T3849] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 108.117865][ T3849] linkwatch_fire_event+0x202/0x260 [ 108.123069][ T3849] netif_carrier_off+0x96/0xb0 [ 108.127831][ T3849] __tun_detach+0xfe7/0x13e0 [ 108.132507][ T3849] tun_chr_close+0xc4/0x180 [ 108.137007][ T3849] __fput+0x277/0x9d0 [ 108.140986][ T3849] ? __tun_detach+0x13e0/0x13e0 [ 108.145829][ T3849] task_work_run+0xdd/0x1a0 [ 108.150332][ T3849] ptrace_notify+0x114/0x140 [ 108.154920][ T3849] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 108.161169][ T3849] syscall_exit_to_user_mode+0x9/0x60 [ 108.166550][ T3849] do_syscall_64+0x42/0xb0 [ 108.170964][ T3849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 108.176944][ T3849] RIP: 0033:0x7fc6cd2767a3 [ 108.181350][ T3849] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 108.200952][ T3849] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 108.209370][ T3849] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 108.217332][ T3849] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 108.225293][ T3849] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 108.233255][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 108.241226][ T3849] R13: 00000000000f4240 R14: 000000000001a435 R15: 00007ffdc49a5924 [ 108.249215][ T3849] [pid 3849] close(3) = 0 [pid 3849] close(4) = 0 [pid 3849] close(5) = -1 EBADF (Bad file descriptor) [pid 3849] close(6) = -1 EBADF (Bad file descriptor) [pid 3849] close(7) = -1 EBADF (Bad file descriptor) [pid 3849] close(8) = -1 EBADF (Bad file descriptor) [pid 3849] close(9) = -1 EBADF (Bad file descriptor) [pid 3849] close(10) = -1 EBADF (Bad file descriptor) [pid 3849] close(11) = -1 EBADF (Bad file descriptor) [pid 3849] close(12) = -1 EBADF (Bad file descriptor) [pid 3849] close(13) = -1 EBADF (Bad file descriptor) [pid 3849] close(14) = -1 EBADF (Bad file descriptor) [pid 3849] close(15) = -1 EBADF (Bad file descriptor) [pid 3849] close(16) = -1 EBADF (Bad file descriptor) [pid 3849] close(17) = -1 EBADF (Bad file descriptor) [pid 3849] close(18) = -1 EBADF (Bad file descriptor) [pid 3849] close(19) = -1 EBADF (Bad file descriptor) [pid 3849] close(20) = -1 EBADF (Bad file descriptor) [pid 3849] close(21) = -1 EBADF (Bad file descriptor) [pid 3849] close(22) = -1 EBADF (Bad file descriptor) [pid 3849] close(23) = -1 EBADF (Bad file descriptor) [pid 3849] close(24) = -1 EBADF (Bad file descriptor) [pid 3849] close(25) = -1 EBADF (Bad file descriptor) [pid 3849] close(26) = -1 EBADF (Bad file descriptor) [pid 3849] close(27) = -1 EBADF (Bad file descriptor) [pid 3849] close(28) = -1 EBADF (Bad file descriptor) [pid 3849] close(29) = -1 EBADF (Bad file descriptor) [pid 3849] exit_group(0) = ? [pid 3849] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 216 ./strace-static-x86_64: Process 3850 attached [pid 3850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3850] setpgid(0, 0) = 0 [pid 3850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3850] write(3, "1000", 4) = 4 [pid 3850] close(3) = 0 [pid 3850] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3850] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3850] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3850] write(4, "5", 1) = 1 [pid 3850] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 108.321475][ T3850] FAULT_INJECTION: forcing a failure. [ 108.321475][ T3850] name failslab, interval 1, probability 0, space 0, times 0 [ 108.334485][ T3850] CPU: 0 PID: 3850 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 108.344654][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.354708][ T3850] Call Trace: [ 108.357989][ T3850] [ 108.360909][ T3850] dump_stack_lvl+0xcd/0x134 [ 108.365502][ T3850] should_fail.cold+0x5/0xa [ 108.370169][ T3850] should_failslab+0x5/0x10 [ 108.374671][ T3850] kmem_cache_alloc_trace+0x60/0x3f0 [ 108.379959][ T3850] ? ref_tracker_alloc+0x14c/0x550 [ 108.385082][ T3850] ref_tracker_alloc+0x14c/0x550 [ 108.390017][ T3850] ? ref_tracker_free+0x6b0/0x6b0 [ 108.395036][ T3850] ? lock_release+0x720/0x720 [ 108.399710][ T3850] ? do_raw_spin_lock+0x120/0x2a0 [ 108.404734][ T3850] ? rwlock_bug.part.0+0x90/0x90 [ 108.409666][ T3850] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 108.415040][ T3850] linkwatch_fire_event+0x202/0x260 [ 108.420238][ T3850] netif_carrier_off+0x96/0xb0 [ 108.425000][ T3850] __tun_detach+0xfe7/0x13e0 [ 108.429592][ T3850] tun_chr_close+0xc4/0x180 [ 108.434231][ T3850] __fput+0x277/0x9d0 [ 108.438226][ T3850] ? __tun_detach+0x13e0/0x13e0 [ 108.443079][ T3850] task_work_run+0xdd/0x1a0 [ 108.447577][ T3850] ptrace_notify+0x114/0x140 [ 108.452159][ T3850] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 108.458398][ T3850] syscall_exit_to_user_mode+0x9/0x60 [ 108.463762][ T3850] do_syscall_64+0x42/0xb0 [ 108.468177][ T3850] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 108.474064][ T3850] RIP: 0033:0x7fc6cd2767a3 [ 108.478476][ T3850] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 108.498116][ T3850] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 108.506531][ T3850] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 108.514498][ T3850] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3850] close(3) = 0 [pid 3850] close(4) = 0 [pid 3850] close(5) = -1 EBADF (Bad file descriptor) [pid 3850] close(6) = -1 EBADF (Bad file descriptor) [pid 3850] close(7) = -1 EBADF (Bad file descriptor) [pid 3850] close(8) = -1 EBADF (Bad file descriptor) [pid 3850] close(9) = -1 EBADF (Bad file descriptor) [pid 3850] close(10) = -1 EBADF (Bad file descriptor) [pid 3850] close(11) = -1 EBADF (Bad file descriptor) [pid 3850] close(12) = -1 EBADF (Bad file descriptor) [ 108.522464][ T3850] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 108.530440][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 108.538409][ T3850] R13: 00000000000f4240 R14: 000000000001a5d9 R15: 00007ffdc49a5924 [ 108.546387][ T3850] [pid 3850] close(13) = -1 EBADF (Bad file descriptor) [pid 3850] close(14) = -1 EBADF (Bad file descriptor) [pid 3850] close(15) = -1 EBADF (Bad file descriptor) [pid 3850] close(16) = -1 EBADF (Bad file descriptor) [pid 3850] close(17) = -1 EBADF (Bad file descriptor) [pid 3850] close(18) = -1 EBADF (Bad file descriptor) [pid 3850] close(19) = -1 EBADF (Bad file descriptor) [pid 3850] close(20) = -1 EBADF (Bad file descriptor) [pid 3850] close(21) = -1 EBADF (Bad file descriptor) [pid 3850] close(22) = -1 EBADF (Bad file descriptor) [pid 3850] close(23) = -1 EBADF (Bad file descriptor) [pid 3850] close(24) = -1 EBADF (Bad file descriptor) [pid 3850] close(25) = -1 EBADF (Bad file descriptor) [pid 3850] close(26) = -1 EBADF (Bad file descriptor) [pid 3850] close(27) = -1 EBADF (Bad file descriptor) [pid 3850] close(28) = -1 EBADF (Bad file descriptor) [pid 3850] close(29) = -1 EBADF (Bad file descriptor) [pid 3850] exit_group(0) = ? [pid 3850] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=216, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 217 ./strace-static-x86_64: Process 3851 attached [pid 3851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3851] setpgid(0, 0) = 0 [pid 3851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3851] write(3, "1000", 4) = 4 [pid 3851] close(3) = 0 [pid 3851] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3851] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3851] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3851] write(4, "5", 1) = 1 [pid 3851] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 108.623513][ T3851] FAULT_INJECTION: forcing a failure. [ 108.623513][ T3851] name failslab, interval 1, probability 0, space 0, times 0 [ 108.636133][ T3851] CPU: 0 PID: 3851 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 108.646283][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.656550][ T3851] Call Trace: [ 108.659829][ T3851] [ 108.662758][ T3851] dump_stack_lvl+0xcd/0x134 [ 108.667364][ T3851] should_fail.cold+0x5/0xa [ 108.671897][ T3851] should_failslab+0x5/0x10 [ 108.676405][ T3851] kmem_cache_alloc_trace+0x60/0x3f0 [ 108.681711][ T3851] ? ref_tracker_alloc+0x14c/0x550 [ 108.686827][ T3851] ref_tracker_alloc+0x14c/0x550 [ 108.691771][ T3851] ? ref_tracker_free+0x6b0/0x6b0 [ 108.696804][ T3851] ? lock_release+0x720/0x720 [ 108.701510][ T3851] ? do_raw_spin_lock+0x120/0x2a0 [ 108.706539][ T3851] ? rwlock_bug.part.0+0x90/0x90 [ 108.711501][ T3851] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 108.716915][ T3851] linkwatch_fire_event+0x202/0x260 [ 108.722146][ T3851] netif_carrier_off+0x96/0xb0 [ 108.726931][ T3851] __tun_detach+0xfe7/0x13e0 [ 108.731531][ T3851] tun_chr_close+0xc4/0x180 [ 108.736042][ T3851] __fput+0x277/0x9d0 [ 108.740032][ T3851] ? __tun_detach+0x13e0/0x13e0 [ 108.744890][ T3851] task_work_run+0xdd/0x1a0 [ 108.749402][ T3851] ptrace_notify+0x114/0x140 [ 108.753999][ T3851] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 108.760247][ T3851] syscall_exit_to_user_mode+0x9/0x60 [ 108.765627][ T3851] do_syscall_64+0x42/0xb0 [ 108.770051][ T3851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 108.775958][ T3851] RIP: 0033:0x7fc6cd2767a3 [ 108.780390][ T3851] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 108.800783][ T3851] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 108.809412][ T3851] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3851] close(3) = 0 [pid 3851] close(4) = 0 [pid 3851] close(5) = -1 EBADF (Bad file descriptor) [pid 3851] close(6) = -1 EBADF (Bad file descriptor) [pid 3851] close(7) = -1 EBADF (Bad file descriptor) [pid 3851] close(8) = -1 EBADF (Bad file descriptor) [pid 3851] close(9) = -1 EBADF (Bad file descriptor) [pid 3851] close(10) = -1 EBADF (Bad file descriptor) [pid 3851] close(11) = -1 EBADF (Bad file descriptor) [pid 3851] close(12) = -1 EBADF (Bad file descriptor) [pid 3851] close(13) = -1 EBADF (Bad file descriptor) [pid 3851] close(14) = -1 EBADF (Bad file descriptor) [pid 3851] close(15) = -1 EBADF (Bad file descriptor) [pid 3851] close(16) = -1 EBADF (Bad file descriptor) [pid 3851] close(17) = -1 EBADF (Bad file descriptor) [pid 3851] close(18) = -1 EBADF (Bad file descriptor) [pid 3851] close(19) = -1 EBADF (Bad file descriptor) [pid 3851] close(20) = -1 EBADF (Bad file descriptor) [pid 3851] close(21) = -1 EBADF (Bad file descriptor) [pid 3851] close(22) = -1 EBADF (Bad file descriptor) [pid 3851] close(23) = -1 EBADF (Bad file descriptor) [pid 3851] close(24) = -1 EBADF (Bad file descriptor) [pid 3851] close(25) = -1 EBADF (Bad file descriptor) [pid 3851] close(26) = -1 EBADF (Bad file descriptor) [pid 3851] close(27) = -1 EBADF (Bad file descriptor) [pid 3851] close(28) = -1 EBADF (Bad file descriptor) [pid 3851] close(29) = -1 EBADF (Bad file descriptor) [pid 3851] exit_group(0) = ? [pid 3851] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=217, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3852 attached , child_tidptr=0x5555570bd5d0) = 218 [ 108.817383][ T3851] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 108.825350][ T3851] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 108.833318][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 108.841287][ T3851] R13: 00000000000f4240 R14: 000000000001a706 R15: 00007ffdc49a5924 [ 108.849269][ T3851] [pid 3852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3852] setpgid(0, 0) = 0 [pid 3852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3852] write(3, "1000", 4) = 4 [pid 3852] close(3) = 0 [pid 3852] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3852] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3852] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3852] write(4, "5", 1) = 1 [pid 3852] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 108.912167][ T3852] FAULT_INJECTION: forcing a failure. [ 108.912167][ T3852] name failslab, interval 1, probability 0, space 0, times 0 [ 108.924801][ T3852] CPU: 0 PID: 3852 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 108.934969][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.945019][ T3852] Call Trace: [ 108.948298][ T3852] [ 108.951231][ T3852] dump_stack_lvl+0xcd/0x134 [ 108.955854][ T3852] should_fail.cold+0x5/0xa [ 108.960378][ T3852] should_failslab+0x5/0x10 [ 108.964908][ T3852] kmem_cache_alloc_trace+0x60/0x3f0 [ 108.970197][ T3852] ? ref_tracker_alloc+0x14c/0x550 [ 108.975319][ T3852] ref_tracker_alloc+0x14c/0x550 [ 108.980260][ T3852] ? ref_tracker_free+0x6b0/0x6b0 [ 108.985287][ T3852] ? lock_release+0x720/0x720 [ 108.990009][ T3852] ? do_raw_spin_lock+0x120/0x2a0 [ 108.995038][ T3852] ? rwlock_bug.part.0+0x90/0x90 [ 108.999981][ T3852] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 109.005355][ T3852] linkwatch_fire_event+0x202/0x260 [ 109.010793][ T3852] netif_carrier_off+0x96/0xb0 [ 109.015565][ T3852] __tun_detach+0xfe7/0x13e0 [ 109.020165][ T3852] tun_chr_close+0xc4/0x180 [ 109.024662][ T3852] __fput+0x277/0x9d0 [ 109.028634][ T3852] ? __tun_detach+0x13e0/0x13e0 [ 109.033482][ T3852] task_work_run+0xdd/0x1a0 [ 109.037977][ T3852] ptrace_notify+0x114/0x140 [ 109.042560][ T3852] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 109.048793][ T3852] syscall_exit_to_user_mode+0x9/0x60 [ 109.054152][ T3852] do_syscall_64+0x42/0xb0 [ 109.058558][ T3852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 109.064462][ T3852] RIP: 0033:0x7fc6cd2767a3 [ 109.068865][ T3852] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 109.088750][ T3852] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 109.097513][ T3852] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 109.105480][ T3852] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 109.113442][ T3852] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 109.121418][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 109.129416][ T3852] R13: 00000000000f4240 R14: 000000000001a834 R15: 00007ffdc49a5924 [ 109.137403][ T3852] [pid 3852] close(3) = 0 [pid 3852] close(4) = 0 [pid 3852] close(5) = -1 EBADF (Bad file descriptor) [pid 3852] close(6) = -1 EBADF (Bad file descriptor) [pid 3852] close(7) = -1 EBADF (Bad file descriptor) [pid 3852] close(8) = -1 EBADF (Bad file descriptor) [pid 3852] close(9) = -1 EBADF (Bad file descriptor) [pid 3852] close(10) = -1 EBADF (Bad file descriptor) [pid 3852] close(11) = -1 EBADF (Bad file descriptor) [pid 3852] close(12) = -1 EBADF (Bad file descriptor) [pid 3852] close(13) = -1 EBADF (Bad file descriptor) [pid 3852] close(14) = -1 EBADF (Bad file descriptor) [pid 3852] close(15) = -1 EBADF (Bad file descriptor) [pid 3852] close(16) = -1 EBADF (Bad file descriptor) [pid 3852] close(17) = -1 EBADF (Bad file descriptor) [pid 3852] close(18) = -1 EBADF (Bad file descriptor) [pid 3852] close(19) = -1 EBADF (Bad file descriptor) [pid 3852] close(20) = -1 EBADF (Bad file descriptor) [pid 3852] close(21) = -1 EBADF (Bad file descriptor) [pid 3852] close(22) = -1 EBADF (Bad file descriptor) [pid 3852] close(23) = -1 EBADF (Bad file descriptor) [pid 3852] close(24) = -1 EBADF (Bad file descriptor) [pid 3852] close(25) = -1 EBADF (Bad file descriptor) [pid 3852] close(26) = -1 EBADF (Bad file descriptor) [pid 3852] close(27) = -1 EBADF (Bad file descriptor) [pid 3852] close(28) = -1 EBADF (Bad file descriptor) [pid 3852] close(29) = -1 EBADF (Bad file descriptor) [pid 3852] exit_group(0) = ? [pid 3852] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 219 ./strace-static-x86_64: Process 3854 attached [pid 3854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3854] setpgid(0, 0) = 0 [pid 3854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3854] write(3, "1000", 4) = 4 [pid 3854] close(3) = 0 [pid 3854] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3854] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3854] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3854] write(4, "5", 1) = 1 [pid 3854] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 109.213805][ T3854] FAULT_INJECTION: forcing a failure. [ 109.213805][ T3854] name failslab, interval 1, probability 0, space 0, times 0 [ 109.226429][ T3854] CPU: 0 PID: 3854 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 109.236567][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.246620][ T3854] Call Trace: [ 109.249895][ T3854] [ 109.252827][ T3854] dump_stack_lvl+0xcd/0x134 [ 109.257412][ T3854] should_fail.cold+0x5/0xa [ 109.261913][ T3854] should_failslab+0x5/0x10 [ 109.266416][ T3854] kmem_cache_alloc_trace+0x60/0x3f0 [ 109.271686][ T3854] ? ref_tracker_alloc+0x14c/0x550 [ 109.276790][ T3854] ref_tracker_alloc+0x14c/0x550 [ 109.281748][ T3854] ? ref_tracker_free+0x6b0/0x6b0 [ 109.286757][ T3854] ? lock_release+0x720/0x720 [ 109.291429][ T3854] ? do_raw_spin_lock+0x120/0x2a0 [ 109.296467][ T3854] ? rwlock_bug.part.0+0x90/0x90 [ 109.301397][ T3854] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 109.306778][ T3854] linkwatch_fire_event+0x202/0x260 [ 109.311969][ T3854] netif_carrier_off+0x96/0xb0 [ 109.316720][ T3854] __tun_detach+0xfe7/0x13e0 [ 109.321302][ T3854] tun_chr_close+0xc4/0x180 [ 109.325799][ T3854] __fput+0x277/0x9d0 [ 109.329790][ T3854] ? __tun_detach+0x13e0/0x13e0 [ 109.334645][ T3854] task_work_run+0xdd/0x1a0 [ 109.339145][ T3854] ptrace_notify+0x114/0x140 [ 109.343756][ T3854] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 109.349988][ T3854] syscall_exit_to_user_mode+0x9/0x60 [ 109.355347][ T3854] do_syscall_64+0x42/0xb0 [ 109.359751][ T3854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 109.365634][ T3854] RIP: 0033:0x7fc6cd2767a3 [ 109.370040][ T3854] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 109.389650][ T3854] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 109.398171][ T3854] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 109.406157][ T3854] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 109.414229][ T3854] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 109.422216][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 109.430214][ T3854] R13: 00000000000f4240 R14: 000000000001a954 R15: 00007ffdc49a5924 [ 109.438199][ T3854] [pid 3854] close(3) = 0 [pid 3854] close(4) = 0 [pid 3854] close(5) = -1 EBADF (Bad file descriptor) [pid 3854] close(6) = -1 EBADF (Bad file descriptor) [pid 3854] close(7) = -1 EBADF (Bad file descriptor) [pid 3854] close(8) = -1 EBADF (Bad file descriptor) [pid 3854] close(9) = -1 EBADF (Bad file descriptor) [pid 3854] close(10) = -1 EBADF (Bad file descriptor) [pid 3854] close(11) = -1 EBADF (Bad file descriptor) [pid 3854] close(12) = -1 EBADF (Bad file descriptor) [pid 3854] close(13) = -1 EBADF (Bad file descriptor) [pid 3854] close(14) = -1 EBADF (Bad file descriptor) [pid 3854] close(15) = -1 EBADF (Bad file descriptor) [pid 3854] close(16) = -1 EBADF (Bad file descriptor) [pid 3854] close(17) = -1 EBADF (Bad file descriptor) [pid 3854] close(18) = -1 EBADF (Bad file descriptor) [pid 3854] close(19) = -1 EBADF (Bad file descriptor) [pid 3854] close(20) = -1 EBADF (Bad file descriptor) [pid 3854] close(21) = -1 EBADF (Bad file descriptor) [pid 3854] close(22) = -1 EBADF (Bad file descriptor) [pid 3854] close(23) = -1 EBADF (Bad file descriptor) [pid 3854] close(24) = -1 EBADF (Bad file descriptor) [pid 3854] close(25) = -1 EBADF (Bad file descriptor) [pid 3854] close(26) = -1 EBADF (Bad file descriptor) [pid 3854] close(27) = -1 EBADF (Bad file descriptor) [pid 3854] close(28) = -1 EBADF (Bad file descriptor) [pid 3854] close(29) = -1 EBADF (Bad file descriptor) [pid 3854] exit_group(0) = ? [pid 3854] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=219, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 220 ./strace-static-x86_64: Process 3855 attached [pid 3855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3855] setpgid(0, 0) = 0 [pid 3855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3855] write(3, "1000", 4) = 4 [pid 3855] close(3) = 0 [pid 3855] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3855] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3855] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3855] write(4, "5", 1) = 1 [pid 3855] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 109.518009][ T3855] FAULT_INJECTION: forcing a failure. [ 109.518009][ T3855] name failslab, interval 1, probability 0, space 0, times 0 [ 109.530624][ T3855] CPU: 0 PID: 3855 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 109.540772][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.550919][ T3855] Call Trace: [ 109.554294][ T3855] [ 109.557224][ T3855] dump_stack_lvl+0xcd/0x134 [ 109.561828][ T3855] should_fail.cold+0x5/0xa [ 109.566343][ T3855] should_failslab+0x5/0x10 [ 109.570853][ T3855] kmem_cache_alloc_trace+0x60/0x3f0 [ 109.576166][ T3855] ? ref_tracker_alloc+0x14c/0x550 [ 109.581300][ T3855] ref_tracker_alloc+0x14c/0x550 [ 109.586237][ T3855] ? ref_tracker_free+0x6b0/0x6b0 [ 109.591261][ T3855] ? lock_release+0x720/0x720 [ 109.595941][ T3855] ? do_raw_spin_lock+0x120/0x2a0 [ 109.600960][ T3855] ? rwlock_bug.part.0+0x90/0x90 [ 109.605889][ T3855] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 109.611258][ T3855] linkwatch_fire_event+0x202/0x260 [ 109.616456][ T3855] netif_carrier_off+0x96/0xb0 [ 109.621220][ T3855] __tun_detach+0xfe7/0x13e0 [ 109.625808][ T3855] tun_chr_close+0xc4/0x180 [ 109.630302][ T3855] __fput+0x277/0x9d0 [ 109.634274][ T3855] ? __tun_detach+0x13e0/0x13e0 [ 109.639125][ T3855] task_work_run+0xdd/0x1a0 [ 109.643628][ T3855] ptrace_notify+0x114/0x140 [ 109.648212][ T3855] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 109.654450][ T3855] syscall_exit_to_user_mode+0x9/0x60 [ 109.659821][ T3855] do_syscall_64+0x42/0xb0 [ 109.664236][ T3855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 109.670125][ T3855] RIP: 0033:0x7fc6cd2767a3 [ 109.674529][ T3855] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 109.694129][ T3855] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 109.702540][ T3855] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 109.710535][ T3855] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3855] close(3) = 0 [pid 3855] close(4) = 0 [pid 3855] close(5) = -1 EBADF (Bad file descriptor) [pid 3855] close(6) = -1 EBADF (Bad file descriptor) [pid 3855] close(7) = -1 EBADF (Bad file descriptor) [pid 3855] close(8) = -1 EBADF (Bad file descriptor) [pid 3855] close(9) = -1 EBADF (Bad file descriptor) [pid 3855] close(10) = -1 EBADF (Bad file descriptor) [pid 3855] close(11) = -1 EBADF (Bad file descriptor) [pid 3855] close(12) = -1 EBADF (Bad file descriptor) [pid 3855] close(13) = -1 EBADF (Bad file descriptor) [pid 3855] close(14) = -1 EBADF (Bad file descriptor) [pid 3855] close(15) = -1 EBADF (Bad file descriptor) [pid 3855] close(16) = -1 EBADF (Bad file descriptor) [ 109.718524][ T3855] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 109.726508][ T3855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 109.734489][ T3855] R13: 00000000000f4240 R14: 000000000001aa7f R15: 00007ffdc49a5924 [ 109.742476][ T3855] [pid 3855] close(17) = -1 EBADF (Bad file descriptor) [pid 3855] close(18) = -1 EBADF (Bad file descriptor) [pid 3855] close(19) = -1 EBADF (Bad file descriptor) [pid 3855] close(20) = -1 EBADF (Bad file descriptor) [pid 3855] close(21) = -1 EBADF (Bad file descriptor) [pid 3855] close(22) = -1 EBADF (Bad file descriptor) [pid 3855] close(23) = -1 EBADF (Bad file descriptor) [pid 3855] close(24) = -1 EBADF (Bad file descriptor) [pid 3855] close(25) = -1 EBADF (Bad file descriptor) [pid 3855] close(26) = -1 EBADF (Bad file descriptor) [pid 3855] close(27) = -1 EBADF (Bad file descriptor) [pid 3855] close(28) = -1 EBADF (Bad file descriptor) [pid 3855] close(29) = -1 EBADF (Bad file descriptor) [pid 3855] exit_group(0) = ? [pid 3855] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=220, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3856 attached , child_tidptr=0x5555570bd5d0) = 221 [pid 3856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3856] setpgid(0, 0) = 0 [pid 3856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3856] write(3, "1000", 4) = 4 [pid 3856] close(3) = 0 [pid 3856] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3856] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3856] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3856] write(4, "5", 1) = 1 [pid 3856] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 109.817243][ T3856] FAULT_INJECTION: forcing a failure. [ 109.817243][ T3856] name failslab, interval 1, probability 0, space 0, times 0 [ 109.830100][ T3856] CPU: 1 PID: 3856 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 109.840245][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.850298][ T3856] Call Trace: [ 109.853572][ T3856] [ 109.856506][ T3856] dump_stack_lvl+0xcd/0x134 [ 109.861152][ T3856] should_fail.cold+0x5/0xa [ 109.865669][ T3856] should_failslab+0x5/0x10 [ 109.870174][ T3856] kmem_cache_alloc_trace+0x60/0x3f0 [ 109.875459][ T3856] ? ref_tracker_alloc+0x14c/0x550 [ 109.880597][ T3856] ref_tracker_alloc+0x14c/0x550 [ 109.885559][ T3856] ? ref_tracker_free+0x6b0/0x6b0 [ 109.890583][ T3856] ? lock_release+0x720/0x720 [ 109.895269][ T3856] ? do_raw_spin_lock+0x120/0x2a0 [ 109.900346][ T3856] ? rwlock_bug.part.0+0x90/0x90 [ 109.905296][ T3856] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 109.910685][ T3856] linkwatch_fire_event+0x202/0x260 [ 109.915988][ T3856] netif_carrier_off+0x96/0xb0 [ 109.920779][ T3856] __tun_detach+0xfe7/0x13e0 [ 109.925491][ T3856] tun_chr_close+0xc4/0x180 [ 109.930023][ T3856] __fput+0x277/0x9d0 [ 109.934037][ T3856] ? __tun_detach+0x13e0/0x13e0 [ 109.938919][ T3856] task_work_run+0xdd/0x1a0 [ 109.943451][ T3856] ptrace_notify+0x114/0x140 [ 109.948054][ T3856] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 109.954305][ T3856] syscall_exit_to_user_mode+0x9/0x60 [ 109.959687][ T3856] do_syscall_64+0x42/0xb0 [ 109.964113][ T3856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 109.970009][ T3856] RIP: 0033:0x7fc6cd2767a3 [ 109.974425][ T3856] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 109.994025][ T3856] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.002436][ T3856] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3856] close(3) = 0 [pid 3856] close(4) = 0 [pid 3856] close(5) = -1 EBADF (Bad file descriptor) [pid 3856] close(6) = -1 EBADF (Bad file descriptor) [pid 3856] close(7) = -1 EBADF (Bad file descriptor) [pid 3856] close(8) = -1 EBADF (Bad file descriptor) [pid 3856] close(9) = -1 EBADF (Bad file descriptor) [pid 3856] close(10) = -1 EBADF (Bad file descriptor) [pid 3856] close(11) = -1 EBADF (Bad file descriptor) [pid 3856] close(12) = -1 EBADF (Bad file descriptor) [pid 3856] close(13) = -1 EBADF (Bad file descriptor) [pid 3856] close(14) = -1 EBADF (Bad file descriptor) [pid 3856] close(15) = -1 EBADF (Bad file descriptor) [pid 3856] close(16) = -1 EBADF (Bad file descriptor) [pid 3856] close(17) = -1 EBADF (Bad file descriptor) [pid 3856] close(18) = -1 EBADF (Bad file descriptor) [pid 3856] close(19) = -1 EBADF (Bad file descriptor) [pid 3856] close(20) = -1 EBADF (Bad file descriptor) [pid 3856] close(21) = -1 EBADF (Bad file descriptor) [pid 3856] close(22) = -1 EBADF (Bad file descriptor) [pid 3856] close(23) = -1 EBADF (Bad file descriptor) [pid 3856] close(24) = -1 EBADF (Bad file descriptor) [pid 3856] close(25) = -1 EBADF (Bad file descriptor) [pid 3856] close(26) = -1 EBADF (Bad file descriptor) [pid 3856] close(27) = -1 EBADF (Bad file descriptor) [pid 3856] close(28) = -1 EBADF (Bad file descriptor) [pid 3856] close(29) = -1 EBADF (Bad file descriptor) [pid 3856] exit_group(0) = ? [pid 3856] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3857 attached , child_tidptr=0x5555570bd5d0) = 222 [pid 3857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3857] setpgid(0, 0) = 0 [ 110.010404][ T3856] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 110.018375][ T3856] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 110.026344][ T3856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 110.034316][ T3856] R13: 00000000000f4240 R14: 000000000001abb4 R15: 00007ffdc49a5924 [ 110.042301][ T3856] [pid 3857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3857] write(3, "1000", 4) = 4 [pid 3857] close(3) = 0 [pid 3857] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3857] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3857] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3857] write(4, "5", 1) = 1 [pid 3857] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 110.107826][ T3857] FAULT_INJECTION: forcing a failure. [ 110.107826][ T3857] name failslab, interval 1, probability 0, space 0, times 0 [ 110.120553][ T3857] CPU: 1 PID: 3857 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 110.130702][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.140764][ T3857] Call Trace: [ 110.144038][ T3857] [ 110.146966][ T3857] dump_stack_lvl+0xcd/0x134 [ 110.151755][ T3857] should_fail.cold+0x5/0xa [ 110.156271][ T3857] should_failslab+0x5/0x10 [ 110.160794][ T3857] kmem_cache_alloc_trace+0x60/0x3f0 [ 110.166074][ T3857] ? ref_tracker_alloc+0x14c/0x550 [ 110.171179][ T3857] ref_tracker_alloc+0x14c/0x550 [ 110.176104][ T3857] ? ref_tracker_free+0x6b0/0x6b0 [ 110.181117][ T3857] ? lock_release+0x720/0x720 [ 110.185786][ T3857] ? do_raw_spin_lock+0x120/0x2a0 [ 110.190803][ T3857] ? rwlock_bug.part.0+0x90/0x90 [ 110.195731][ T3857] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 110.201102][ T3857] linkwatch_fire_event+0x202/0x260 [ 110.206303][ T3857] netif_carrier_off+0x96/0xb0 [ 110.211059][ T3857] __tun_detach+0xfe7/0x13e0 [ 110.215650][ T3857] tun_chr_close+0xc4/0x180 [ 110.220146][ T3857] __fput+0x277/0x9d0 [ 110.224118][ T3857] ? __tun_detach+0x13e0/0x13e0 [ 110.228966][ T3857] task_work_run+0xdd/0x1a0 [ 110.233470][ T3857] ptrace_notify+0x114/0x140 [ 110.238059][ T3857] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 110.244299][ T3857] syscall_exit_to_user_mode+0x9/0x60 [ 110.249675][ T3857] do_syscall_64+0x42/0xb0 [ 110.254097][ T3857] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 110.259988][ T3857] RIP: 0033:0x7fc6cd2767a3 [ 110.264401][ T3857] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 110.284003][ T3857] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.292423][ T3857] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 110.300394][ T3857] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3857] close(3) = 0 [pid 3857] close(4) = 0 [pid 3857] close(5) = -1 EBADF (Bad file descriptor) [pid 3857] close(6) = -1 EBADF (Bad file descriptor) [pid 3857] close(7) = -1 EBADF (Bad file descriptor) [pid 3857] close(8) = -1 EBADF (Bad file descriptor) [pid 3857] close(9) = -1 EBADF (Bad file descriptor) [pid 3857] close(10) = -1 EBADF (Bad file descriptor) [pid 3857] close(11) = -1 EBADF (Bad file descriptor) [pid 3857] close(12) = -1 EBADF (Bad file descriptor) [pid 3857] close(13) = -1 EBADF (Bad file descriptor) [pid 3857] close(14) = -1 EBADF (Bad file descriptor) [pid 3857] close(15) = -1 EBADF (Bad file descriptor) [pid 3857] close(16) = -1 EBADF (Bad file descriptor) [pid 3857] close(17) = -1 EBADF (Bad file descriptor) [pid 3857] close(18) = -1 EBADF (Bad file descriptor) [pid 3857] close(19) = -1 EBADF (Bad file descriptor) [pid 3857] close(20) = -1 EBADF (Bad file descriptor) [pid 3857] close(21) = -1 EBADF (Bad file descriptor) [pid 3857] close(22) = -1 EBADF (Bad file descriptor) [pid 3857] close(23) = -1 EBADF (Bad file descriptor) [pid 3857] close(24) = -1 EBADF (Bad file descriptor) [pid 3857] close(25) = -1 EBADF (Bad file descriptor) [pid 3857] close(26) = -1 EBADF (Bad file descriptor) [pid 3857] close(27) = -1 EBADF (Bad file descriptor) [pid 3857] close(28) = -1 EBADF (Bad file descriptor) [pid 3857] close(29) = -1 EBADF (Bad file descriptor) [pid 3857] exit_group(0) = ? [pid 3857] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=222, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 223 ./strace-static-x86_64: Process 3858 attached [pid 3858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3858] setpgid(0, 0) = 0 [ 110.308388][ T3857] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 110.316354][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 110.324340][ T3857] R13: 00000000000f4240 R14: 000000000001acda R15: 00007ffdc49a5924 [ 110.332318][ T3857] [pid 3858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3858] write(3, "1000", 4) = 4 [pid 3858] close(3) = 0 [pid 3858] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3858] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3858] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3858] write(4, "5", 1) = 1 [pid 3858] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 110.397438][ T3858] FAULT_INJECTION: forcing a failure. [ 110.397438][ T3858] name failslab, interval 1, probability 0, space 0, times 0 [ 110.410406][ T3858] CPU: 1 PID: 3858 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 110.420558][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.430610][ T3858] Call Trace: [ 110.433885][ T3858] [ 110.436804][ T3858] dump_stack_lvl+0xcd/0x134 [ 110.441391][ T3858] should_fail.cold+0x5/0xa [ 110.445910][ T3858] should_failslab+0x5/0x10 [ 110.450408][ T3858] kmem_cache_alloc_trace+0x60/0x3f0 [ 110.455692][ T3858] ? ref_tracker_alloc+0x14c/0x550 [ 110.460826][ T3858] ref_tracker_alloc+0x14c/0x550 [ 110.465772][ T3858] ? ref_tracker_free+0x6b0/0x6b0 [ 110.470793][ T3858] ? lock_release+0x720/0x720 [ 110.475497][ T3858] ? do_raw_spin_lock+0x120/0x2a0 [ 110.480562][ T3858] ? rwlock_bug.part.0+0x90/0x90 [ 110.485505][ T3858] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 110.490902][ T3858] linkwatch_fire_event+0x202/0x260 [ 110.496127][ T3858] netif_carrier_off+0x96/0xb0 [ 110.500907][ T3858] __tun_detach+0xfe7/0x13e0 [ 110.505517][ T3858] tun_chr_close+0xc4/0x180 [ 110.510040][ T3858] __fput+0x277/0x9d0 [ 110.514025][ T3858] ? __tun_detach+0x13e0/0x13e0 [ 110.518886][ T3858] task_work_run+0xdd/0x1a0 [ 110.523417][ T3858] ptrace_notify+0x114/0x140 [ 110.528018][ T3858] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 110.534299][ T3858] syscall_exit_to_user_mode+0x9/0x60 [ 110.539683][ T3858] do_syscall_64+0x42/0xb0 [ 110.544116][ T3858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 110.550037][ T3858] RIP: 0033:0x7fc6cd2767a3 [ 110.554454][ T3858] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 110.574065][ T3858] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.582480][ T3858] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3858] close(3) = 0 [pid 3858] close(4) = 0 [pid 3858] close(5) = -1 EBADF (Bad file descriptor) [ 110.590972][ T3858] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 110.598951][ T3858] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 110.606933][ T3858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 110.614915][ T3858] R13: 00000000000f4240 R14: 000000000001adfb R15: 00007ffdc49a5924 [ 110.622907][ T3858] [pid 3858] close(6) = -1 EBADF (Bad file descriptor) [pid 3858] close(7) = -1 EBADF (Bad file descriptor) [pid 3858] close(8) = -1 EBADF (Bad file descriptor) [pid 3858] close(9) = -1 EBADF (Bad file descriptor) [pid 3858] close(10) = -1 EBADF (Bad file descriptor) [pid 3858] close(11) = -1 EBADF (Bad file descriptor) [pid 3858] close(12) = -1 EBADF (Bad file descriptor) [pid 3858] close(13) = -1 EBADF (Bad file descriptor) [pid 3858] close(14) = -1 EBADF (Bad file descriptor) [pid 3858] close(15) = -1 EBADF (Bad file descriptor) [pid 3858] close(16) = -1 EBADF (Bad file descriptor) [pid 3858] close(17) = -1 EBADF (Bad file descriptor) [pid 3858] close(18) = -1 EBADF (Bad file descriptor) [pid 3858] close(19) = -1 EBADF (Bad file descriptor) [pid 3858] close(20) = -1 EBADF (Bad file descriptor) [pid 3858] close(21) = -1 EBADF (Bad file descriptor) [pid 3858] close(22) = -1 EBADF (Bad file descriptor) [pid 3858] close(23) = -1 EBADF (Bad file descriptor) [pid 3858] close(24) = -1 EBADF (Bad file descriptor) [pid 3858] close(25) = -1 EBADF (Bad file descriptor) [pid 3858] close(26) = -1 EBADF (Bad file descriptor) [pid 3858] close(27) = -1 EBADF (Bad file descriptor) [pid 3858] close(28) = -1 EBADF (Bad file descriptor) [pid 3858] close(29) = -1 EBADF (Bad file descriptor) [pid 3858] exit_group(0) = ? [pid 3858] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=223, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 224 ./strace-static-x86_64: Process 3859 attached [pid 3859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3859] setpgid(0, 0) = 0 [pid 3859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3859] write(3, "1000", 4) = 4 [pid 3859] close(3) = 0 [pid 3859] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3859] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3859] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3859] write(4, "5", 1) = 1 [pid 3859] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 110.701966][ T3859] FAULT_INJECTION: forcing a failure. [ 110.701966][ T3859] name failslab, interval 1, probability 0, space 0, times 0 [ 110.714588][ T3859] CPU: 1 PID: 3859 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 110.724753][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.734804][ T3859] Call Trace: [ 110.738077][ T3859] [ 110.740997][ T3859] dump_stack_lvl+0xcd/0x134 [ 110.745586][ T3859] should_fail.cold+0x5/0xa [ 110.750082][ T3859] should_failslab+0x5/0x10 [ 110.754569][ T3859] kmem_cache_alloc_trace+0x60/0x3f0 [ 110.759840][ T3859] ? ref_tracker_alloc+0x14c/0x550 [ 110.764943][ T3859] ref_tracker_alloc+0x14c/0x550 [ 110.769890][ T3859] ? ref_tracker_free+0x6b0/0x6b0 [ 110.774905][ T3859] ? lock_release+0x720/0x720 [ 110.779575][ T3859] ? do_raw_spin_lock+0x120/0x2a0 [ 110.784596][ T3859] ? rwlock_bug.part.0+0x90/0x90 [ 110.789529][ T3859] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 110.794900][ T3859] linkwatch_fire_event+0x202/0x260 [ 110.800104][ T3859] netif_carrier_off+0x96/0xb0 [ 110.804861][ T3859] __tun_detach+0xfe7/0x13e0 [ 110.809461][ T3859] tun_chr_close+0xc4/0x180 [ 110.813952][ T3859] __fput+0x277/0x9d0 [ 110.817923][ T3859] ? __tun_detach+0x13e0/0x13e0 [ 110.822763][ T3859] task_work_run+0xdd/0x1a0 [ 110.827263][ T3859] ptrace_notify+0x114/0x140 [ 110.831845][ T3859] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 110.838077][ T3859] syscall_exit_to_user_mode+0x9/0x60 [ 110.843441][ T3859] do_syscall_64+0x42/0xb0 [ 110.847848][ T3859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 110.853734][ T3859] RIP: 0033:0x7fc6cd2767a3 [ 110.858138][ T3859] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 110.877740][ T3859] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.886150][ T3859] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 110.894106][ T3859] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3859] close(3) = 0 [pid 3859] close(4) = 0 [pid 3859] close(5) = -1 EBADF (Bad file descriptor) [pid 3859] close(6) = -1 EBADF (Bad file descriptor) [pid 3859] close(7) = -1 EBADF (Bad file descriptor) [pid 3859] close(8) = -1 EBADF (Bad file descriptor) [pid 3859] close(9) = -1 EBADF (Bad file descriptor) [pid 3859] close(10) = -1 EBADF (Bad file descriptor) [pid 3859] close(11) = -1 EBADF (Bad file descriptor) [pid 3859] close(12) = -1 EBADF (Bad file descriptor) [pid 3859] close(13) = -1 EBADF (Bad file descriptor) [pid 3859] close(14) = -1 EBADF (Bad file descriptor) [pid 3859] close(15) = -1 EBADF (Bad file descriptor) [pid 3859] close(16) = -1 EBADF (Bad file descriptor) [pid 3859] close(17) = -1 EBADF (Bad file descriptor) [pid 3859] close(18) = -1 EBADF (Bad file descriptor) [pid 3859] close(19) = -1 EBADF (Bad file descriptor) [pid 3859] close(20) = -1 EBADF (Bad file descriptor) [pid 3859] close(21) = -1 EBADF (Bad file descriptor) [pid 3859] close(22) = -1 EBADF (Bad file descriptor) [pid 3859] close(23) = -1 EBADF (Bad file descriptor) [pid 3859] close(24) = -1 EBADF (Bad file descriptor) [pid 3859] close(25) = -1 EBADF (Bad file descriptor) [pid 3859] close(26) = -1 EBADF (Bad file descriptor) [pid 3859] close(27) = -1 EBADF (Bad file descriptor) [pid 3859] close(28) = -1 EBADF (Bad file descriptor) [pid 3859] close(29) = -1 EBADF (Bad file descriptor) [pid 3859] exit_group(0) = ? [pid 3859] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 225 ./strace-static-x86_64: Process 3860 attached [pid 3860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3860] setpgid(0, 0) = 0 [pid 3860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 110.902065][ T3859] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 110.910027][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 110.917986][ T3859] R13: 00000000000f4240 R14: 000000000001af1d R15: 00007ffdc49a5924 [ 110.925957][ T3859] [pid 3860] write(3, "1000", 4) = 4 [pid 3860] close(3) = 0 [pid 3860] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3860] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3860] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3860] write(4, "5", 1) = 1 [pid 3860] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 110.991342][ T3860] FAULT_INJECTION: forcing a failure. [ 110.991342][ T3860] name failslab, interval 1, probability 0, space 0, times 0 [ 111.004189][ T3860] CPU: 1 PID: 3860 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 111.014569][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.024635][ T3860] Call Trace: [ 111.027998][ T3860] [ 111.030914][ T3860] dump_stack_lvl+0xcd/0x134 [ 111.035519][ T3860] should_fail.cold+0x5/0xa [ 111.040035][ T3860] should_failslab+0x5/0x10 [ 111.044536][ T3860] kmem_cache_alloc_trace+0x60/0x3f0 [ 111.049808][ T3860] ? ref_tracker_alloc+0x14c/0x550 [ 111.054914][ T3860] ref_tracker_alloc+0x14c/0x550 [ 111.059844][ T3860] ? ref_tracker_free+0x6b0/0x6b0 [ 111.064861][ T3860] ? lock_release+0x720/0x720 [ 111.069534][ T3860] ? do_raw_spin_lock+0x120/0x2a0 [ 111.074557][ T3860] ? rwlock_bug.part.0+0x90/0x90 [ 111.079483][ T3860] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 111.084858][ T3860] linkwatch_fire_event+0x202/0x260 [ 111.090053][ T3860] netif_carrier_off+0x96/0xb0 [ 111.094805][ T3860] __tun_detach+0xfe7/0x13e0 [ 111.099393][ T3860] tun_chr_close+0xc4/0x180 [ 111.103888][ T3860] __fput+0x277/0x9d0 [ 111.107860][ T3860] ? __tun_detach+0x13e0/0x13e0 [ 111.112704][ T3860] task_work_run+0xdd/0x1a0 [ 111.117200][ T3860] ptrace_notify+0x114/0x140 [ 111.121782][ T3860] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 111.128015][ T3860] syscall_exit_to_user_mode+0x9/0x60 [ 111.133375][ T3860] do_syscall_64+0x42/0xb0 [ 111.137780][ T3860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.143659][ T3860] RIP: 0033:0x7fc6cd2767a3 [ 111.148065][ T3860] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 111.167664][ T3860] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 111.176066][ T3860] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 111.184108][ T3860] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3860] close(3) = 0 [pid 3860] close(4) = 0 [pid 3860] close(5) = -1 EBADF (Bad file descriptor) [pid 3860] close(6) = -1 EBADF (Bad file descriptor) [pid 3860] close(7) = -1 EBADF (Bad file descriptor) [pid 3860] close(8) = -1 EBADF (Bad file descriptor) [pid 3860] close(9) = -1 EBADF (Bad file descriptor) [pid 3860] close(10) = -1 EBADF (Bad file descriptor) [pid 3860] close(11) = -1 EBADF (Bad file descriptor) [ 111.192067][ T3860] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 111.200025][ T3860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 111.207978][ T3860] R13: 00000000000f4240 R14: 000000000001b04e R15: 00007ffdc49a5924 [ 111.215947][ T3860] [pid 3860] close(12) = -1 EBADF (Bad file descriptor) [pid 3860] close(13) = -1 EBADF (Bad file descriptor) [pid 3860] close(14) = -1 EBADF (Bad file descriptor) [pid 3860] close(15) = -1 EBADF (Bad file descriptor) [pid 3860] close(16) = -1 EBADF (Bad file descriptor) [pid 3860] close(17) = -1 EBADF (Bad file descriptor) [pid 3860] close(18) = -1 EBADF (Bad file descriptor) [pid 3860] close(19) = -1 EBADF (Bad file descriptor) [pid 3860] close(20) = -1 EBADF (Bad file descriptor) [pid 3860] close(21) = -1 EBADF (Bad file descriptor) [pid 3860] close(22) = -1 EBADF (Bad file descriptor) [pid 3860] close(23) = -1 EBADF (Bad file descriptor) [pid 3860] close(24) = -1 EBADF (Bad file descriptor) [pid 3860] close(25) = -1 EBADF (Bad file descriptor) [pid 3860] close(26) = -1 EBADF (Bad file descriptor) [pid 3860] close(27) = -1 EBADF (Bad file descriptor) [pid 3860] close(28) = -1 EBADF (Bad file descriptor) [pid 3860] close(29) = -1 EBADF (Bad file descriptor) [pid 3860] exit_group(0) = ? [pid 3860] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=225, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 226 ./strace-static-x86_64: Process 3861 attached [pid 3861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3861] setpgid(0, 0) = 0 [pid 3861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3861] write(3, "1000", 4) = 4 [pid 3861] close(3) = 0 [pid 3861] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3861] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3861] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3861] write(4, "5", 1) = 1 [pid 3861] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 111.296509][ T3861] FAULT_INJECTION: forcing a failure. [ 111.296509][ T3861] name failslab, interval 1, probability 0, space 0, times 0 [ 111.309133][ T3861] CPU: 0 PID: 3861 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 111.319274][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.329326][ T3861] Call Trace: [ 111.332605][ T3861] [ 111.335519][ T3861] dump_stack_lvl+0xcd/0x134 [ 111.340111][ T3861] should_fail.cold+0x5/0xa [ 111.344619][ T3861] should_failslab+0x5/0x10 [ 111.349113][ T3861] kmem_cache_alloc_trace+0x60/0x3f0 [ 111.354393][ T3861] ? ref_tracker_alloc+0x14c/0x550 [ 111.359516][ T3861] ref_tracker_alloc+0x14c/0x550 [ 111.364463][ T3861] ? ref_tracker_free+0x6b0/0x6b0 [ 111.369484][ T3861] ? lock_release+0x720/0x720 [ 111.374177][ T3861] ? do_raw_spin_lock+0x120/0x2a0 [ 111.379230][ T3861] ? rwlock_bug.part.0+0x90/0x90 [ 111.384168][ T3861] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 111.389541][ T3861] linkwatch_fire_event+0x202/0x260 [ 111.394888][ T3861] netif_carrier_off+0x96/0xb0 [ 111.399649][ T3861] __tun_detach+0xfe7/0x13e0 [ 111.404245][ T3861] tun_chr_close+0xc4/0x180 [ 111.408748][ T3861] __fput+0x277/0x9d0 [ 111.412737][ T3861] ? __tun_detach+0x13e0/0x13e0 [ 111.417598][ T3861] task_work_run+0xdd/0x1a0 [ 111.422113][ T3861] ptrace_notify+0x114/0x140 [ 111.426711][ T3861] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 111.432966][ T3861] syscall_exit_to_user_mode+0x9/0x60 [ 111.438377][ T3861] do_syscall_64+0x42/0xb0 [ 111.442917][ T3861] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.448821][ T3861] RIP: 0033:0x7fc6cd2767a3 [ 111.453255][ T3861] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 111.472861][ T3861] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 111.481267][ T3861] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 111.489233][ T3861] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3861] close(3) = 0 [pid 3861] close(4) = 0 [ 111.497204][ T3861] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 111.505173][ T3861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 111.513170][ T3861] R13: 00000000000f4240 R14: 000000000001b16f R15: 00007ffdc49a5924 [ 111.521174][ T3861] [pid 3861] close(5) = -1 EBADF (Bad file descriptor) [pid 3861] close(6) = -1 EBADF (Bad file descriptor) [pid 3861] close(7) = -1 EBADF (Bad file descriptor) [pid 3861] close(8) = -1 EBADF (Bad file descriptor) [pid 3861] close(9) = -1 EBADF (Bad file descriptor) [pid 3861] close(10) = -1 EBADF (Bad file descriptor) [pid 3861] close(11) = -1 EBADF (Bad file descriptor) [pid 3861] close(12) = -1 EBADF (Bad file descriptor) [pid 3861] close(13) = -1 EBADF (Bad file descriptor) [pid 3861] close(14) = -1 EBADF (Bad file descriptor) [pid 3861] close(15) = -1 EBADF (Bad file descriptor) [pid 3861] close(16) = -1 EBADF (Bad file descriptor) [pid 3861] close(17) = -1 EBADF (Bad file descriptor) [pid 3861] close(18) = -1 EBADF (Bad file descriptor) [pid 3861] close(19) = -1 EBADF (Bad file descriptor) [pid 3861] close(20) = -1 EBADF (Bad file descriptor) [pid 3861] close(21) = -1 EBADF (Bad file descriptor) [pid 3861] close(22) = -1 EBADF (Bad file descriptor) [pid 3861] close(23) = -1 EBADF (Bad file descriptor) [pid 3861] close(24) = -1 EBADF (Bad file descriptor) [pid 3861] close(25) = -1 EBADF (Bad file descriptor) [pid 3861] close(26) = -1 EBADF (Bad file descriptor) [pid 3861] close(27) = -1 EBADF (Bad file descriptor) [pid 3861] close(28) = -1 EBADF (Bad file descriptor) [pid 3861] close(29) = -1 EBADF (Bad file descriptor) [pid 3861] exit_group(0) = ? [pid 3861] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=226, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 227 ./strace-static-x86_64: Process 3862 attached [pid 3862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3862] setpgid(0, 0) = 0 [pid 3862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3862] write(3, "1000", 4) = 4 [pid 3862] close(3) = 0 [pid 3862] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3862] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3862] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3862] write(4, "5", 1) = 1 [pid 3862] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 111.605333][ T3862] FAULT_INJECTION: forcing a failure. [ 111.605333][ T3862] name failslab, interval 1, probability 0, space 0, times 0 [ 111.617965][ T3862] CPU: 1 PID: 3862 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 111.628112][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.638158][ T3862] Call Trace: [ 111.641423][ T3862] [ 111.644338][ T3862] dump_stack_lvl+0xcd/0x134 [ 111.648924][ T3862] should_fail.cold+0x5/0xa [ 111.653418][ T3862] should_failslab+0x5/0x10 [ 111.657907][ T3862] kmem_cache_alloc_trace+0x60/0x3f0 [ 111.663183][ T3862] ? ref_tracker_alloc+0x14c/0x550 [ 111.668284][ T3862] ref_tracker_alloc+0x14c/0x550 [ 111.673210][ T3862] ? ref_tracker_free+0x6b0/0x6b0 [ 111.678221][ T3862] ? lock_release+0x720/0x720 [ 111.682885][ T3862] ? do_raw_spin_lock+0x120/0x2a0 [ 111.687895][ T3862] ? rwlock_bug.part.0+0x90/0x90 [ 111.692817][ T3862] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 111.698179][ T3862] linkwatch_fire_event+0x202/0x260 [ 111.703389][ T3862] netif_carrier_off+0x96/0xb0 [ 111.708139][ T3862] __tun_detach+0xfe7/0x13e0 [ 111.712718][ T3862] tun_chr_close+0xc4/0x180 [ 111.717201][ T3862] __fput+0x277/0x9d0 [ 111.721167][ T3862] ? __tun_detach+0x13e0/0x13e0 [ 111.726002][ T3862] task_work_run+0xdd/0x1a0 [ 111.730489][ T3862] ptrace_notify+0x114/0x140 [ 111.735060][ T3862] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 111.741294][ T3862] syscall_exit_to_user_mode+0x9/0x60 [ 111.746765][ T3862] do_syscall_64+0x42/0xb0 [ 111.751166][ T3862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.757127][ T3862] RIP: 0033:0x7fc6cd2767a3 [ 111.761526][ T3862] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 111.781122][ T3862] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 111.789544][ T3862] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 111.797527][ T3862] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3862] close(3) = 0 [pid 3862] close(4) = 0 [pid 3862] close(5) = -1 EBADF (Bad file descriptor) [pid 3862] close(6) = -1 EBADF (Bad file descriptor) [pid 3862] close(7) = -1 EBADF (Bad file descriptor) [pid 3862] close(8) = -1 EBADF (Bad file descriptor) [pid 3862] close(9) = -1 EBADF (Bad file descriptor) [pid 3862] close(10) = -1 EBADF (Bad file descriptor) [pid 3862] close(11) = -1 EBADF (Bad file descriptor) [pid 3862] close(12) = -1 EBADF (Bad file descriptor) [pid 3862] close(13) = -1 EBADF (Bad file descriptor) [pid 3862] close(14) = -1 EBADF (Bad file descriptor) [pid 3862] close(15) = -1 EBADF (Bad file descriptor) [pid 3862] close(16) = -1 EBADF (Bad file descriptor) [pid 3862] close(17) = -1 EBADF (Bad file descriptor) [pid 3862] close(18) = -1 EBADF (Bad file descriptor) [ 111.805486][ T3862] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 111.813458][ T3862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 111.821429][ T3862] R13: 00000000000f4240 R14: 000000000001b2a2 R15: 00007ffdc49a5924 [ 111.829419][ T3862] [pid 3862] close(19) = -1 EBADF (Bad file descriptor) [pid 3862] close(20) = -1 EBADF (Bad file descriptor) [pid 3862] close(21) = -1 EBADF (Bad file descriptor) [pid 3862] close(22) = -1 EBADF (Bad file descriptor) [pid 3862] close(23) = -1 EBADF (Bad file descriptor) [pid 3862] close(24) = -1 EBADF (Bad file descriptor) [pid 3862] close(25) = -1 EBADF (Bad file descriptor) [pid 3862] close(26) = -1 EBADF (Bad file descriptor) [pid 3862] close(27) = -1 EBADF (Bad file descriptor) [pid 3862] close(28) = -1 EBADF (Bad file descriptor) [pid 3862] close(29) = -1 EBADF (Bad file descriptor) [pid 3862] exit_group(0) = ? [pid 3862] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3863 attached , child_tidptr=0x5555570bd5d0) = 228 [pid 3863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3863] setpgid(0, 0) = 0 [pid 3863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3863] write(3, "1000", 4) = 4 [pid 3863] close(3) = 0 [pid 3863] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3863] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3863] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3863] write(4, "5", 1) = 1 [ 111.908494][ T3863] FAULT_INJECTION: forcing a failure. [ 111.908494][ T3863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.921787][ T3863] CPU: 1 PID: 3863 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 111.932116][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.942181][ T3863] Call Trace: [ 111.945467][ T3863] [ 111.948416][ T3863] dump_stack_lvl+0xcd/0x134 [ 111.953026][ T3863] should_fail.cold+0x5/0xa [ 111.957531][ T3863] prepare_alloc_pages+0x17b/0x570 [ 111.962649][ T3863] __alloc_pages+0x12f/0x500 [ 111.967234][ T3863] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 111.973998][ T3863] ? asm_common_interrupt+0x1e/0x40 [ 111.979191][ T3863] ? lockdep_hardirqs_on+0x79/0x100 [ 111.984403][ T3863] alloc_pages+0x1aa/0x310 [ 111.988821][ T3863] allocate_slab+0x26c/0x3c0 [ 111.993424][ T3863] ___slab_alloc+0x8df/0xf20 [ 111.998005][ T3863] ? __napi_alloc_skb+0x70/0x310 [ 112.002948][ T3863] ? __napi_alloc_skb+0x70/0x310 [ 112.007875][ T3863] __slab_alloc.constprop.0+0x4d/0xa0 [ 112.013249][ T3863] __kmalloc_node_track_caller+0x2cb/0x360 [ 112.019321][ T3863] ? __napi_alloc_skb+0x70/0x310 [ 112.024273][ T3863] __alloc_skb+0xde/0x340 [ 112.028595][ T3863] ? __lock_acquire+0xbca/0x56c0 [ 112.033536][ T3863] __napi_alloc_skb+0x70/0x310 [ 112.038298][ T3863] napi_get_frags+0x5e/0x140 [ 112.042880][ T3863] tun_get_user+0xa07/0x3b00 [ 112.047483][ T3863] ? tun_build_skb+0x1170/0x1170 [ 112.052427][ T3863] ? lock_downgrade+0x6e0/0x6e0 [ 112.057276][ T3863] ? find_held_lock+0x2d/0x110 [ 112.062044][ T3863] tun_chr_write_iter+0xdb/0x200 [ 112.066981][ T3863] do_iter_readv_writev+0x3d1/0x640 [ 112.072181][ T3863] ? new_sync_write+0x560/0x560 [ 112.077118][ T3863] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 112.083354][ T3863] ? security_file_permission+0xab/0xd0 [ 112.088909][ T3863] do_iter_write+0x182/0x700 [ 112.093511][ T3863] ? import_iovec+0x10c/0x150 [ 112.098187][ T3863] vfs_writev+0x1aa/0x630 [ 112.102518][ T3863] ? vfs_iter_write+0xa0/0xa0 [ 112.107271][ T3863] ? do_raw_spin_lock+0x120/0x2a0 [ 112.112292][ T3863] ? rwlock_bug.part.0+0x90/0x90 [ 112.117219][ T3863] ? _raw_spin_lock_irq+0x41/0x50 [ 112.122240][ T3863] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 112.128473][ T3863] ? find_held_lock+0x2d/0x110 [ 112.133240][ T3863] ? ptrace_notify+0xfa/0x140 [ 112.137920][ T3863] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 112.144159][ T3863] ? __fget_light+0x20f/0x270 [ 112.148837][ T3863] do_writev+0x133/0x2f0 [ 112.153078][ T3863] ? vfs_writev+0x630/0x630 [ 112.157575][ T3863] ? lockdep_hardirqs_on+0x79/0x100 [ 112.162773][ T3863] ? _raw_spin_unlock_irq+0x2a/0x40 [ 112.167969][ T3863] ? ptrace_notify+0xfa/0x140 [ 112.172655][ T3863] do_syscall_64+0x35/0xb0 [ 112.177076][ T3863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.182966][ T3863] RIP: 0033:0x7fc6cd2b4c39 [ 112.187372][ T3863] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 3863] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 112.206978][ T3863] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.215389][ T3863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 112.223619][ T3863] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 112.231591][ T3863] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 112.239580][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 112.247545][ T3863] R13: 00000000000f4240 R14: 000000000001b3d8 R15: 00007ffdc49a5924 [ 112.255521][ T3863] [pid 3863] close(3) = 0 [pid 3863] close(4) = 0 [pid 3863] close(5) = -1 EBADF (Bad file descriptor) [pid 3863] close(6) = -1 EBADF (Bad file descriptor) [pid 3863] close(7) = -1 EBADF (Bad file descriptor) [pid 3863] close(8) = -1 EBADF (Bad file descriptor) [pid 3863] close(9) = -1 EBADF (Bad file descriptor) [pid 3863] close(10) = -1 EBADF (Bad file descriptor) [pid 3863] close(11) = -1 EBADF (Bad file descriptor) [pid 3863] close(12) = -1 EBADF (Bad file descriptor) [pid 3863] close(13) = -1 EBADF (Bad file descriptor) [pid 3863] close(14) = -1 EBADF (Bad file descriptor) [pid 3863] close(15) = -1 EBADF (Bad file descriptor) [pid 3863] close(16) = -1 EBADF (Bad file descriptor) [pid 3863] close(17) = -1 EBADF (Bad file descriptor) [pid 3863] close(18) = -1 EBADF (Bad file descriptor) [pid 3863] close(19) = -1 EBADF (Bad file descriptor) [pid 3863] close(20) = -1 EBADF (Bad file descriptor) [pid 3863] close(21) = -1 EBADF (Bad file descriptor) [pid 3863] close(22) = -1 EBADF (Bad file descriptor) [pid 3863] close(23) = -1 EBADF (Bad file descriptor) [pid 3863] close(24) = -1 EBADF (Bad file descriptor) [pid 3863] close(25) = -1 EBADF (Bad file descriptor) [pid 3863] close(26) = -1 EBADF (Bad file descriptor) [pid 3863] close(27) = -1 EBADF (Bad file descriptor) [pid 3863] close(28) = -1 EBADF (Bad file descriptor) [pid 3863] close(29) = -1 EBADF (Bad file descriptor) [pid 3863] exit_group(0) = ? [pid 3863] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=228, si_uid=0, si_status=0, si_utime=0, si_stime=36} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 229 ./strace-static-x86_64: Process 3864 attached [pid 3864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3864] setpgid(0, 0) = 0 [pid 3864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3864] write(3, "1000", 4) = 4 [pid 3864] close(3) = 0 [pid 3864] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3864] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3864] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3864] write(4, "5", 1) = 1 [pid 3864] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 112.341765][ T3864] FAULT_INJECTION: forcing a failure. [ 112.341765][ T3864] name failslab, interval 1, probability 0, space 0, times 0 [ 112.354370][ T3864] CPU: 1 PID: 3864 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 112.364498][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.374533][ T3864] Call Trace: [ 112.377795][ T3864] [ 112.380707][ T3864] dump_stack_lvl+0xcd/0x134 [ 112.385292][ T3864] should_fail.cold+0x5/0xa [ 112.389785][ T3864] should_failslab+0x5/0x10 [ 112.394273][ T3864] kmem_cache_alloc_trace+0x60/0x3f0 [ 112.399870][ T3864] ? ref_tracker_alloc+0x14c/0x550 [ 112.405018][ T3864] ref_tracker_alloc+0x14c/0x550 [ 112.409962][ T3864] ? ref_tracker_free+0x6b0/0x6b0 [ 112.414993][ T3864] ? lock_release+0x720/0x720 [ 112.419670][ T3864] ? do_raw_spin_lock+0x120/0x2a0 [ 112.424696][ T3864] ? rwlock_bug.part.0+0x90/0x90 [ 112.429631][ T3864] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 112.435009][ T3864] linkwatch_fire_event+0x202/0x260 [ 112.440211][ T3864] netif_carrier_off+0x96/0xb0 [ 112.444975][ T3864] __tun_detach+0xfe7/0x13e0 [ 112.450035][ T3864] tun_chr_close+0xc4/0x180 [ 112.454542][ T3864] __fput+0x277/0x9d0 [ 112.458525][ T3864] ? __tun_detach+0x13e0/0x13e0 [ 112.463382][ T3864] task_work_run+0xdd/0x1a0 [ 112.467887][ T3864] ptrace_notify+0x114/0x140 [ 112.472478][ T3864] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 112.478721][ T3864] syscall_exit_to_user_mode+0x9/0x60 [ 112.484086][ T3864] do_syscall_64+0x42/0xb0 [ 112.488501][ T3864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.494394][ T3864] RIP: 0033:0x7fc6cd2767a3 [ 112.498798][ T3864] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 112.518402][ T3864] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 112.526835][ T3864] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 112.534811][ T3864] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 112.542783][ T3864] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 112.550763][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 112.558739][ T3864] R13: 00000000000f4240 R14: 000000000001b505 R15: 00007ffdc49a5924 [ 112.566725][ T3864] [pid 3864] close(3) = 0 [pid 3864] close(4) = 0 [pid 3864] close(5) = -1 EBADF (Bad file descriptor) [pid 3864] close(6) = -1 EBADF (Bad file descriptor) [pid 3864] close(7) = -1 EBADF (Bad file descriptor) [pid 3864] close(8) = -1 EBADF (Bad file descriptor) [pid 3864] close(9) = -1 EBADF (Bad file descriptor) [pid 3864] close(10) = -1 EBADF (Bad file descriptor) [pid 3864] close(11) = -1 EBADF (Bad file descriptor) [pid 3864] close(12) = -1 EBADF (Bad file descriptor) [pid 3864] close(13) = -1 EBADF (Bad file descriptor) [pid 3864] close(14) = -1 EBADF (Bad file descriptor) [pid 3864] close(15) = -1 EBADF (Bad file descriptor) [pid 3864] close(16) = -1 EBADF (Bad file descriptor) [pid 3864] close(17) = -1 EBADF (Bad file descriptor) [pid 3864] close(18) = -1 EBADF (Bad file descriptor) [pid 3864] close(19) = -1 EBADF (Bad file descriptor) [pid 3864] close(20) = -1 EBADF (Bad file descriptor) [pid 3864] close(21) = -1 EBADF (Bad file descriptor) [pid 3864] close(22) = -1 EBADF (Bad file descriptor) [pid 3864] close(23) = -1 EBADF (Bad file descriptor) [pid 3864] close(24) = -1 EBADF (Bad file descriptor) [pid 3864] close(25) = -1 EBADF (Bad file descriptor) [pid 3864] close(26) = -1 EBADF (Bad file descriptor) [pid 3864] close(27) = -1 EBADF (Bad file descriptor) [pid 3864] close(28) = -1 EBADF (Bad file descriptor) [pid 3864] close(29) = -1 EBADF (Bad file descriptor) [pid 3864] exit_group(0) = ? [pid 3864] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=229, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 230 ./strace-static-x86_64: Process 3865 attached [pid 3865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3865] setpgid(0, 0) = 0 [pid 3865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3865] write(3, "1000", 4) = 4 [pid 3865] close(3) = 0 [pid 3865] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3865] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3865] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3865] write(4, "5", 1) = 1 [ 112.650227][ T3865] FAULT_INJECTION: forcing a failure. [ 112.650227][ T3865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.663514][ T3865] CPU: 0 PID: 3865 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 112.674154][ T3865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.684210][ T3865] Call Trace: [ 112.687497][ T3865] [ 112.690415][ T3865] dump_stack_lvl+0xcd/0x134 [ 112.694997][ T3865] should_fail.cold+0x5/0xa [ 112.699494][ T3865] prepare_alloc_pages+0x17b/0x570 [ 112.704599][ T3865] __alloc_pages+0x12f/0x500 [ 112.709184][ T3865] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 112.716062][ T3865] ? ___slab_alloc+0x47e/0xf20 [ 112.720860][ T3865] alloc_pages+0x1aa/0x310 [ 112.725306][ T3865] ? mark_held_locks+0x9f/0xe0 [ 112.730075][ T3865] allocate_slab+0x26c/0x3c0 [ 112.734674][ T3865] ___slab_alloc+0x8df/0xf20 [ 112.739262][ T3865] ? napi_skb_cache_get+0xeb/0x170 [ 112.744375][ T3865] ? mark_held_locks+0x9f/0xe0 [ 112.749147][ T3865] kmem_cache_alloc_bulk+0x21c/0x720 [ 112.754441][ T3865] napi_skb_cache_get+0xeb/0x170 [ 112.759393][ T3865] __alloc_skb+0x9b/0x340 [ 112.763735][ T3865] ? __lock_acquire+0xbca/0x56c0 [ 112.768667][ T3865] __napi_alloc_skb+0x70/0x310 [ 112.773431][ T3865] napi_get_frags+0x5e/0x140 [ 112.778009][ T3865] tun_get_user+0xa07/0x3b00 [ 112.782602][ T3865] ? tun_build_skb+0x1170/0x1170 [ 112.787543][ T3865] ? lock_downgrade+0x6e0/0x6e0 [ 112.792412][ T3865] ? find_held_lock+0x2d/0x110 [ 112.797179][ T3865] tun_chr_write_iter+0xdb/0x200 [ 112.802119][ T3865] do_iter_readv_writev+0x3d1/0x640 [ 112.807327][ T3865] ? new_sync_write+0x560/0x560 [ 112.812196][ T3865] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 112.818434][ T3865] ? security_file_permission+0xab/0xd0 [ 112.823993][ T3865] do_iter_write+0x182/0x700 [ 112.828589][ T3865] ? import_iovec+0x10c/0x150 [ 112.833267][ T3865] vfs_writev+0x1aa/0x630 [ 112.837606][ T3865] ? vfs_iter_write+0xa0/0xa0 [ 112.842301][ T3865] ? do_raw_spin_lock+0x120/0x2a0 [ 112.847334][ T3865] ? rwlock_bug.part.0+0x90/0x90 [ 112.852277][ T3865] ? _raw_spin_lock_irq+0x41/0x50 [ 112.857319][ T3865] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 112.863563][ T3865] ? find_held_lock+0x2d/0x110 [ 112.868336][ T3865] ? ptrace_notify+0xfa/0x140 [ 112.873012][ T3865] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 112.879237][ T3865] ? __fget_light+0x20f/0x270 [ 112.883909][ T3865] do_writev+0x133/0x2f0 [ 112.888166][ T3865] ? vfs_writev+0x630/0x630 [ 112.892682][ T3865] ? lockdep_hardirqs_on+0x79/0x100 [ 112.897873][ T3865] ? _raw_spin_unlock_irq+0x2a/0x40 [ 112.903066][ T3865] ? ptrace_notify+0xfa/0x140 [ 112.907743][ T3865] do_syscall_64+0x35/0xb0 [ 112.912174][ T3865] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.918071][ T3865] RIP: 0033:0x7fc6cd2b4c39 [ 112.922497][ T3865] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 112.942192][ T3865] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3865] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 112.950603][ T3865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 112.958589][ T3865] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 112.966560][ T3865] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 112.974541][ T3865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 112.982508][ T3865] R13: 00000000000f4240 R14: 000000000001b6b7 R15: 00007ffdc49a5924 [ 112.990484][ T3865] [pid 3865] close(3) = 0 [pid 3865] close(4) = 0 [pid 3865] close(5) = -1 EBADF (Bad file descriptor) [pid 3865] close(6) = -1 EBADF (Bad file descriptor) [pid 3865] close(7) = -1 EBADF (Bad file descriptor) [pid 3865] close(8) = -1 EBADF (Bad file descriptor) [pid 3865] close(9) = -1 EBADF (Bad file descriptor) [pid 3865] close(10) = -1 EBADF (Bad file descriptor) [pid 3865] close(11) = -1 EBADF (Bad file descriptor) [pid 3865] close(12) = -1 EBADF (Bad file descriptor) [pid 3865] close(13) = -1 EBADF (Bad file descriptor) [pid 3865] close(14) = -1 EBADF (Bad file descriptor) [pid 3865] close(15) = -1 EBADF (Bad file descriptor) [pid 3865] close(16) = -1 EBADF (Bad file descriptor) [pid 3865] close(17) = -1 EBADF (Bad file descriptor) [pid 3865] close(18) = -1 EBADF (Bad file descriptor) [pid 3865] close(19) = -1 EBADF (Bad file descriptor) [pid 3865] close(20) = -1 EBADF (Bad file descriptor) [pid 3865] close(21) = -1 EBADF (Bad file descriptor) [pid 3865] close(22) = -1 EBADF (Bad file descriptor) [pid 3865] close(23) = -1 EBADF (Bad file descriptor) [pid 3865] close(24) = -1 EBADF (Bad file descriptor) [pid 3865] close(25) = -1 EBADF (Bad file descriptor) [pid 3865] close(26) = -1 EBADF (Bad file descriptor) [pid 3865] close(27) = -1 EBADF (Bad file descriptor) [pid 3865] close(28) = -1 EBADF (Bad file descriptor) [pid 3865] close(29) = -1 EBADF (Bad file descriptor) [pid 3865] exit_group(0) = ? [pid 3865] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 231 ./strace-static-x86_64: Process 3866 attached [pid 3866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3866] setpgid(0, 0) = 0 [pid 3866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3866] write(3, "1000", 4) = 4 [pid 3866] close(3) = 0 [pid 3866] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3866] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3866] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3866] write(4, "5", 1) = 1 [pid 3866] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 113.053598][ T3866] FAULT_INJECTION: forcing a failure. [ 113.053598][ T3866] name failslab, interval 1, probability 0, space 0, times 0 [ 113.066209][ T3866] CPU: 1 PID: 3866 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 113.076353][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.086409][ T3866] Call Trace: [ 113.089681][ T3866] [ 113.092598][ T3866] dump_stack_lvl+0xcd/0x134 [ 113.097184][ T3866] should_fail.cold+0x5/0xa [ 113.101681][ T3866] should_failslab+0x5/0x10 [ 113.106175][ T3866] kmem_cache_alloc_trace+0x60/0x3f0 [ 113.111485][ T3866] ? ref_tracker_alloc+0x14c/0x550 [ 113.116620][ T3866] ref_tracker_alloc+0x14c/0x550 [ 113.121564][ T3866] ? ref_tracker_free+0x6b0/0x6b0 [ 113.126680][ T3866] ? lock_release+0x720/0x720 [ 113.131536][ T3866] ? do_raw_spin_lock+0x120/0x2a0 [ 113.136587][ T3866] ? rwlock_bug.part.0+0x90/0x90 [ 113.141534][ T3866] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 113.147003][ T3866] linkwatch_fire_event+0x202/0x260 [ 113.152214][ T3866] netif_carrier_off+0x96/0xb0 [ 113.156989][ T3866] __tun_detach+0xfe7/0x13e0 [ 113.161598][ T3866] tun_chr_close+0xc4/0x180 [ 113.166108][ T3866] __fput+0x277/0x9d0 [ 113.170109][ T3866] ? __tun_detach+0x13e0/0x13e0 [ 113.174982][ T3866] task_work_run+0xdd/0x1a0 [ 113.179505][ T3866] ptrace_notify+0x114/0x140 [ 113.184120][ T3866] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 113.190361][ T3866] syscall_exit_to_user_mode+0x9/0x60 [ 113.195727][ T3866] do_syscall_64+0x42/0xb0 [ 113.200139][ T3866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.206035][ T3866] RIP: 0033:0x7fc6cd2767a3 [ 113.210464][ T3866] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 113.230078][ T3866] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 113.238506][ T3866] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 113.246474][ T3866] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3866] close(3) = 0 [pid 3866] close(4) = 0 [pid 3866] close(5) = -1 EBADF (Bad file descriptor) [pid 3866] close(6) = -1 EBADF (Bad file descriptor) [pid 3866] close(7) = -1 EBADF (Bad file descriptor) [pid 3866] close(8) = -1 EBADF (Bad file descriptor) [pid 3866] close(9) = -1 EBADF (Bad file descriptor) [pid 3866] close(10) = -1 EBADF (Bad file descriptor) [pid 3866] close(11) = -1 EBADF (Bad file descriptor) [pid 3866] close(12) = -1 EBADF (Bad file descriptor) [pid 3866] close(13) = -1 EBADF (Bad file descriptor) [pid 3866] close(14) = -1 EBADF (Bad file descriptor) [pid 3866] close(15) = -1 EBADF (Bad file descriptor) [pid 3866] close(16) = -1 EBADF (Bad file descriptor) [pid 3866] close(17) = -1 EBADF (Bad file descriptor) [pid 3866] close(18) = -1 EBADF (Bad file descriptor) [pid 3866] close(19) = -1 EBADF (Bad file descriptor) [pid 3866] close(20) = -1 EBADF (Bad file descriptor) [pid 3866] close(21) = -1 EBADF (Bad file descriptor) [pid 3866] close(22) = -1 EBADF (Bad file descriptor) [pid 3866] close(23) = -1 EBADF (Bad file descriptor) [pid 3866] close(24) = -1 EBADF (Bad file descriptor) [pid 3866] close(25) = -1 EBADF (Bad file descriptor) [ 113.254448][ T3866] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 113.262424][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 113.270392][ T3866] R13: 00000000000f4240 R14: 000000000001b7e6 R15: 00007ffdc49a5924 [ 113.278367][ T3866] [pid 3866] close(26) = -1 EBADF (Bad file descriptor) [pid 3866] close(27) = -1 EBADF (Bad file descriptor) [pid 3866] close(28) = -1 EBADF (Bad file descriptor) [pid 3866] close(29) = -1 EBADF (Bad file descriptor) [pid 3866] exit_group(0) = ? [pid 3866] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=231, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 232 ./strace-static-x86_64: Process 3867 attached [pid 3867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3867] setpgid(0, 0) = 0 [pid 3867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3867] write(3, "1000", 4) = 4 [pid 3867] close(3) = 0 [pid 3867] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3867] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3867] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3867] write(4, "5", 1) = 1 [pid 3867] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 113.350227][ T3867] FAULT_INJECTION: forcing a failure. [ 113.350227][ T3867] name failslab, interval 1, probability 0, space 0, times 0 [ 113.362843][ T3867] CPU: 1 PID: 3867 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 113.372997][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.383057][ T3867] Call Trace: [ 113.386330][ T3867] [ 113.389254][ T3867] dump_stack_lvl+0xcd/0x134 [ 113.393841][ T3867] should_fail.cold+0x5/0xa [ 113.398335][ T3867] should_failslab+0x5/0x10 [ 113.402822][ T3867] kmem_cache_alloc_trace+0x60/0x3f0 [ 113.408097][ T3867] ? ref_tracker_alloc+0x14c/0x550 [ 113.413203][ T3867] ref_tracker_alloc+0x14c/0x550 [ 113.418131][ T3867] ? ref_tracker_free+0x6b0/0x6b0 [ 113.423389][ T3867] ? lock_release+0x720/0x720 [ 113.428071][ T3867] ? do_raw_spin_lock+0x120/0x2a0 [ 113.433097][ T3867] ? rwlock_bug.part.0+0x90/0x90 [ 113.438028][ T3867] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 113.443423][ T3867] linkwatch_fire_event+0x202/0x260 [ 113.448622][ T3867] netif_carrier_off+0x96/0xb0 [ 113.453381][ T3867] __tun_detach+0xfe7/0x13e0 [ 113.457970][ T3867] tun_chr_close+0xc4/0x180 [ 113.462464][ T3867] __fput+0x277/0x9d0 [ 113.466431][ T3867] ? __tun_detach+0x13e0/0x13e0 [ 113.471273][ T3867] task_work_run+0xdd/0x1a0 [ 113.475770][ T3867] ptrace_notify+0x114/0x140 [ 113.480348][ T3867] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 113.486581][ T3867] syscall_exit_to_user_mode+0x9/0x60 [ 113.492269][ T3867] do_syscall_64+0x42/0xb0 [ 113.496685][ T3867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.502570][ T3867] RIP: 0033:0x7fc6cd2767a3 [ 113.506974][ T3867] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 113.526670][ T3867] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 113.535169][ T3867] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 113.543137][ T3867] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3867] close(3) = 0 [pid 3867] close(4) = 0 [pid 3867] close(5) = -1 EBADF (Bad file descriptor) [pid 3867] close(6) = -1 EBADF (Bad file descriptor) [pid 3867] close(7) = -1 EBADF (Bad file descriptor) [pid 3867] close(8) = -1 EBADF (Bad file descriptor) [pid 3867] close(9) = -1 EBADF (Bad file descriptor) [pid 3867] close(10) = -1 EBADF (Bad file descriptor) [ 113.551107][ T3867] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 113.559075][ T3867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 113.567039][ T3867] R13: 00000000000f4240 R14: 000000000001b97e R15: 00007ffdc49a5924 [ 113.575015][ T3867] [pid 3867] close(11) = -1 EBADF (Bad file descriptor) [pid 3867] close(12) = -1 EBADF (Bad file descriptor) [pid 3867] close(13) = -1 EBADF (Bad file descriptor) [pid 3867] close(14) = -1 EBADF (Bad file descriptor) [pid 3867] close(15) = -1 EBADF (Bad file descriptor) [pid 3867] close(16) = -1 EBADF (Bad file descriptor) [pid 3867] close(17) = -1 EBADF (Bad file descriptor) [pid 3867] close(18) = -1 EBADF (Bad file descriptor) [pid 3867] close(19) = -1 EBADF (Bad file descriptor) [pid 3867] close(20) = -1 EBADF (Bad file descriptor) [pid 3867] close(21) = -1 EBADF (Bad file descriptor) [pid 3867] close(22) = -1 EBADF (Bad file descriptor) [pid 3867] close(23) = -1 EBADF (Bad file descriptor) [pid 3867] close(24) = -1 EBADF (Bad file descriptor) [pid 3867] close(25) = -1 EBADF (Bad file descriptor) [pid 3867] close(26) = -1 EBADF (Bad file descriptor) [pid 3867] close(27) = -1 EBADF (Bad file descriptor) [pid 3867] close(28) = -1 EBADF (Bad file descriptor) [pid 3867] close(29) = -1 EBADF (Bad file descriptor) [pid 3867] exit_group(0) = ? [pid 3867] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=232, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3868 attached , child_tidptr=0x5555570bd5d0) = 233 [pid 3868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3868] setpgid(0, 0) = 0 [pid 3868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3868] write(3, "1000", 4) = 4 [pid 3868] close(3) = 0 [pid 3868] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3868] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3868] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3868] write(4, "5", 1) = 1 [pid 3868] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 113.662572][ T3868] FAULT_INJECTION: forcing a failure. [ 113.662572][ T3868] name failslab, interval 1, probability 0, space 0, times 0 [ 113.675514][ T3868] CPU: 0 PID: 3868 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 113.685652][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.695683][ T3868] Call Trace: [ 113.698937][ T3868] [ 113.701842][ T3868] dump_stack_lvl+0xcd/0x134 [ 113.706417][ T3868] should_fail.cold+0x5/0xa [ 113.710902][ T3868] should_failslab+0x5/0x10 [ 113.715384][ T3868] kmem_cache_alloc_trace+0x60/0x3f0 [ 113.720689][ T3868] ? ref_tracker_alloc+0x14c/0x550 [ 113.725807][ T3868] ref_tracker_alloc+0x14c/0x550 [ 113.730762][ T3868] ? ref_tracker_free+0x6b0/0x6b0 [ 113.735775][ T3868] ? lock_release+0x720/0x720 [ 113.740437][ T3868] ? do_raw_spin_lock+0x120/0x2a0 [ 113.745446][ T3868] ? rwlock_bug.part.0+0x90/0x90 [ 113.750384][ T3868] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 113.755745][ T3868] linkwatch_fire_event+0x202/0x260 [ 113.760927][ T3868] netif_carrier_off+0x96/0xb0 [ 113.765678][ T3868] __tun_detach+0xfe7/0x13e0 [ 113.770279][ T3868] tun_chr_close+0xc4/0x180 [ 113.774765][ T3868] __fput+0x277/0x9d0 [ 113.778813][ T3868] ? __tun_detach+0x13e0/0x13e0 [ 113.783645][ T3868] task_work_run+0xdd/0x1a0 [ 113.788133][ T3868] ptrace_notify+0x114/0x140 [ 113.792712][ T3868] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 113.798932][ T3868] syscall_exit_to_user_mode+0x9/0x60 [ 113.804285][ T3868] do_syscall_64+0x42/0xb0 [ 113.808679][ T3868] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.814552][ T3868] RIP: 0033:0x7fc6cd2767a3 [ 113.818952][ T3868] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 113.838556][ T3868] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 113.846954][ T3868] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 113.854907][ T3868] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3868] close(3) = 0 [pid 3868] close(4) = 0 [pid 3868] close(5) = -1 EBADF (Bad file descriptor) [pid 3868] close(6) = -1 EBADF (Bad file descriptor) [pid 3868] close(7) = -1 EBADF (Bad file descriptor) [pid 3868] close(8) = -1 EBADF (Bad file descriptor) [pid 3868] close(9) = -1 EBADF (Bad file descriptor) [pid 3868] close(10) = -1 EBADF (Bad file descriptor) [pid 3868] close(11) = -1 EBADF (Bad file descriptor) [pid 3868] close(12) = -1 EBADF (Bad file descriptor) [pid 3868] close(13) = -1 EBADF (Bad file descriptor) [pid 3868] close(14) = -1 EBADF (Bad file descriptor) [pid 3868] close(15) = -1 EBADF (Bad file descriptor) [pid 3868] close(16) = -1 EBADF (Bad file descriptor) [pid 3868] close(17) = -1 EBADF (Bad file descriptor) [pid 3868] close(18) = -1 EBADF (Bad file descriptor) [pid 3868] close(19) = -1 EBADF (Bad file descriptor) [pid 3868] close(20) = -1 EBADF (Bad file descriptor) [pid 3868] close(21) = -1 EBADF (Bad file descriptor) [pid 3868] close(22) = -1 EBADF (Bad file descriptor) [pid 3868] close(23) = -1 EBADF (Bad file descriptor) [pid 3868] close(24) = -1 EBADF (Bad file descriptor) [pid 3868] close(25) = -1 EBADF (Bad file descriptor) [pid 3868] close(26) = -1 EBADF (Bad file descriptor) [pid 3868] close(27) = -1 EBADF (Bad file descriptor) [pid 3868] close(28) = -1 EBADF (Bad file descriptor) [pid 3868] close(29) = -1 EBADF (Bad file descriptor) [pid 3868] exit_group(0) = ? [pid 3868] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 234 ./strace-static-x86_64: Process 3869 attached [ 113.862859][ T3868] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 113.870819][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 113.878879][ T3868] R13: 00000000000f4240 R14: 000000000001baa7 R15: 00007ffdc49a5924 [ 113.887211][ T3868] [pid 3869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3869] setpgid(0, 0) = 0 [pid 3869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3869] write(3, "1000", 4) = 4 [pid 3869] close(3) = 0 [pid 3869] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3869] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3869] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3869] write(4, "5", 1) = 1 [pid 3869] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 113.953792][ T3869] FAULT_INJECTION: forcing a failure. [ 113.953792][ T3869] name failslab, interval 1, probability 0, space 0, times 0 [ 113.966421][ T3869] CPU: 1 PID: 3869 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 113.976573][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.986819][ T3869] Call Trace: [ 113.990087][ T3869] [ 113.993023][ T3869] dump_stack_lvl+0xcd/0x134 [ 113.997605][ T3869] should_fail.cold+0x5/0xa [ 114.002117][ T3869] should_failslab+0x5/0x10 [ 114.006623][ T3869] kmem_cache_alloc_trace+0x60/0x3f0 [ 114.011915][ T3869] ? ref_tracker_alloc+0x14c/0x550 [ 114.017033][ T3869] ref_tracker_alloc+0x14c/0x550 [ 114.021982][ T3869] ? ref_tracker_free+0x6b0/0x6b0 [ 114.027017][ T3869] ? lock_release+0x720/0x720 [ 114.031719][ T3869] ? do_raw_spin_lock+0x120/0x2a0 [ 114.036752][ T3869] ? rwlock_bug.part.0+0x90/0x90 [ 114.041702][ T3869] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 114.047116][ T3869] linkwatch_fire_event+0x202/0x260 [ 114.052351][ T3869] netif_carrier_off+0x96/0xb0 [ 114.057143][ T3869] __tun_detach+0xfe7/0x13e0 [ 114.061752][ T3869] tun_chr_close+0xc4/0x180 [ 114.066252][ T3869] __fput+0x277/0x9d0 [ 114.070242][ T3869] ? __tun_detach+0x13e0/0x13e0 [ 114.075105][ T3869] task_work_run+0xdd/0x1a0 [ 114.079617][ T3869] ptrace_notify+0x114/0x140 [ 114.084238][ T3869] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 114.090496][ T3869] syscall_exit_to_user_mode+0x9/0x60 [ 114.095898][ T3869] do_syscall_64+0x42/0xb0 [ 114.100336][ T3869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 114.106235][ T3869] RIP: 0033:0x7fc6cd2767a3 [ 114.110664][ T3869] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 114.130271][ T3869] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 114.138700][ T3869] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 114.146674][ T3869] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 114.154645][ T3869] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 114.162962][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 114.170930][ T3869] R13: 00000000000f4240 R14: 000000000001bbd9 R15: 00007ffdc49a5924 [ 114.178910][ T3869] [pid 3869] close(3) = 0 [pid 3869] close(4) = 0 [pid 3869] close(5) = -1 EBADF (Bad file descriptor) [pid 3869] close(6) = -1 EBADF (Bad file descriptor) [pid 3869] close(7) = -1 EBADF (Bad file descriptor) [pid 3869] close(8) = -1 EBADF (Bad file descriptor) [pid 3869] close(9) = -1 EBADF (Bad file descriptor) [pid 3869] close(10) = -1 EBADF (Bad file descriptor) [pid 3869] close(11) = -1 EBADF (Bad file descriptor) [pid 3869] close(12) = -1 EBADF (Bad file descriptor) [pid 3869] close(13) = -1 EBADF (Bad file descriptor) [pid 3869] close(14) = -1 EBADF (Bad file descriptor) [pid 3869] close(15) = -1 EBADF (Bad file descriptor) [pid 3869] close(16) = -1 EBADF (Bad file descriptor) [pid 3869] close(17) = -1 EBADF (Bad file descriptor) [pid 3869] close(18) = -1 EBADF (Bad file descriptor) [pid 3869] close(19) = -1 EBADF (Bad file descriptor) [pid 3869] close(20) = -1 EBADF (Bad file descriptor) [pid 3869] close(21) = -1 EBADF (Bad file descriptor) [pid 3869] close(22) = -1 EBADF (Bad file descriptor) [pid 3869] close(23) = -1 EBADF (Bad file descriptor) [pid 3869] close(24) = -1 EBADF (Bad file descriptor) [pid 3869] close(25) = -1 EBADF (Bad file descriptor) [pid 3869] close(26) = -1 EBADF (Bad file descriptor) [pid 3869] close(27) = -1 EBADF (Bad file descriptor) [pid 3869] close(28) = -1 EBADF (Bad file descriptor) [pid 3869] close(29) = -1 EBADF (Bad file descriptor) [pid 3869] exit_group(0) = ? [pid 3869] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=234, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3870 attached , child_tidptr=0x5555570bd5d0) = 235 [pid 3870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3870] setpgid(0, 0) = 0 [pid 3870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3870] write(3, "1000", 4) = 4 [pid 3870] close(3) = 0 [pid 3870] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3870] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3870] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3870] write(4, "5", 1) = 1 [pid 3870] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 114.261175][ T3870] FAULT_INJECTION: forcing a failure. [ 114.261175][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 114.273812][ T3870] CPU: 0 PID: 3870 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 114.284065][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.294132][ T3870] Call Trace: [ 114.297405][ T3870] [ 114.300324][ T3870] dump_stack_lvl+0xcd/0x134 [ 114.304913][ T3870] should_fail.cold+0x5/0xa [ 114.309427][ T3870] should_failslab+0x5/0x10 [ 114.313917][ T3870] kmem_cache_alloc_trace+0x60/0x3f0 [ 114.319224][ T3870] ? ref_tracker_alloc+0x14c/0x550 [ 114.324511][ T3870] ref_tracker_alloc+0x14c/0x550 [ 114.329447][ T3870] ? ref_tracker_free+0x6b0/0x6b0 [ 114.334484][ T3870] ? lock_release+0x720/0x720 [ 114.339163][ T3870] ? do_raw_spin_lock+0x120/0x2a0 [ 114.344182][ T3870] ? rwlock_bug.part.0+0x90/0x90 [ 114.349137][ T3870] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 114.354515][ T3870] linkwatch_fire_event+0x202/0x260 [ 114.359716][ T3870] netif_carrier_off+0x96/0xb0 [ 114.364485][ T3870] __tun_detach+0xfe7/0x13e0 [ 114.369085][ T3870] tun_chr_close+0xc4/0x180 [ 114.373587][ T3870] __fput+0x277/0x9d0 [ 114.377564][ T3870] ? __tun_detach+0x13e0/0x13e0 [ 114.382415][ T3870] task_work_run+0xdd/0x1a0 [ 114.386925][ T3870] ptrace_notify+0x114/0x140 [ 114.391520][ T3870] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 114.397761][ T3870] syscall_exit_to_user_mode+0x9/0x60 [ 114.403130][ T3870] do_syscall_64+0x42/0xb0 [ 114.407541][ T3870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 114.413434][ T3870] RIP: 0033:0x7fc6cd2767a3 [ 114.417847][ T3870] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 114.437454][ T3870] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 114.445860][ T3870] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 114.453907][ T3870] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3870] close(3) = 0 [pid 3870] close(4) = 0 [pid 3870] close(5) = -1 EBADF (Bad file descriptor) [pid 3870] close(6) = -1 EBADF (Bad file descriptor) [pid 3870] close(7) = -1 EBADF (Bad file descriptor) [pid 3870] close(8) = -1 EBADF (Bad file descriptor) [pid 3870] close(9) = -1 EBADF (Bad file descriptor) [pid 3870] close(10) = -1 EBADF (Bad file descriptor) [pid 3870] close(11) = -1 EBADF (Bad file descriptor) [pid 3870] close(12) = -1 EBADF (Bad file descriptor) [pid 3870] close(13) = -1 EBADF (Bad file descriptor) [pid 3870] close(14) = -1 EBADF (Bad file descriptor) [pid 3870] close(15) = -1 EBADF (Bad file descriptor) [pid 3870] close(16) = -1 EBADF (Bad file descriptor) [pid 3870] close(17) = -1 EBADF (Bad file descriptor) [pid 3870] close(18) = -1 EBADF (Bad file descriptor) [pid 3870] close(19) = -1 EBADF (Bad file descriptor) [pid 3870] close(20) = -1 EBADF (Bad file descriptor) [pid 3870] close(21) = -1 EBADF (Bad file descriptor) [pid 3870] close(22) = -1 EBADF (Bad file descriptor) [pid 3870] close(23) = -1 EBADF (Bad file descriptor) [pid 3870] close(24) = -1 EBADF (Bad file descriptor) [pid 3870] close(25) = -1 EBADF (Bad file descriptor) [pid 3870] close(26) = -1 EBADF (Bad file descriptor) [ 114.461871][ T3870] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 114.469841][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 114.477820][ T3870] R13: 00000000000f4240 R14: 000000000001bd03 R15: 00007ffdc49a5924 [ 114.485876][ T3870] [pid 3870] close(27) = -1 EBADF (Bad file descriptor) [pid 3870] close(28) = -1 EBADF (Bad file descriptor) [pid 3870] close(29) = -1 EBADF (Bad file descriptor) [pid 3870] exit_group(0) = ? [pid 3870] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=235, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3871 attached , child_tidptr=0x5555570bd5d0) = 236 [pid 3871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3871] setpgid(0, 0) = 0 [pid 3871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3871] write(3, "1000", 4) = 4 [pid 3871] close(3) = 0 [pid 3871] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3871] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3871] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3871] write(4, "5", 1) = 1 [pid 3871] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 114.560109][ T3871] FAULT_INJECTION: forcing a failure. [ 114.560109][ T3871] name failslab, interval 1, probability 0, space 0, times 0 [ 114.572708][ T3871] CPU: 1 PID: 3871 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 114.582834][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.592873][ T3871] Call Trace: [ 114.596172][ T3871] [ 114.599089][ T3871] dump_stack_lvl+0xcd/0x134 [ 114.603670][ T3871] should_fail.cold+0x5/0xa [ 114.608195][ T3871] should_failslab+0x5/0x10 [ 114.612969][ T3871] kmem_cache_alloc_trace+0x60/0x3f0 [ 114.618266][ T3871] ? ref_tracker_alloc+0x14c/0x550 [ 114.623384][ T3871] ref_tracker_alloc+0x14c/0x550 [ 114.628438][ T3871] ? ref_tracker_free+0x6b0/0x6b0 [ 114.633468][ T3871] ? lock_release+0x720/0x720 [ 114.638251][ T3871] ? do_raw_spin_lock+0x120/0x2a0 [ 114.643295][ T3871] ? rwlock_bug.part.0+0x90/0x90 [ 114.648238][ T3871] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 114.653624][ T3871] linkwatch_fire_event+0x202/0x260 [ 114.658825][ T3871] netif_carrier_off+0x96/0xb0 [ 114.663590][ T3871] __tun_detach+0xfe7/0x13e0 [ 114.668261][ T3871] tun_chr_close+0xc4/0x180 [ 114.672752][ T3871] __fput+0x277/0x9d0 [ 114.676727][ T3871] ? __tun_detach+0x13e0/0x13e0 [ 114.681666][ T3871] task_work_run+0xdd/0x1a0 [ 114.686162][ T3871] ptrace_notify+0x114/0x140 [ 114.690756][ T3871] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 114.697084][ T3871] syscall_exit_to_user_mode+0x9/0x60 [ 114.702468][ T3871] do_syscall_64+0x42/0xb0 [ 114.706878][ T3871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 114.712765][ T3871] RIP: 0033:0x7fc6cd2767a3 [ 114.717171][ T3871] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 114.736773][ T3871] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 114.745201][ T3871] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 114.753169][ T3871] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3871] close(3) = 0 [pid 3871] close(4) = 0 [pid 3871] close(5) = -1 EBADF (Bad file descriptor) [pid 3871] close(6) = -1 EBADF (Bad file descriptor) [pid 3871] close(7) = -1 EBADF (Bad file descriptor) [pid 3871] close(8) = -1 EBADF (Bad file descriptor) [pid 3871] close(9) = -1 EBADF (Bad file descriptor) [pid 3871] close(10) = -1 EBADF (Bad file descriptor) [pid 3871] close(11) = -1 EBADF (Bad file descriptor) [pid 3871] close(12) = -1 EBADF (Bad file descriptor) [pid 3871] close(13) = -1 EBADF (Bad file descriptor) [pid 3871] close(14) = -1 EBADF (Bad file descriptor) [pid 3871] close(15) = -1 EBADF (Bad file descriptor) [pid 3871] close(16) = -1 EBADF (Bad file descriptor) [pid 3871] close(17) = -1 EBADF (Bad file descriptor) [pid 3871] close(18) = -1 EBADF (Bad file descriptor) [pid 3871] close(19) = -1 EBADF (Bad file descriptor) [pid 3871] close(20) = -1 EBADF (Bad file descriptor) [pid 3871] close(21) = -1 EBADF (Bad file descriptor) [pid 3871] close(22) = -1 EBADF (Bad file descriptor) [pid 3871] close(23) = -1 EBADF (Bad file descriptor) [pid 3871] close(24) = -1 EBADF (Bad file descriptor) [pid 3871] close(25) = -1 EBADF (Bad file descriptor) [pid 3871] close(26) = -1 EBADF (Bad file descriptor) [pid 3871] close(27) = -1 EBADF (Bad file descriptor) [pid 3871] close(28) = -1 EBADF (Bad file descriptor) [pid 3871] close(29) = -1 EBADF (Bad file descriptor) [ 114.761135][ T3871] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 114.769104][ T3871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 114.777080][ T3871] R13: 00000000000f4240 R14: 000000000001be34 R15: 00007ffdc49a5924 [ 114.785049][ T3871] [pid 3871] exit_group(0) = ? [pid 3871] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 237 ./strace-static-x86_64: Process 3872 attached [pid 3872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3872] setpgid(0, 0) = 0 [pid 3872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3872] write(3, "1000", 4) = 4 [pid 3872] close(3) = 0 [pid 3872] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3872] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3872] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3872] write(4, "5", 1) = 1 [pid 3872] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 114.854636][ T3872] FAULT_INJECTION: forcing a failure. [ 114.854636][ T3872] name failslab, interval 1, probability 0, space 0, times 0 [ 114.867242][ T3872] CPU: 0 PID: 3872 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 114.877768][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.887799][ T3872] Call Trace: [ 114.891054][ T3872] [ 114.893961][ T3872] dump_stack_lvl+0xcd/0x134 [ 114.898540][ T3872] should_fail.cold+0x5/0xa [ 114.903027][ T3872] should_failslab+0x5/0x10 [ 114.907511][ T3872] kmem_cache_alloc_trace+0x60/0x3f0 [ 114.912777][ T3872] ? ref_tracker_alloc+0x14c/0x550 [ 114.917867][ T3872] ref_tracker_alloc+0x14c/0x550 [ 114.922779][ T3872] ? ref_tracker_free+0x6b0/0x6b0 [ 114.927792][ T3872] ? lock_release+0x720/0x720 [ 114.932451][ T3872] ? do_raw_spin_lock+0x120/0x2a0 [ 114.937455][ T3872] ? rwlock_bug.part.0+0x90/0x90 [ 114.942373][ T3872] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 114.947731][ T3872] linkwatch_fire_event+0x202/0x260 [ 114.952913][ T3872] netif_carrier_off+0x96/0xb0 [ 114.957660][ T3872] __tun_detach+0xfe7/0x13e0 [ 114.962237][ T3872] tun_chr_close+0xc4/0x180 [ 114.966733][ T3872] __fput+0x277/0x9d0 [ 114.970695][ T3872] ? __tun_detach+0x13e0/0x13e0 [ 114.975528][ T3872] task_work_run+0xdd/0x1a0 [ 114.980016][ T3872] ptrace_notify+0x114/0x140 [ 114.984589][ T3872] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 114.990812][ T3872] syscall_exit_to_user_mode+0x9/0x60 [ 114.996177][ T3872] do_syscall_64+0x42/0xb0 [ 115.000571][ T3872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.006530][ T3872] RIP: 0033:0x7fc6cd2767a3 [ 115.010928][ T3872] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 115.030606][ T3872] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.039092][ T3872] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 115.047063][ T3872] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 115.055019][ T3872] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 115.062979][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 115.070938][ T3872] R13: 00000000000f4240 R14: 000000000001bf60 R15: 00007ffdc49a5924 [ 115.078897][ T3872] [pid 3872] close(3) = 0 [pid 3872] close(4) = 0 [pid 3872] close(5) = -1 EBADF (Bad file descriptor) [pid 3872] close(6) = -1 EBADF (Bad file descriptor) [pid 3872] close(7) = -1 EBADF (Bad file descriptor) [pid 3872] close(8) = -1 EBADF (Bad file descriptor) [pid 3872] close(9) = -1 EBADF (Bad file descriptor) [pid 3872] close(10) = -1 EBADF (Bad file descriptor) [pid 3872] close(11) = -1 EBADF (Bad file descriptor) [pid 3872] close(12) = -1 EBADF (Bad file descriptor) [pid 3872] close(13) = -1 EBADF (Bad file descriptor) [pid 3872] close(14) = -1 EBADF (Bad file descriptor) [pid 3872] close(15) = -1 EBADF (Bad file descriptor) [pid 3872] close(16) = -1 EBADF (Bad file descriptor) [pid 3872] close(17) = -1 EBADF (Bad file descriptor) [pid 3872] close(18) = -1 EBADF (Bad file descriptor) [pid 3872] close(19) = -1 EBADF (Bad file descriptor) [pid 3872] close(20) = -1 EBADF (Bad file descriptor) [pid 3872] close(21) = -1 EBADF (Bad file descriptor) [pid 3872] close(22) = -1 EBADF (Bad file descriptor) [pid 3872] close(23) = -1 EBADF (Bad file descriptor) [pid 3872] close(24) = -1 EBADF (Bad file descriptor) [pid 3872] close(25) = -1 EBADF (Bad file descriptor) [pid 3872] close(26) = -1 EBADF (Bad file descriptor) [pid 3872] close(27) = -1 EBADF (Bad file descriptor) [pid 3872] close(28) = -1 EBADF (Bad file descriptor) [pid 3872] close(29) = -1 EBADF (Bad file descriptor) [pid 3872] exit_group(0) = ? [pid 3872] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=237, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 238 ./strace-static-x86_64: Process 3873 attached [pid 3873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3873] setpgid(0, 0) = 0 [pid 3873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3873] write(3, "1000", 4) = 4 [pid 3873] close(3) = 0 [pid 3873] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3873] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3873] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3873] write(4, "5", 1) = 1 [pid 3873] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 115.158354][ T3873] FAULT_INJECTION: forcing a failure. [ 115.158354][ T3873] name failslab, interval 1, probability 0, space 0, times 0 [ 115.170974][ T3873] CPU: 1 PID: 3873 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 115.181216][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.191255][ T3873] Call Trace: [ 115.194518][ T3873] [ 115.197436][ T3873] dump_stack_lvl+0xcd/0x134 [ 115.202020][ T3873] should_fail.cold+0x5/0xa [ 115.206524][ T3873] should_failslab+0x5/0x10 [ 115.211033][ T3873] kmem_cache_alloc_trace+0x60/0x3f0 [ 115.216313][ T3873] ? ref_tracker_alloc+0x14c/0x550 [ 115.221698][ T3873] ref_tracker_alloc+0x14c/0x550 [ 115.226652][ T3873] ? ref_tracker_free+0x6b0/0x6b0 [ 115.231669][ T3873] ? lock_release+0x720/0x720 [ 115.236418][ T3873] ? do_raw_spin_lock+0x120/0x2a0 [ 115.241433][ T3873] ? rwlock_bug.part.0+0x90/0x90 [ 115.246373][ T3873] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 115.251754][ T3873] linkwatch_fire_event+0x202/0x260 [ 115.256954][ T3873] netif_carrier_off+0x96/0xb0 [ 115.261720][ T3873] __tun_detach+0xfe7/0x13e0 [ 115.266317][ T3873] tun_chr_close+0xc4/0x180 [ 115.270805][ T3873] __fput+0x277/0x9d0 [ 115.274787][ T3873] ? __tun_detach+0x13e0/0x13e0 [ 115.279642][ T3873] task_work_run+0xdd/0x1a0 [ 115.284144][ T3873] ptrace_notify+0x114/0x140 [ 115.288739][ T3873] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 115.294973][ T3873] syscall_exit_to_user_mode+0x9/0x60 [ 115.300345][ T3873] do_syscall_64+0x42/0xb0 [ 115.304754][ T3873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.310766][ T3873] RIP: 0033:0x7fc6cd2767a3 [ 115.315206][ T3873] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 115.334917][ T3873] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.343329][ T3873] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 115.351299][ T3873] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3873] close(3) = 0 [pid 3873] close(4) = 0 [pid 3873] close(5) = -1 EBADF (Bad file descriptor) [pid 3873] close(6) = -1 EBADF (Bad file descriptor) [pid 3873] close(7) = -1 EBADF (Bad file descriptor) [pid 3873] close(8) = -1 EBADF (Bad file descriptor) [pid 3873] close(9) = -1 EBADF (Bad file descriptor) [pid 3873] close(10) = -1 EBADF (Bad file descriptor) [ 115.359263][ T3873] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 115.367233][ T3873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 115.375213][ T3873] R13: 00000000000f4240 R14: 000000000001c087 R15: 00007ffdc49a5924 [ 115.383184][ T3873] [pid 3873] close(11) = -1 EBADF (Bad file descriptor) [pid 3873] close(12) = -1 EBADF (Bad file descriptor) [pid 3873] close(13) = -1 EBADF (Bad file descriptor) [pid 3873] close(14) = -1 EBADF (Bad file descriptor) [pid 3873] close(15) = -1 EBADF (Bad file descriptor) [pid 3873] close(16) = -1 EBADF (Bad file descriptor) [pid 3873] close(17) = -1 EBADF (Bad file descriptor) [pid 3873] close(18) = -1 EBADF (Bad file descriptor) [pid 3873] close(19) = -1 EBADF (Bad file descriptor) [pid 3873] close(20) = -1 EBADF (Bad file descriptor) [pid 3873] close(21) = -1 EBADF (Bad file descriptor) [pid 3873] close(22) = -1 EBADF (Bad file descriptor) [pid 3873] close(23) = -1 EBADF (Bad file descriptor) [pid 3873] close(24) = -1 EBADF (Bad file descriptor) [pid 3873] close(25) = -1 EBADF (Bad file descriptor) [pid 3873] close(26) = -1 EBADF (Bad file descriptor) [pid 3873] close(27) = -1 EBADF (Bad file descriptor) [pid 3873] close(28) = -1 EBADF (Bad file descriptor) [pid 3873] close(29) = -1 EBADF (Bad file descriptor) [pid 3873] exit_group(0) = ? [pid 3873] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=238, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 239 ./strace-static-x86_64: Process 3874 attached [pid 3874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3874] setpgid(0, 0) = 0 [pid 3874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3874] write(3, "1000", 4) = 4 [pid 3874] close(3) = 0 [pid 3874] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3874] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3874] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3874] write(4, "5", 1) = 1 [pid 3874] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 115.460218][ T3874] FAULT_INJECTION: forcing a failure. [ 115.460218][ T3874] name failslab, interval 1, probability 0, space 0, times 0 [ 115.472853][ T3874] CPU: 1 PID: 3874 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 115.483009][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.493053][ T3874] Call Trace: [ 115.496357][ T3874] [ 115.499294][ T3874] dump_stack_lvl+0xcd/0x134 [ 115.503897][ T3874] should_fail.cold+0x5/0xa [ 115.508477][ T3874] should_failslab+0x5/0x10 [ 115.512970][ T3874] kmem_cache_alloc_trace+0x60/0x3f0 [ 115.518241][ T3874] ? ref_tracker_alloc+0x14c/0x550 [ 115.523343][ T3874] ref_tracker_alloc+0x14c/0x550 [ 115.528266][ T3874] ? ref_tracker_free+0x6b0/0x6b0 [ 115.533276][ T3874] ? lock_release+0x720/0x720 [ 115.537946][ T3874] ? do_raw_spin_lock+0x120/0x2a0 [ 115.542960][ T3874] ? rwlock_bug.part.0+0x90/0x90 [ 115.547887][ T3874] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 115.553254][ T3874] linkwatch_fire_event+0x202/0x260 [ 115.558448][ T3874] netif_carrier_off+0x96/0xb0 [ 115.563203][ T3874] __tun_detach+0xfe7/0x13e0 [ 115.567788][ T3874] tun_chr_close+0xc4/0x180 [ 115.572275][ T3874] __fput+0x277/0x9d0 [ 115.576243][ T3874] ? __tun_detach+0x13e0/0x13e0 [ 115.581084][ T3874] task_work_run+0xdd/0x1a0 [ 115.585575][ T3874] ptrace_notify+0x114/0x140 [ 115.590158][ T3874] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 115.596395][ T3874] syscall_exit_to_user_mode+0x9/0x60 [ 115.601755][ T3874] do_syscall_64+0x42/0xb0 [ 115.606163][ T3874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.612044][ T3874] RIP: 0033:0x7fc6cd2767a3 [ 115.616443][ T3874] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 115.636050][ T3874] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.644463][ T3874] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 115.652435][ T3874] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3874] close(3) = 0 [pid 3874] close(4) = 0 [pid 3874] close(5) = -1 EBADF (Bad file descriptor) [pid 3874] close(6) = -1 EBADF (Bad file descriptor) [pid 3874] close(7) = -1 EBADF (Bad file descriptor) [ 115.660399][ T3874] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 115.668361][ T3874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 115.676322][ T3874] R13: 00000000000f4240 R14: 000000000001c1b9 R15: 00007ffdc49a5924 [ 115.684300][ T3874] [pid 3874] close(8) = -1 EBADF (Bad file descriptor) [pid 3874] close(9) = -1 EBADF (Bad file descriptor) [pid 3874] close(10) = -1 EBADF (Bad file descriptor) [pid 3874] close(11) = -1 EBADF (Bad file descriptor) [pid 3874] close(12) = -1 EBADF (Bad file descriptor) [pid 3874] close(13) = -1 EBADF (Bad file descriptor) [pid 3874] close(14) = -1 EBADF (Bad file descriptor) [pid 3874] close(15) = -1 EBADF (Bad file descriptor) [pid 3874] close(16) = -1 EBADF (Bad file descriptor) [pid 3874] close(17) = -1 EBADF (Bad file descriptor) [pid 3874] close(18) = -1 EBADF (Bad file descriptor) [pid 3874] close(19) = -1 EBADF (Bad file descriptor) [pid 3874] close(20) = -1 EBADF (Bad file descriptor) [pid 3874] close(21) = -1 EBADF (Bad file descriptor) [pid 3874] close(22) = -1 EBADF (Bad file descriptor) [pid 3874] close(23) = -1 EBADF (Bad file descriptor) [pid 3874] close(24) = -1 EBADF (Bad file descriptor) [pid 3874] close(25) = -1 EBADF (Bad file descriptor) [pid 3874] close(26) = -1 EBADF (Bad file descriptor) [pid 3874] close(27) = -1 EBADF (Bad file descriptor) [pid 3874] close(28) = -1 EBADF (Bad file descriptor) [pid 3874] close(29) = -1 EBADF (Bad file descriptor) [pid 3874] exit_group(0) = ? [pid 3874] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 240 ./strace-static-x86_64: Process 3875 attached [pid 3875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3875] setpgid(0, 0) = 0 [pid 3875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3875] write(3, "1000", 4) = 4 [pid 3875] close(3) = 0 [pid 3875] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3875] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3875] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3875] write(4, "5", 1) = 1 [pid 3875] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 115.764662][ T3875] FAULT_INJECTION: forcing a failure. [ 115.764662][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 115.777364][ T3875] CPU: 1 PID: 3875 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 115.787588][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.797625][ T3875] Call Trace: [ 115.800883][ T3875] [ 115.803790][ T3875] dump_stack_lvl+0xcd/0x134 [ 115.808369][ T3875] should_fail.cold+0x5/0xa [ 115.812853][ T3875] should_failslab+0x5/0x10 [ 115.817337][ T3875] kmem_cache_alloc_trace+0x60/0x3f0 [ 115.822605][ T3875] ? ref_tracker_alloc+0x14c/0x550 [ 115.827699][ T3875] ref_tracker_alloc+0x14c/0x550 [ 115.832619][ T3875] ? ref_tracker_free+0x6b0/0x6b0 [ 115.837618][ T3875] ? lock_release+0x720/0x720 [ 115.842276][ T3875] ? do_raw_spin_lock+0x120/0x2a0 [ 115.847305][ T3875] ? rwlock_bug.part.0+0x90/0x90 [ 115.852224][ T3875] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 115.857580][ T3875] linkwatch_fire_event+0x202/0x260 [ 115.862764][ T3875] netif_carrier_off+0x96/0xb0 [ 115.867509][ T3875] __tun_detach+0xfe7/0x13e0 [ 115.872084][ T3875] tun_chr_close+0xc4/0x180 [ 115.876563][ T3875] __fput+0x277/0x9d0 [ 115.880522][ T3875] ? __tun_detach+0x13e0/0x13e0 [ 115.885347][ T3875] task_work_run+0xdd/0x1a0 [ 115.889835][ T3875] ptrace_notify+0x114/0x140 [ 115.894409][ T3875] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 115.900632][ T3875] syscall_exit_to_user_mode+0x9/0x60 [ 115.905990][ T3875] do_syscall_64+0x42/0xb0 [ 115.910387][ T3875] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.916262][ T3875] RIP: 0033:0x7fc6cd2767a3 [ 115.920653][ T3875] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 115.940248][ T3875] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.948653][ T3875] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 115.956611][ T3875] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3875] close(3) = 0 [pid 3875] close(4) = 0 [pid 3875] close(5) = -1 EBADF (Bad file descriptor) [pid 3875] close(6) = -1 EBADF (Bad file descriptor) [pid 3875] close(7) = -1 EBADF (Bad file descriptor) [pid 3875] close(8) = -1 EBADF (Bad file descriptor) [pid 3875] close(9) = -1 EBADF (Bad file descriptor) [pid 3875] close(10) = -1 EBADF (Bad file descriptor) [pid 3875] close(11) = -1 EBADF (Bad file descriptor) [pid 3875] close(12) = -1 EBADF (Bad file descriptor) [pid 3875] close(13) = -1 EBADF (Bad file descriptor) [pid 3875] close(14) = -1 EBADF (Bad file descriptor) [pid 3875] close(15) = -1 EBADF (Bad file descriptor) [ 115.964579][ T3875] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 115.972533][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 115.980487][ T3875] R13: 00000000000f4240 R14: 000000000001c2e5 R15: 00007ffdc49a5924 [ 115.988453][ T3875] [pid 3875] close(16) = -1 EBADF (Bad file descriptor) [pid 3875] close(17) = -1 EBADF (Bad file descriptor) [pid 3875] close(18) = -1 EBADF (Bad file descriptor) [pid 3875] close(19) = -1 EBADF (Bad file descriptor) [pid 3875] close(20) = -1 EBADF (Bad file descriptor) [pid 3875] close(21) = -1 EBADF (Bad file descriptor) [pid 3875] close(22) = -1 EBADF (Bad file descriptor) [pid 3875] close(23) = -1 EBADF (Bad file descriptor) [pid 3875] close(24) = -1 EBADF (Bad file descriptor) [pid 3875] close(25) = -1 EBADF (Bad file descriptor) [pid 3875] close(26) = -1 EBADF (Bad file descriptor) [pid 3875] close(27) = -1 EBADF (Bad file descriptor) [pid 3875] close(28) = -1 EBADF (Bad file descriptor) [pid 3875] close(29) = -1 EBADF (Bad file descriptor) [pid 3875] exit_group(0) = ? [pid 3875] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=240, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 241 ./strace-static-x86_64: Process 3876 attached [pid 3876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3876] setpgid(0, 0) = 0 [pid 3876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3876] write(3, "1000", 4) = 4 [pid 3876] close(3) = 0 [pid 3876] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3876] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3876] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3876] write(4, "5", 1) = 1 [pid 3876] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 116.068360][ T3876] FAULT_INJECTION: forcing a failure. [ 116.068360][ T3876] name failslab, interval 1, probability 0, space 0, times 0 [ 116.080974][ T3876] CPU: 1 PID: 3876 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 116.091117][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.101163][ T3876] Call Trace: [ 116.104434][ T3876] [ 116.107346][ T3876] dump_stack_lvl+0xcd/0x134 [ 116.111934][ T3876] should_fail.cold+0x5/0xa [ 116.116427][ T3876] should_failslab+0x5/0x10 [ 116.120936][ T3876] kmem_cache_alloc_trace+0x60/0x3f0 [ 116.126209][ T3876] ? ref_tracker_alloc+0x14c/0x550 [ 116.131336][ T3876] ref_tracker_alloc+0x14c/0x550 [ 116.136265][ T3876] ? ref_tracker_free+0x6b0/0x6b0 [ 116.141280][ T3876] ? lock_release+0x720/0x720 [ 116.145948][ T3876] ? do_raw_spin_lock+0x120/0x2a0 [ 116.150966][ T3876] ? rwlock_bug.part.0+0x90/0x90 [ 116.155902][ T3876] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 116.161278][ T3876] linkwatch_fire_event+0x202/0x260 [ 116.166476][ T3876] netif_carrier_off+0x96/0xb0 [ 116.171228][ T3876] __tun_detach+0xfe7/0x13e0 [ 116.175815][ T3876] tun_chr_close+0xc4/0x180 [ 116.180304][ T3876] __fput+0x277/0x9d0 [ 116.184273][ T3876] ? __tun_detach+0x13e0/0x13e0 [ 116.189110][ T3876] task_work_run+0xdd/0x1a0 [ 116.193609][ T3876] ptrace_notify+0x114/0x140 [ 116.198188][ T3876] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 116.204419][ T3876] syscall_exit_to_user_mode+0x9/0x60 [ 116.209782][ T3876] do_syscall_64+0x42/0xb0 [ 116.214191][ T3876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.220092][ T3876] RIP: 0033:0x7fc6cd2767a3 [ 116.224584][ T3876] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 116.244194][ T3876] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.252694][ T3876] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 116.260655][ T3876] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3876] close(3) = 0 [pid 3876] close(4) = 0 [pid 3876] close(5) = -1 EBADF (Bad file descriptor) [pid 3876] close(6) = -1 EBADF (Bad file descriptor) [pid 3876] close(7) = -1 EBADF (Bad file descriptor) [pid 3876] close(8) = -1 EBADF (Bad file descriptor) [pid 3876] close(9) = -1 EBADF (Bad file descriptor) [pid 3876] close(10) = -1 EBADF (Bad file descriptor) [pid 3876] close(11) = -1 EBADF (Bad file descriptor) [pid 3876] close(12) = -1 EBADF (Bad file descriptor) [pid 3876] close(13) = -1 EBADF (Bad file descriptor) [pid 3876] close(14) = -1 EBADF (Bad file descriptor) [pid 3876] close(15) = -1 EBADF (Bad file descriptor) [pid 3876] close(16) = -1 EBADF (Bad file descriptor) [pid 3876] close(17) = -1 EBADF (Bad file descriptor) [pid 3876] close(18) = -1 EBADF (Bad file descriptor) [pid 3876] close(19) = -1 EBADF (Bad file descriptor) [pid 3876] close(20) = -1 EBADF (Bad file descriptor) [pid 3876] close(21) = -1 EBADF (Bad file descriptor) [pid 3876] close(22) = -1 EBADF (Bad file descriptor) [pid 3876] close(23) = -1 EBADF (Bad file descriptor) [pid 3876] close(24) = -1 EBADF (Bad file descriptor) [pid 3876] close(25) = -1 EBADF (Bad file descriptor) [pid 3876] close(26) = -1 EBADF (Bad file descriptor) [pid 3876] close(27) = -1 EBADF (Bad file descriptor) [pid 3876] close(28) = -1 EBADF (Bad file descriptor) [pid 3876] close(29) = -1 EBADF (Bad file descriptor) [pid 3876] exit_group(0) = ? [pid 3876] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=241, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 242 ./strace-static-x86_64: Process 3877 attached [pid 3877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3877] setpgid(0, 0) = 0 [pid 3877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3877] write(3, "1000", 4) = 4 [pid 3877] close(3) = 0 [pid 3877] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3877] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3877] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3877] write(4, "5", 1) = 1 [pid 3877] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 116.268614][ T3876] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 116.276573][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 116.284531][ T3876] R13: 00000000000f4240 R14: 000000000001c414 R15: 00007ffdc49a5924 [ 116.292597][ T3876] [ 116.348688][ T3877] FAULT_INJECTION: forcing a failure. [ 116.348688][ T3877] name failslab, interval 1, probability 0, space 0, times 0 [ 116.361526][ T3877] CPU: 0 PID: 3877 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 116.371825][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.381877][ T3877] Call Trace: [ 116.385150][ T3877] [ 116.388072][ T3877] dump_stack_lvl+0xcd/0x134 [ 116.392676][ T3877] should_fail.cold+0x5/0xa [ 116.397314][ T3877] should_failslab+0x5/0x10 [ 116.401824][ T3877] kmem_cache_alloc_trace+0x60/0x3f0 [ 116.407135][ T3877] ? ref_tracker_alloc+0x14c/0x550 [ 116.412259][ T3877] ref_tracker_alloc+0x14c/0x550 [ 116.417197][ T3877] ? ref_tracker_free+0x6b0/0x6b0 [ 116.422216][ T3877] ? lock_release+0x720/0x720 [ 116.426887][ T3877] ? do_raw_spin_lock+0x120/0x2a0 [ 116.431903][ T3877] ? rwlock_bug.part.0+0x90/0x90 [ 116.436833][ T3877] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 116.442205][ T3877] linkwatch_fire_event+0x202/0x260 [ 116.447400][ T3877] netif_carrier_off+0x96/0xb0 [ 116.452155][ T3877] __tun_detach+0xfe7/0x13e0 [ 116.456743][ T3877] tun_chr_close+0xc4/0x180 [ 116.461236][ T3877] __fput+0x277/0x9d0 [ 116.465204][ T3877] ? __tun_detach+0x13e0/0x13e0 [ 116.470054][ T3877] task_work_run+0xdd/0x1a0 [ 116.474553][ T3877] ptrace_notify+0x114/0x140 [ 116.479139][ T3877] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 116.485375][ T3877] syscall_exit_to_user_mode+0x9/0x60 [ 116.490744][ T3877] do_syscall_64+0x42/0xb0 [ 116.495163][ T3877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.501050][ T3877] RIP: 0033:0x7fc6cd2767a3 [ 116.505453][ T3877] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 116.525060][ T3877] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.533474][ T3877] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 116.541455][ T3877] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3877] close(3) = 0 [pid 3877] close(4) = 0 [pid 3877] close(5) = -1 EBADF (Bad file descriptor) [pid 3877] close(6) = -1 EBADF (Bad file descriptor) [pid 3877] close(7) = -1 EBADF (Bad file descriptor) [pid 3877] close(8) = -1 EBADF (Bad file descriptor) [pid 3877] close(9) = -1 EBADF (Bad file descriptor) [pid 3877] close(10) = -1 EBADF (Bad file descriptor) [pid 3877] close(11) = -1 EBADF (Bad file descriptor) [pid 3877] close(12) = -1 EBADF (Bad file descriptor) [pid 3877] close(13) = -1 EBADF (Bad file descriptor) [pid 3877] close(14) = -1 EBADF (Bad file descriptor) [pid 3877] close(15) = -1 EBADF (Bad file descriptor) [pid 3877] close(16) = -1 EBADF (Bad file descriptor) [pid 3877] close(17) = -1 EBADF (Bad file descriptor) [pid 3877] close(18) = -1 EBADF (Bad file descriptor) [pid 3877] close(19) = -1 EBADF (Bad file descriptor) [pid 3877] close(20) = -1 EBADF (Bad file descriptor) [pid 3877] close(21) = -1 EBADF (Bad file descriptor) [pid 3877] close(22) = -1 EBADF (Bad file descriptor) [pid 3877] close(23) = -1 EBADF (Bad file descriptor) [pid 3877] close(24) = -1 EBADF (Bad file descriptor) [pid 3877] close(25) = -1 EBADF (Bad file descriptor) [pid 3877] close(26) = -1 EBADF (Bad file descriptor) [pid 3877] close(27) = -1 EBADF (Bad file descriptor) [pid 3877] close(28) = -1 EBADF (Bad file descriptor) [ 116.549427][ T3877] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 116.557390][ T3877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 116.565375][ T3877] R13: 00000000000f4240 R14: 000000000001c544 R15: 00007ffdc49a5924 [ 116.573353][ T3877] [pid 3877] close(29) = -1 EBADF (Bad file descriptor) [pid 3877] exit_group(0) = ? [pid 3877] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 243 ./strace-static-x86_64: Process 3878 attached [pid 3878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3878] setpgid(0, 0) = 0 [pid 3878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3878] write(3, "1000", 4) = 4 [pid 3878] close(3) = 0 [pid 3878] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3878] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3878] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3878] write(4, "5", 1) = 1 [pid 3878] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 116.643682][ T3878] FAULT_INJECTION: forcing a failure. [ 116.643682][ T3878] name failslab, interval 1, probability 0, space 0, times 0 [ 116.656297][ T3878] CPU: 0 PID: 3878 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 116.666522][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.676564][ T3878] Call Trace: [ 116.679830][ T3878] [ 116.682744][ T3878] dump_stack_lvl+0xcd/0x134 [ 116.687330][ T3878] should_fail.cold+0x5/0xa [ 116.691827][ T3878] should_failslab+0x5/0x10 [ 116.696319][ T3878] kmem_cache_alloc_trace+0x60/0x3f0 [ 116.701621][ T3878] ? ref_tracker_alloc+0x14c/0x550 [ 116.706765][ T3878] ref_tracker_alloc+0x14c/0x550 [ 116.711706][ T3878] ? ref_tracker_free+0x6b0/0x6b0 [ 116.716728][ T3878] ? lock_release+0x720/0x720 [ 116.721401][ T3878] ? do_raw_spin_lock+0x120/0x2a0 [ 116.726440][ T3878] ? rwlock_bug.part.0+0x90/0x90 [ 116.731388][ T3878] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 116.736761][ T3878] linkwatch_fire_event+0x202/0x260 [ 116.741960][ T3878] netif_carrier_off+0x96/0xb0 [ 116.746717][ T3878] __tun_detach+0xfe7/0x13e0 [ 116.751309][ T3878] tun_chr_close+0xc4/0x180 [ 116.755798][ T3878] __fput+0x277/0x9d0 [ 116.759769][ T3878] ? __tun_detach+0x13e0/0x13e0 [ 116.764612][ T3878] task_work_run+0xdd/0x1a0 [ 116.769114][ T3878] ptrace_notify+0x114/0x140 [ 116.773703][ T3878] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 116.779942][ T3878] syscall_exit_to_user_mode+0x9/0x60 [ 116.785310][ T3878] do_syscall_64+0x42/0xb0 [ 116.789725][ T3878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.795613][ T3878] RIP: 0033:0x7fc6cd2767a3 [ 116.800019][ T3878] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 116.819624][ T3878] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.828032][ T3878] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 116.835998][ T3878] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3878] close(3) = 0 [pid 3878] close(4) = 0 [pid 3878] close(5) = -1 EBADF (Bad file descriptor) [pid 3878] close(6) = -1 EBADF (Bad file descriptor) [pid 3878] close(7) = -1 EBADF (Bad file descriptor) [pid 3878] close(8) = -1 EBADF (Bad file descriptor) [pid 3878] close(9) = -1 EBADF (Bad file descriptor) [pid 3878] close(10) = -1 EBADF (Bad file descriptor) [pid 3878] close(11) = -1 EBADF (Bad file descriptor) [pid 3878] close(12) = -1 EBADF (Bad file descriptor) [pid 3878] close(13) = -1 EBADF (Bad file descriptor) [pid 3878] close(14) = -1 EBADF (Bad file descriptor) [pid 3878] close(15) = -1 EBADF (Bad file descriptor) [pid 3878] close(16) = -1 EBADF (Bad file descriptor) [pid 3878] close(17) = -1 EBADF (Bad file descriptor) [pid 3878] close(18) = -1 EBADF (Bad file descriptor) [pid 3878] close(19) = -1 EBADF (Bad file descriptor) [pid 3878] close(20) = -1 EBADF (Bad file descriptor) [pid 3878] close(21) = -1 EBADF (Bad file descriptor) [pid 3878] close(22) = -1 EBADF (Bad file descriptor) [pid 3878] close(23) = -1 EBADF (Bad file descriptor) [pid 3878] close(24) = -1 EBADF (Bad file descriptor) [pid 3878] close(25) = -1 EBADF (Bad file descriptor) [pid 3878] close(26) = -1 EBADF (Bad file descriptor) [pid 3878] close(27) = -1 EBADF (Bad file descriptor) [pid 3878] close(28) = -1 EBADF (Bad file descriptor) [pid 3878] close(29) = -1 EBADF (Bad file descriptor) [pid 3878] exit_group(0) = ? [pid 3878] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=243, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 244 ./strace-static-x86_64: Process 3879 attached [ 116.843956][ T3878] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 116.851921][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 116.859881][ T3878] R13: 00000000000f4240 R14: 000000000001c65d R15: 00007ffdc49a5924 [ 116.867858][ T3878] [pid 3879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3879] setpgid(0, 0) = 0 [pid 3879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3879] write(3, "1000", 4) = 4 [pid 3879] close(3) = 0 [pid 3879] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3879] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3879] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3879] write(4, "5", 1) = 1 [pid 3879] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 116.936630][ T3879] FAULT_INJECTION: forcing a failure. [ 116.936630][ T3879] name failslab, interval 1, probability 0, space 0, times 0 [ 116.950196][ T3879] CPU: 0 PID: 3879 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 116.960562][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.970608][ T3879] Call Trace: [ 116.973874][ T3879] [ 116.976786][ T3879] dump_stack_lvl+0xcd/0x134 [ 116.981371][ T3879] should_fail.cold+0x5/0xa [ 116.985862][ T3879] should_failslab+0x5/0x10 [ 116.990354][ T3879] kmem_cache_alloc_trace+0x60/0x3f0 [ 116.995631][ T3879] ? ref_tracker_alloc+0x14c/0x550 [ 117.000759][ T3879] ref_tracker_alloc+0x14c/0x550 [ 117.005705][ T3879] ? ref_tracker_free+0x6b0/0x6b0 [ 117.010888][ T3879] ? lock_release+0x720/0x720 [ 117.015559][ T3879] ? do_raw_spin_lock+0x120/0x2a0 [ 117.020572][ T3879] ? rwlock_bug.part.0+0x90/0x90 [ 117.025500][ T3879] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 117.030956][ T3879] linkwatch_fire_event+0x202/0x260 [ 117.036155][ T3879] netif_carrier_off+0x96/0xb0 [ 117.040907][ T3879] __tun_detach+0xfe7/0x13e0 [ 117.045493][ T3879] tun_chr_close+0xc4/0x180 [ 117.049994][ T3879] __fput+0x277/0x9d0 [ 117.053963][ T3879] ? __tun_detach+0x13e0/0x13e0 [ 117.058807][ T3879] task_work_run+0xdd/0x1a0 [ 117.063321][ T3879] ptrace_notify+0x114/0x140 [ 117.067903][ T3879] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 117.074133][ T3879] syscall_exit_to_user_mode+0x9/0x60 [ 117.079490][ T3879] do_syscall_64+0x42/0xb0 [ 117.083896][ T3879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.089779][ T3879] RIP: 0033:0x7fc6cd2767a3 [ 117.094179][ T3879] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 117.113777][ T3879] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 117.122190][ T3879] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3879] close(3) = 0 [pid 3879] close(4) = 0 [pid 3879] close(5) = -1 EBADF (Bad file descriptor) [ 117.130152][ T3879] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 117.138109][ T3879] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 117.146065][ T3879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 117.154019][ T3879] R13: 00000000000f4240 R14: 000000000001c785 R15: 00007ffdc49a5924 [ 117.161988][ T3879] [pid 3879] close(6) = -1 EBADF (Bad file descriptor) [pid 3879] close(7) = -1 EBADF (Bad file descriptor) [pid 3879] close(8) = -1 EBADF (Bad file descriptor) [pid 3879] close(9) = -1 EBADF (Bad file descriptor) [pid 3879] close(10) = -1 EBADF (Bad file descriptor) [pid 3879] close(11) = -1 EBADF (Bad file descriptor) [pid 3879] close(12) = -1 EBADF (Bad file descriptor) [pid 3879] close(13) = -1 EBADF (Bad file descriptor) [pid 3879] close(14) = -1 EBADF (Bad file descriptor) [pid 3879] close(15) = -1 EBADF (Bad file descriptor) [pid 3879] close(16) = -1 EBADF (Bad file descriptor) [pid 3879] close(17) = -1 EBADF (Bad file descriptor) [pid 3879] close(18) = -1 EBADF (Bad file descriptor) [pid 3879] close(19) = -1 EBADF (Bad file descriptor) [pid 3879] close(20) = -1 EBADF (Bad file descriptor) [pid 3879] close(21) = -1 EBADF (Bad file descriptor) [pid 3879] close(22) = -1 EBADF (Bad file descriptor) [pid 3879] close(23) = -1 EBADF (Bad file descriptor) [pid 3879] close(24) = -1 EBADF (Bad file descriptor) [pid 3879] close(25) = -1 EBADF (Bad file descriptor) [pid 3879] close(26) = -1 EBADF (Bad file descriptor) [pid 3879] close(27) = -1 EBADF (Bad file descriptor) [pid 3879] close(28) = -1 EBADF (Bad file descriptor) [pid 3879] close(29) = -1 EBADF (Bad file descriptor) [pid 3879] exit_group(0) = ? [pid 3879] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=244, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3880 attached , child_tidptr=0x5555570bd5d0) = 245 [pid 3880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3880] setpgid(0, 0) = 0 [pid 3880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3880] write(3, "1000", 4) = 4 [pid 3880] close(3) = 0 [pid 3880] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3880] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3880] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3880] write(4, "5", 1) = 1 [pid 3880] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 117.248837][ T3880] FAULT_INJECTION: forcing a failure. [ 117.248837][ T3880] name failslab, interval 1, probability 0, space 0, times 0 [ 117.261435][ T3880] CPU: 0 PID: 3880 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 117.271569][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.281603][ T3880] Call Trace: [ 117.284889][ T3880] [ 117.287820][ T3880] dump_stack_lvl+0xcd/0x134 [ 117.292590][ T3880] should_fail.cold+0x5/0xa [ 117.297080][ T3880] should_failslab+0x5/0x10 [ 117.301567][ T3880] kmem_cache_alloc_trace+0x60/0x3f0 [ 117.306856][ T3880] ? ref_tracker_alloc+0x14c/0x550 [ 117.311981][ T3880] ref_tracker_alloc+0x14c/0x550 [ 117.316910][ T3880] ? ref_tracker_free+0x6b0/0x6b0 [ 117.321924][ T3880] ? lock_release+0x720/0x720 [ 117.326597][ T3880] ? do_raw_spin_lock+0x120/0x2a0 [ 117.331616][ T3880] ? rwlock_bug.part.0+0x90/0x90 [ 117.336562][ T3880] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 117.341932][ T3880] linkwatch_fire_event+0x202/0x260 [ 117.347130][ T3880] netif_carrier_off+0x96/0xb0 [ 117.352063][ T3880] __tun_detach+0xfe7/0x13e0 [ 117.356649][ T3880] tun_chr_close+0xc4/0x180 [ 117.361137][ T3880] __fput+0x277/0x9d0 [ 117.365102][ T3880] ? __tun_detach+0x13e0/0x13e0 [ 117.369940][ T3880] task_work_run+0xdd/0x1a0 [ 117.374455][ T3880] ptrace_notify+0x114/0x140 [ 117.379039][ T3880] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 117.385283][ T3880] syscall_exit_to_user_mode+0x9/0x60 [ 117.390655][ T3880] do_syscall_64+0x42/0xb0 [ 117.395095][ T3880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.401001][ T3880] RIP: 0033:0x7fc6cd2767a3 [ 117.405412][ T3880] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 117.425019][ T3880] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 117.433434][ T3880] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 117.441403][ T3880] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3880] close(3) = 0 [pid 3880] close(4) = 0 [pid 3880] close(5) = -1 EBADF (Bad file descriptor) [pid 3880] close(6) = -1 EBADF (Bad file descriptor) [pid 3880] close(7) = -1 EBADF (Bad file descriptor) [pid 3880] close(8) = -1 EBADF (Bad file descriptor) [pid 3880] close(9) = -1 EBADF (Bad file descriptor) [ 117.449368][ T3880] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 117.457326][ T3880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 117.465288][ T3880] R13: 00000000000f4240 R14: 000000000001c8a8 R15: 00007ffdc49a5924 [ 117.473286][ T3880] [pid 3880] close(10) = -1 EBADF (Bad file descriptor) [pid 3880] close(11) = -1 EBADF (Bad file descriptor) [pid 3880] close(12) = -1 EBADF (Bad file descriptor) [pid 3880] close(13) = -1 EBADF (Bad file descriptor) [pid 3880] close(14) = -1 EBADF (Bad file descriptor) [pid 3880] close(15) = -1 EBADF (Bad file descriptor) [pid 3880] close(16) = -1 EBADF (Bad file descriptor) [pid 3880] close(17) = -1 EBADF (Bad file descriptor) [pid 3880] close(18) = -1 EBADF (Bad file descriptor) [pid 3880] close(19) = -1 EBADF (Bad file descriptor) [pid 3880] close(20) = -1 EBADF (Bad file descriptor) [pid 3880] close(21) = -1 EBADF (Bad file descriptor) [pid 3880] close(22) = -1 EBADF (Bad file descriptor) [pid 3880] close(23) = -1 EBADF (Bad file descriptor) [pid 3880] close(24) = -1 EBADF (Bad file descriptor) [pid 3880] close(25) = -1 EBADF (Bad file descriptor) [pid 3880] close(26) = -1 EBADF (Bad file descriptor) [pid 3880] close(27) = -1 EBADF (Bad file descriptor) [pid 3880] close(28) = -1 EBADF (Bad file descriptor) [pid 3880] close(29) = -1 EBADF (Bad file descriptor) [pid 3880] exit_group(0) = ? [pid 3880] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 246 ./strace-static-x86_64: Process 3881 attached [pid 3881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3881] setpgid(0, 0) = 0 [pid 3881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3881] write(3, "1000", 4) = 4 [pid 3881] close(3) = 0 [pid 3881] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3881] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3881] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3881] write(4, "5", 1) = 1 [pid 3881] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 117.546823][ T3881] FAULT_INJECTION: forcing a failure. [ 117.546823][ T3881] name failslab, interval 1, probability 0, space 0, times 0 [ 117.559449][ T3881] CPU: 0 PID: 3881 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 117.569583][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.579615][ T3881] Call Trace: [ 117.582872][ T3881] [ 117.585779][ T3881] dump_stack_lvl+0xcd/0x134 [ 117.590353][ T3881] should_fail.cold+0x5/0xa [ 117.594833][ T3881] should_failslab+0x5/0x10 [ 117.599311][ T3881] kmem_cache_alloc_trace+0x60/0x3f0 [ 117.604571][ T3881] ? ref_tracker_alloc+0x14c/0x550 [ 117.609663][ T3881] ref_tracker_alloc+0x14c/0x550 [ 117.614608][ T3881] ? ref_tracker_free+0x6b0/0x6b0 [ 117.619618][ T3881] ? lock_release+0x720/0x720 [ 117.624284][ T3881] ? do_raw_spin_lock+0x120/0x2a0 [ 117.629295][ T3881] ? rwlock_bug.part.0+0x90/0x90 [ 117.634220][ T3881] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 117.639585][ T3881] linkwatch_fire_event+0x202/0x260 [ 117.644779][ T3881] netif_carrier_off+0x96/0xb0 [ 117.649531][ T3881] __tun_detach+0xfe7/0x13e0 [ 117.654114][ T3881] tun_chr_close+0xc4/0x180 [ 117.658602][ T3881] __fput+0x277/0x9d0 [ 117.662573][ T3881] ? __tun_detach+0x13e0/0x13e0 [ 117.667503][ T3881] task_work_run+0xdd/0x1a0 [ 117.671997][ T3881] ptrace_notify+0x114/0x140 [ 117.676575][ T3881] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 117.682804][ T3881] syscall_exit_to_user_mode+0x9/0x60 [ 117.688160][ T3881] do_syscall_64+0x42/0xb0 [ 117.692567][ T3881] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.698448][ T3881] RIP: 0033:0x7fc6cd2767a3 [ 117.702869][ T3881] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 117.722472][ T3881] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 117.730885][ T3881] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 117.738847][ T3881] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3881] close(3) = 0 [pid 3881] close(4) = 0 [pid 3881] close(5) = -1 EBADF (Bad file descriptor) [ 117.746804][ T3881] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 117.754758][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 117.762714][ T3881] R13: 00000000000f4240 R14: 000000000001c9e0 R15: 00007ffdc49a5924 [ 117.770699][ T3881] [pid 3881] close(6) = -1 EBADF (Bad file descriptor) [pid 3881] close(7) = -1 EBADF (Bad file descriptor) [pid 3881] close(8) = -1 EBADF (Bad file descriptor) [pid 3881] close(9) = -1 EBADF (Bad file descriptor) [pid 3881] close(10) = -1 EBADF (Bad file descriptor) [pid 3881] close(11) = -1 EBADF (Bad file descriptor) [pid 3881] close(12) = -1 EBADF (Bad file descriptor) [pid 3881] close(13) = -1 EBADF (Bad file descriptor) [pid 3881] close(14) = -1 EBADF (Bad file descriptor) [pid 3881] close(15) = -1 EBADF (Bad file descriptor) [pid 3881] close(16) = -1 EBADF (Bad file descriptor) [pid 3881] close(17) = -1 EBADF (Bad file descriptor) [pid 3881] close(18) = -1 EBADF (Bad file descriptor) [pid 3881] close(19) = -1 EBADF (Bad file descriptor) [pid 3881] close(20) = -1 EBADF (Bad file descriptor) [pid 3881] close(21) = -1 EBADF (Bad file descriptor) [pid 3881] close(22) = -1 EBADF (Bad file descriptor) [pid 3881] close(23) = -1 EBADF (Bad file descriptor) [pid 3881] close(24) = -1 EBADF (Bad file descriptor) [pid 3881] close(25) = -1 EBADF (Bad file descriptor) [pid 3881] close(26) = -1 EBADF (Bad file descriptor) [pid 3881] close(27) = -1 EBADF (Bad file descriptor) [pid 3881] close(28) = -1 EBADF (Bad file descriptor) [pid 3881] close(29) = -1 EBADF (Bad file descriptor) [pid 3881] exit_group(0) = ? [pid 3881] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=246, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3882 attached , child_tidptr=0x5555570bd5d0) = 247 [pid 3882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3882] setpgid(0, 0) = 0 [pid 3882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3882] write(3, "1000", 4) = 4 [pid 3882] close(3) = 0 [pid 3882] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3882] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3882] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3882] write(4, "5", 1) = 1 [pid 3882] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 117.855155][ T3882] FAULT_INJECTION: forcing a failure. [ 117.855155][ T3882] name failslab, interval 1, probability 0, space 0, times 0 [ 117.867800][ T3882] CPU: 0 PID: 3882 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 117.878030][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.888076][ T3882] Call Trace: [ 117.891359][ T3882] [ 117.894273][ T3882] dump_stack_lvl+0xcd/0x134 [ 117.898866][ T3882] should_fail.cold+0x5/0xa [ 117.903370][ T3882] should_failslab+0x5/0x10 [ 117.907870][ T3882] kmem_cache_alloc_trace+0x60/0x3f0 [ 117.913160][ T3882] ? ref_tracker_alloc+0x14c/0x550 [ 117.918445][ T3882] ref_tracker_alloc+0x14c/0x550 [ 117.923384][ T3882] ? ref_tracker_free+0x6b0/0x6b0 [ 117.928398][ T3882] ? lock_release+0x720/0x720 [ 117.933074][ T3882] ? do_raw_spin_lock+0x120/0x2a0 [ 117.938096][ T3882] ? rwlock_bug.part.0+0x90/0x90 [ 117.943038][ T3882] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 117.948424][ T3882] linkwatch_fire_event+0x202/0x260 [ 117.953654][ T3882] netif_carrier_off+0x96/0xb0 [ 117.958420][ T3882] __tun_detach+0xfe7/0x13e0 [ 117.963017][ T3882] tun_chr_close+0xc4/0x180 [ 117.967512][ T3882] __fput+0x277/0x9d0 [ 117.971490][ T3882] ? __tun_detach+0x13e0/0x13e0 [ 117.976334][ T3882] task_work_run+0xdd/0x1a0 [ 117.980833][ T3882] ptrace_notify+0x114/0x140 [ 117.985417][ T3882] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 117.991834][ T3882] syscall_exit_to_user_mode+0x9/0x60 [ 117.997207][ T3882] do_syscall_64+0x42/0xb0 [ 118.001707][ T3882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 118.007598][ T3882] RIP: 0033:0x7fc6cd2767a3 [ 118.012009][ T3882] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 118.032029][ T3882] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 118.040527][ T3882] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3882] close(3) = 0 [ 118.048482][ T3882] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 118.056439][ T3882] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 118.064397][ T3882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 118.072352][ T3882] R13: 00000000000f4240 R14: 000000000001cb13 R15: 00007ffdc49a5924 [ 118.080325][ T3882] [pid 3882] close(4) = 0 [pid 3882] close(5) = -1 EBADF (Bad file descriptor) [pid 3882] close(6) = -1 EBADF (Bad file descriptor) [pid 3882] close(7) = -1 EBADF (Bad file descriptor) [pid 3882] close(8) = -1 EBADF (Bad file descriptor) [pid 3882] close(9) = -1 EBADF (Bad file descriptor) [pid 3882] close(10) = -1 EBADF (Bad file descriptor) [pid 3882] close(11) = -1 EBADF (Bad file descriptor) [pid 3882] close(12) = -1 EBADF (Bad file descriptor) [pid 3882] close(13) = -1 EBADF (Bad file descriptor) [pid 3882] close(14) = -1 EBADF (Bad file descriptor) [pid 3882] close(15) = -1 EBADF (Bad file descriptor) [pid 3882] close(16) = -1 EBADF (Bad file descriptor) [pid 3882] close(17) = -1 EBADF (Bad file descriptor) [pid 3882] close(18) = -1 EBADF (Bad file descriptor) [pid 3882] close(19) = -1 EBADF (Bad file descriptor) [pid 3882] close(20) = -1 EBADF (Bad file descriptor) [pid 3882] close(21) = -1 EBADF (Bad file descriptor) [pid 3882] close(22) = -1 EBADF (Bad file descriptor) [pid 3882] close(23) = -1 EBADF (Bad file descriptor) [pid 3882] close(24) = -1 EBADF (Bad file descriptor) [pid 3882] close(25) = -1 EBADF (Bad file descriptor) [pid 3882] close(26) = -1 EBADF (Bad file descriptor) [pid 3882] close(27) = -1 EBADF (Bad file descriptor) [pid 3882] close(28) = -1 EBADF (Bad file descriptor) [pid 3882] close(29) = -1 EBADF (Bad file descriptor) [pid 3882] exit_group(0) = ? [pid 3882] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=247, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 248 ./strace-static-x86_64: Process 3883 attached [pid 3883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3883] setpgid(0, 0) = 0 [pid 3883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3883] write(3, "1000", 4) = 4 [pid 3883] close(3) = 0 [pid 3883] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3883] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3883] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3883] write(4, "5", 1) = 1 [pid 3883] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 118.167150][ T3883] FAULT_INJECTION: forcing a failure. [ 118.167150][ T3883] name failslab, interval 1, probability 0, space 0, times 0 [ 118.180106][ T3883] CPU: 1 PID: 3883 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 118.190283][ T3883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.200347][ T3883] Call Trace: [ 118.203627][ T3883] [ 118.206545][ T3883] dump_stack_lvl+0xcd/0x134 [ 118.211137][ T3883] should_fail.cold+0x5/0xa [ 118.215635][ T3883] should_failslab+0x5/0x10 [ 118.220134][ T3883] kmem_cache_alloc_trace+0x60/0x3f0 [ 118.225413][ T3883] ? ref_tracker_alloc+0x14c/0x550 [ 118.230526][ T3883] ref_tracker_alloc+0x14c/0x550 [ 118.235464][ T3883] ? ref_tracker_free+0x6b0/0x6b0 [ 118.240481][ T3883] ? lock_release+0x720/0x720 [ 118.245153][ T3883] ? do_raw_spin_lock+0x120/0x2a0 [ 118.250178][ T3883] ? rwlock_bug.part.0+0x90/0x90 [ 118.255118][ T3883] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 118.260498][ T3883] linkwatch_fire_event+0x202/0x260 [ 118.265811][ T3883] netif_carrier_off+0x96/0xb0 [ 118.270568][ T3883] __tun_detach+0xfe7/0x13e0 [ 118.275177][ T3883] tun_chr_close+0xc4/0x180 [ 118.279678][ T3883] __fput+0x277/0x9d0 [ 118.283659][ T3883] ? __tun_detach+0x13e0/0x13e0 [ 118.288509][ T3883] task_work_run+0xdd/0x1a0 [ 118.293020][ T3883] ptrace_notify+0x114/0x140 [ 118.297612][ T3883] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 118.303858][ T3883] syscall_exit_to_user_mode+0x9/0x60 [ 118.309231][ T3883] do_syscall_64+0x42/0xb0 [ 118.313650][ T3883] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 118.319540][ T3883] RIP: 0033:0x7fc6cd2767a3 [ 118.323948][ T3883] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 118.343552][ T3883] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 118.351969][ T3883] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 118.359943][ T3883] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3883] close(3) = 0 [pid 3883] close(4) = 0 [pid 3883] close(5) = -1 EBADF (Bad file descriptor) [pid 3883] close(6) = -1 EBADF (Bad file descriptor) [pid 3883] close(7) = -1 EBADF (Bad file descriptor) [pid 3883] close(8) = -1 EBADF (Bad file descriptor) [pid 3883] close(9) = -1 EBADF (Bad file descriptor) [pid 3883] close(10) = -1 EBADF (Bad file descriptor) [pid 3883] close(11) = -1 EBADF (Bad file descriptor) [pid 3883] close(12) = -1 EBADF (Bad file descriptor) [pid 3883] close(13) = -1 EBADF (Bad file descriptor) [pid 3883] close(14) = -1 EBADF (Bad file descriptor) [pid 3883] close(15) = -1 EBADF (Bad file descriptor) [pid 3883] close(16) = -1 EBADF (Bad file descriptor) [pid 3883] close(17) = -1 EBADF (Bad file descriptor) [pid 3883] close(18) = -1 EBADF (Bad file descriptor) [pid 3883] close(19) = -1 EBADF (Bad file descriptor) [pid 3883] close(20) = -1 EBADF (Bad file descriptor) [pid 3883] close(21) = -1 EBADF (Bad file descriptor) [pid 3883] close(22) = -1 EBADF (Bad file descriptor) [pid 3883] close(23) = -1 EBADF (Bad file descriptor) [pid 3883] close(24) = -1 EBADF (Bad file descriptor) [pid 3883] close(25) = -1 EBADF (Bad file descriptor) [pid 3883] close(26) = -1 EBADF (Bad file descriptor) [pid 3883] close(27) = -1 EBADF (Bad file descriptor) [pid 3883] close(28) = -1 EBADF (Bad file descriptor) [pid 3883] close(29) = -1 EBADF (Bad file descriptor) [ 118.367910][ T3883] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 118.375872][ T3883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 118.383830][ T3883] R13: 00000000000f4240 R14: 000000000001cc40 R15: 00007ffdc49a5924 [ 118.391811][ T3883] [pid 3883] exit_group(0) = ? [pid 3883] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 249 ./strace-static-x86_64: Process 3884 attached [pid 3884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3884] setpgid(0, 0) = 0 [pid 3884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3884] write(3, "1000", 4) = 4 [pid 3884] close(3) = 0 [pid 3884] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3884] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3884] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3884] write(4, "5", 1) = 1 [pid 3884] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 118.461833][ T3884] FAULT_INJECTION: forcing a failure. [ 118.461833][ T3884] name failslab, interval 1, probability 0, space 0, times 0 [ 118.474452][ T3884] CPU: 1 PID: 3884 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 118.484760][ T3884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.495069][ T3884] Call Trace: [ 118.498346][ T3884] [ 118.501262][ T3884] dump_stack_lvl+0xcd/0x134 [ 118.505848][ T3884] should_fail.cold+0x5/0xa [ 118.510347][ T3884] should_failslab+0x5/0x10 [ 118.514835][ T3884] kmem_cache_alloc_trace+0x60/0x3f0 [ 118.520107][ T3884] ? ref_tracker_alloc+0x14c/0x550 [ 118.525211][ T3884] ref_tracker_alloc+0x14c/0x550 [ 118.530224][ T3884] ? ref_tracker_free+0x6b0/0x6b0 [ 118.535238][ T3884] ? lock_release+0x720/0x720 [ 118.539903][ T3884] ? do_raw_spin_lock+0x120/0x2a0 [ 118.544942][ T3884] ? rwlock_bug.part.0+0x90/0x90 [ 118.549900][ T3884] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 118.555369][ T3884] linkwatch_fire_event+0x202/0x260 [ 118.560578][ T3884] netif_carrier_off+0x96/0xb0 [ 118.565345][ T3884] __tun_detach+0xfe7/0x13e0 [ 118.570033][ T3884] tun_chr_close+0xc4/0x180 [ 118.574537][ T3884] __fput+0x277/0x9d0 [ 118.578516][ T3884] ? __tun_detach+0x13e0/0x13e0 [ 118.583366][ T3884] task_work_run+0xdd/0x1a0 [ 118.588045][ T3884] ptrace_notify+0x114/0x140 [ 118.592633][ T3884] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 118.598873][ T3884] syscall_exit_to_user_mode+0x9/0x60 [ 118.604243][ T3884] do_syscall_64+0x42/0xb0 [ 118.608655][ T3884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 118.614545][ T3884] RIP: 0033:0x7fc6cd2767a3 [ 118.618958][ T3884] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 118.638743][ T3884] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 118.647154][ T3884] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 118.655114][ T3884] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 118.663076][ T3884] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 118.671055][ T3884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 118.679022][ T3884] R13: 00000000000f4240 R14: 000000000001cd78 R15: 00007ffdc49a5924 [ 118.687001][ T3884] [pid 3884] close(3) = 0 [pid 3884] close(4) = 0 [pid 3884] close(5) = -1 EBADF (Bad file descriptor) [pid 3884] close(6) = -1 EBADF (Bad file descriptor) [pid 3884] close(7) = -1 EBADF (Bad file descriptor) [pid 3884] close(8) = -1 EBADF (Bad file descriptor) [pid 3884] close(9) = -1 EBADF (Bad file descriptor) [pid 3884] close(10) = -1 EBADF (Bad file descriptor) [pid 3884] close(11) = -1 EBADF (Bad file descriptor) [pid 3884] close(12) = -1 EBADF (Bad file descriptor) [pid 3884] close(13) = -1 EBADF (Bad file descriptor) [pid 3884] close(14) = -1 EBADF (Bad file descriptor) [pid 3884] close(15) = -1 EBADF (Bad file descriptor) [pid 3884] close(16) = -1 EBADF (Bad file descriptor) [pid 3884] close(17) = -1 EBADF (Bad file descriptor) [pid 3884] close(18) = -1 EBADF (Bad file descriptor) [pid 3884] close(19) = -1 EBADF (Bad file descriptor) [pid 3884] close(20) = -1 EBADF (Bad file descriptor) [pid 3884] close(21) = -1 EBADF (Bad file descriptor) [pid 3884] close(22) = -1 EBADF (Bad file descriptor) [pid 3884] close(23) = -1 EBADF (Bad file descriptor) [pid 3884] close(24) = -1 EBADF (Bad file descriptor) [pid 3884] close(25) = -1 EBADF (Bad file descriptor) [pid 3884] close(26) = -1 EBADF (Bad file descriptor) [pid 3884] close(27) = -1 EBADF (Bad file descriptor) [pid 3884] close(28) = -1 EBADF (Bad file descriptor) [pid 3884] close(29) = -1 EBADF (Bad file descriptor) [pid 3884] exit_group(0) = ? [pid 3884] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=249, si_uid=0, si_status=0, si_utime=1, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 250 ./strace-static-x86_64: Process 3885 attached [pid 3885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3885] setpgid(0, 0) = 0 [pid 3885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3885] write(3, "1000", 4) = 4 [pid 3885] close(3) = 0 [pid 3885] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3885] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3885] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3885] write(4, "5", 1) = 1 [pid 3885] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 118.764211][ T3885] FAULT_INJECTION: forcing a failure. [ 118.764211][ T3885] name failslab, interval 1, probability 0, space 0, times 0 [ 118.777191][ T3885] CPU: 1 PID: 3885 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 118.787339][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.797395][ T3885] Call Trace: [ 118.800668][ T3885] [ 118.803587][ T3885] dump_stack_lvl+0xcd/0x134 [ 118.808260][ T3885] should_fail.cold+0x5/0xa [ 118.812761][ T3885] should_failslab+0x5/0x10 [ 118.817259][ T3885] kmem_cache_alloc_trace+0x60/0x3f0 [ 118.822542][ T3885] ? ref_tracker_alloc+0x14c/0x550 [ 118.827650][ T3885] ref_tracker_alloc+0x14c/0x550 [ 118.832585][ T3885] ? ref_tracker_free+0x6b0/0x6b0 [ 118.837606][ T3885] ? lock_release+0x720/0x720 [ 118.842283][ T3885] ? do_raw_spin_lock+0x120/0x2a0 [ 118.847299][ T3885] ? rwlock_bug.part.0+0x90/0x90 [ 118.852230][ T3885] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 118.857606][ T3885] linkwatch_fire_event+0x202/0x260 [ 118.862812][ T3885] netif_carrier_off+0x96/0xb0 [ 118.867571][ T3885] __tun_detach+0xfe7/0x13e0 [ 118.872169][ T3885] tun_chr_close+0xc4/0x180 [ 118.876663][ T3885] __fput+0x277/0x9d0 [ 118.880639][ T3885] ? __tun_detach+0x13e0/0x13e0 [ 118.885506][ T3885] task_work_run+0xdd/0x1a0 [ 118.890009][ T3885] ptrace_notify+0x114/0x140 [ 118.894591][ T3885] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 118.900829][ T3885] syscall_exit_to_user_mode+0x9/0x60 [ 118.906196][ T3885] do_syscall_64+0x42/0xb0 [ 118.910610][ T3885] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 118.916501][ T3885] RIP: 0033:0x7fc6cd2767a3 [ 118.920906][ T3885] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 118.940511][ T3885] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 118.948923][ T3885] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 118.956888][ T3885] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3885] close(3) = 0 [pid 3885] close(4) = 0 [pid 3885] close(5) = -1 EBADF (Bad file descriptor) [pid 3885] close(6) = -1 EBADF (Bad file descriptor) [pid 3885] close(7) = -1 EBADF (Bad file descriptor) [pid 3885] close(8) = -1 EBADF (Bad file descriptor) [pid 3885] close(9) = -1 EBADF (Bad file descriptor) [pid 3885] close(10) = -1 EBADF (Bad file descriptor) [pid 3885] close(11) = -1 EBADF (Bad file descriptor) [pid 3885] close(12) = -1 EBADF (Bad file descriptor) [pid 3885] close(13) = -1 EBADF (Bad file descriptor) [pid 3885] close(14) = -1 EBADF (Bad file descriptor) [pid 3885] close(15) = -1 EBADF (Bad file descriptor) [pid 3885] close(16) = -1 EBADF (Bad file descriptor) [pid 3885] close(17) = -1 EBADF (Bad file descriptor) [pid 3885] close(18) = -1 EBADF (Bad file descriptor) [pid 3885] close(19) = -1 EBADF (Bad file descriptor) [pid 3885] close(20) = -1 EBADF (Bad file descriptor) [pid 3885] close(21) = -1 EBADF (Bad file descriptor) [pid 3885] close(22) = -1 EBADF (Bad file descriptor) [pid 3885] close(23) = -1 EBADF (Bad file descriptor) [pid 3885] close(24) = -1 EBADF (Bad file descriptor) [pid 3885] close(25) = -1 EBADF (Bad file descriptor) [pid 3885] close(26) = -1 EBADF (Bad file descriptor) [pid 3885] close(27) = -1 EBADF (Bad file descriptor) [pid 3885] close(28) = -1 EBADF (Bad file descriptor) [pid 3885] close(29) = -1 EBADF (Bad file descriptor) [pid 3885] exit_group(0) = ? [pid 3885] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=250, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 251 ./strace-static-x86_64: Process 3886 attached [pid 3886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3886] setpgid(0, 0) = 0 [pid 3886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3886] write(3, "1000", 4) = 4 [pid 3886] close(3) = 0 [pid 3886] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3886] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3886] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3886] write(4, "5", 1) = 1 [pid 3886] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 118.964937][ T3885] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 118.972902][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 118.980869][ T3885] R13: 00000000000f4240 R14: 000000000001ce9f R15: 00007ffdc49a5924 [ 118.988852][ T3885] [ 119.046791][ T3886] FAULT_INJECTION: forcing a failure. [ 119.046791][ T3886] name failslab, interval 1, probability 0, space 0, times 0 [ 119.059732][ T3886] CPU: 1 PID: 3886 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 119.069877][ T3886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.079929][ T3886] Call Trace: [ 119.083201][ T3886] [ 119.086126][ T3886] dump_stack_lvl+0xcd/0x134 [ 119.090741][ T3886] should_fail.cold+0x5/0xa [ 119.095237][ T3886] should_failslab+0x5/0x10 [ 119.099733][ T3886] kmem_cache_alloc_trace+0x60/0x3f0 [ 119.105041][ T3886] ? ref_tracker_alloc+0x14c/0x550 [ 119.110161][ T3886] ref_tracker_alloc+0x14c/0x550 [ 119.115097][ T3886] ? ref_tracker_free+0x6b0/0x6b0 [ 119.120222][ T3886] ? lock_release+0x720/0x720 [ 119.124900][ T3886] ? do_raw_spin_lock+0x120/0x2a0 [ 119.129920][ T3886] ? rwlock_bug.part.0+0x90/0x90 [ 119.134855][ T3886] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 119.140223][ T3886] linkwatch_fire_event+0x202/0x260 [ 119.145444][ T3886] netif_carrier_off+0x96/0xb0 [ 119.150218][ T3886] __tun_detach+0xfe7/0x13e0 [ 119.154838][ T3886] tun_chr_close+0xc4/0x180 [ 119.159327][ T3886] __fput+0x277/0x9d0 [ 119.163295][ T3886] ? __tun_detach+0x13e0/0x13e0 [ 119.168133][ T3886] task_work_run+0xdd/0x1a0 [ 119.172635][ T3886] ptrace_notify+0x114/0x140 [ 119.177212][ T3886] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 119.183443][ T3886] syscall_exit_to_user_mode+0x9/0x60 [ 119.188805][ T3886] do_syscall_64+0x42/0xb0 [ 119.193210][ T3886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.199093][ T3886] RIP: 0033:0x7fc6cd2767a3 [ 119.203499][ T3886] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 119.223210][ T3886] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.231708][ T3886] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 119.239680][ T3886] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3886] close(3) = 0 [pid 3886] close(4) = 0 [ 119.247646][ T3886] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 119.255709][ T3886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 119.263666][ T3886] R13: 00000000000f4240 R14: 000000000001cfcd R15: 00007ffdc49a5924 [ 119.271660][ T3886] [pid 3886] close(5) = -1 EBADF (Bad file descriptor) [pid 3886] close(6) = -1 EBADF (Bad file descriptor) [pid 3886] close(7) = -1 EBADF (Bad file descriptor) [pid 3886] close(8) = -1 EBADF (Bad file descriptor) [pid 3886] close(9) = -1 EBADF (Bad file descriptor) [pid 3886] close(10) = -1 EBADF (Bad file descriptor) [pid 3886] close(11) = -1 EBADF (Bad file descriptor) [pid 3886] close(12) = -1 EBADF (Bad file descriptor) [pid 3886] close(13) = -1 EBADF (Bad file descriptor) [pid 3886] close(14) = -1 EBADF (Bad file descriptor) [pid 3886] close(15) = -1 EBADF (Bad file descriptor) [pid 3886] close(16) = -1 EBADF (Bad file descriptor) [pid 3886] close(17) = -1 EBADF (Bad file descriptor) [pid 3886] close(18) = -1 EBADF (Bad file descriptor) [pid 3886] close(19) = -1 EBADF (Bad file descriptor) [pid 3886] close(20) = -1 EBADF (Bad file descriptor) [pid 3886] close(21) = -1 EBADF (Bad file descriptor) [pid 3886] close(22) = -1 EBADF (Bad file descriptor) [pid 3886] close(23) = -1 EBADF (Bad file descriptor) [pid 3886] close(24) = -1 EBADF (Bad file descriptor) [pid 3886] close(25) = -1 EBADF (Bad file descriptor) [pid 3886] close(26) = -1 EBADF (Bad file descriptor) [pid 3886] close(27) = -1 EBADF (Bad file descriptor) [pid 3886] close(28) = -1 EBADF (Bad file descriptor) [pid 3886] close(29) = -1 EBADF (Bad file descriptor) [pid 3886] exit_group(0) = ? [pid 3886] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3887 attached , child_tidptr=0x5555570bd5d0) = 252 [pid 3887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3887] setpgid(0, 0) = 0 [pid 3887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3887] write(3, "1000", 4) = 4 [pid 3887] close(3) = 0 [pid 3887] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3887] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3887] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3887] write(4, "5", 1) = 1 [pid 3887] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 119.354148][ T3887] FAULT_INJECTION: forcing a failure. [ 119.354148][ T3887] name failslab, interval 1, probability 0, space 0, times 0 [ 119.366779][ T3887] CPU: 1 PID: 3887 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 119.376995][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.387043][ T3887] Call Trace: [ 119.390317][ T3887] [ 119.393236][ T3887] dump_stack_lvl+0xcd/0x134 [ 119.397824][ T3887] should_fail.cold+0x5/0xa [ 119.402323][ T3887] should_failslab+0x5/0x10 [ 119.406816][ T3887] kmem_cache_alloc_trace+0x60/0x3f0 [ 119.412102][ T3887] ? ref_tracker_alloc+0x14c/0x550 [ 119.417217][ T3887] ref_tracker_alloc+0x14c/0x550 [ 119.422151][ T3887] ? ref_tracker_free+0x6b0/0x6b0 [ 119.427166][ T3887] ? lock_release+0x720/0x720 [ 119.431840][ T3887] ? do_raw_spin_lock+0x120/0x2a0 [ 119.436858][ T3887] ? rwlock_bug.part.0+0x90/0x90 [ 119.441810][ T3887] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 119.447219][ T3887] linkwatch_fire_event+0x202/0x260 [ 119.452445][ T3887] netif_carrier_off+0x96/0xb0 [ 119.457204][ T3887] __tun_detach+0xfe7/0x13e0 [ 119.461800][ T3887] tun_chr_close+0xc4/0x180 [ 119.466294][ T3887] __fput+0x277/0x9d0 [ 119.470274][ T3887] ? __tun_detach+0x13e0/0x13e0 [ 119.475122][ T3887] task_work_run+0xdd/0x1a0 [ 119.479651][ T3887] ptrace_notify+0x114/0x140 [ 119.484243][ T3887] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 119.490490][ T3887] syscall_exit_to_user_mode+0x9/0x60 [ 119.495890][ T3887] do_syscall_64+0x42/0xb0 [ 119.500304][ T3887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.506189][ T3887] RIP: 0033:0x7fc6cd2767a3 [ 119.510602][ T3887] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 119.530208][ T3887] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.538647][ T3887] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 119.546613][ T3887] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3887] close(3) = 0 [pid 3887] close(4) = 0 [pid 3887] close(5) = -1 EBADF (Bad file descriptor) [pid 3887] close(6) = -1 EBADF (Bad file descriptor) [pid 3887] close(7) = -1 EBADF (Bad file descriptor) [pid 3887] close(8) = -1 EBADF (Bad file descriptor) [pid 3887] close(9) = -1 EBADF (Bad file descriptor) [pid 3887] close(10) = -1 EBADF (Bad file descriptor) [pid 3887] close(11) = -1 EBADF (Bad file descriptor) [pid 3887] close(12) = -1 EBADF (Bad file descriptor) [pid 3887] close(13) = -1 EBADF (Bad file descriptor) [pid 3887] close(14) = -1 EBADF (Bad file descriptor) [ 119.554574][ T3887] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 119.562543][ T3887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 119.570516][ T3887] R13: 00000000000f4240 R14: 000000000001d0e7 R15: 00007ffdc49a5924 [ 119.578502][ T3887] [pid 3887] close(15) = -1 EBADF (Bad file descriptor) [pid 3887] close(16) = -1 EBADF (Bad file descriptor) [pid 3887] close(17) = -1 EBADF (Bad file descriptor) [pid 3887] close(18) = -1 EBADF (Bad file descriptor) [pid 3887] close(19) = -1 EBADF (Bad file descriptor) [pid 3887] close(20) = -1 EBADF (Bad file descriptor) [pid 3887] close(21) = -1 EBADF (Bad file descriptor) [pid 3887] close(22) = -1 EBADF (Bad file descriptor) [pid 3887] close(23) = -1 EBADF (Bad file descriptor) [pid 3887] close(24) = -1 EBADF (Bad file descriptor) [pid 3887] close(25) = -1 EBADF (Bad file descriptor) [pid 3887] close(26) = -1 EBADF (Bad file descriptor) [pid 3887] close(27) = -1 EBADF (Bad file descriptor) [pid 3887] close(28) = -1 EBADF (Bad file descriptor) [pid 3887] close(29) = -1 EBADF (Bad file descriptor) [pid 3887] exit_group(0) = ? [pid 3887] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=252, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 253 ./strace-static-x86_64: Process 3888 attached [pid 3888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3888] setpgid(0, 0) = 0 [pid 3888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3888] write(3, "1000", 4) = 4 [pid 3888] close(3) = 0 [pid 3888] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3888] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3888] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3888] write(4, "5", 1) = 1 [pid 3888] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 119.657772][ T3888] FAULT_INJECTION: forcing a failure. [ 119.657772][ T3888] name failslab, interval 1, probability 0, space 0, times 0 [ 119.670405][ T3888] CPU: 1 PID: 3888 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 119.680668][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.690723][ T3888] Call Trace: [ 119.694339][ T3888] [ 119.697262][ T3888] dump_stack_lvl+0xcd/0x134 [ 119.701870][ T3888] should_fail.cold+0x5/0xa [ 119.706386][ T3888] should_failslab+0x5/0x10 [ 119.711394][ T3888] kmem_cache_alloc_trace+0x60/0x3f0 [ 119.716790][ T3888] ? ref_tracker_alloc+0x14c/0x550 [ 119.721904][ T3888] ref_tracker_alloc+0x14c/0x550 [ 119.726853][ T3888] ? ref_tracker_free+0x6b0/0x6b0 [ 119.731959][ T3888] ? lock_release+0x720/0x720 [ 119.736649][ T3888] ? do_raw_spin_lock+0x120/0x2a0 [ 119.741705][ T3888] ? rwlock_bug.part.0+0x90/0x90 [ 119.746674][ T3888] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 119.752067][ T3888] linkwatch_fire_event+0x202/0x260 [ 119.757298][ T3888] netif_carrier_off+0x96/0xb0 [ 119.762071][ T3888] __tun_detach+0xfe7/0x13e0 [ 119.766671][ T3888] tun_chr_close+0xc4/0x180 [ 119.771176][ T3888] __fput+0x277/0x9d0 [ 119.775157][ T3888] ? __tun_detach+0x13e0/0x13e0 [ 119.780115][ T3888] task_work_run+0xdd/0x1a0 [ 119.784630][ T3888] ptrace_notify+0x114/0x140 [ 119.789225][ T3888] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 119.795562][ T3888] syscall_exit_to_user_mode+0x9/0x60 [ 119.800956][ T3888] do_syscall_64+0x42/0xb0 [ 119.805369][ T3888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.811270][ T3888] RIP: 0033:0x7fc6cd2767a3 [ 119.815697][ T3888] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 119.835334][ T3888] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.843760][ T3888] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3888] close(3) = 0 [pid 3888] close(4) = 0 [pid 3888] close(5) = -1 EBADF (Bad file descriptor) [pid 3888] close(6) = -1 EBADF (Bad file descriptor) [pid 3888] close(7) = -1 EBADF (Bad file descriptor) [pid 3888] close(8) = -1 EBADF (Bad file descriptor) [pid 3888] close(9) = -1 EBADF (Bad file descriptor) [pid 3888] close(10) = -1 EBADF (Bad file descriptor) [pid 3888] close(11) = -1 EBADF (Bad file descriptor) [pid 3888] close(12) = -1 EBADF (Bad file descriptor) [pid 3888] close(13) = -1 EBADF (Bad file descriptor) [pid 3888] close(14) = -1 EBADF (Bad file descriptor) [pid 3888] close(15) = -1 EBADF (Bad file descriptor) [pid 3888] close(16) = -1 EBADF (Bad file descriptor) [pid 3888] close(17) = -1 EBADF (Bad file descriptor) [pid 3888] close(18) = -1 EBADF (Bad file descriptor) [pid 3888] close(19) = -1 EBADF (Bad file descriptor) [pid 3888] close(20) = -1 EBADF (Bad file descriptor) [pid 3888] close(21) = -1 EBADF (Bad file descriptor) [pid 3888] close(22) = -1 EBADF (Bad file descriptor) [pid 3888] close(23) = -1 EBADF (Bad file descriptor) [pid 3888] close(24) = -1 EBADF (Bad file descriptor) [pid 3888] close(25) = -1 EBADF (Bad file descriptor) [pid 3888] close(26) = -1 EBADF (Bad file descriptor) [pid 3888] close(27) = -1 EBADF (Bad file descriptor) [pid 3888] close(28) = -1 EBADF (Bad file descriptor) [pid 3888] close(29) = -1 EBADF (Bad file descriptor) [pid 3888] exit_group(0) = ? [pid 3888] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=253, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3889 attached [pid 3889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3889] setpgid(0, 0) = 0 [pid 3889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3889] write(3, "1000", 4) = 4 [pid 3889] close(3) = 0 [pid 3889] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3889] ioctl(3, TUNSETIFF, 0x20000000 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 254 [pid 3889] <... ioctl resumed>) = 0 [ 119.851727][ T3888] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 119.859694][ T3888] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 119.867660][ T3888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 119.875631][ T3888] R13: 00000000000f4240 R14: 000000000001d21b R15: 00007ffdc49a5924 [ 119.883631][ T3888] [pid 3889] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3889] write(4, "5", 1) = 1 [pid 3889] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 119.941930][ T3889] FAULT_INJECTION: forcing a failure. [ 119.941930][ T3889] name failslab, interval 1, probability 0, space 0, times 0 [ 119.954905][ T3889] CPU: 0 PID: 3889 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 119.965060][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.975118][ T3889] Call Trace: [ 119.978397][ T3889] [ 119.981325][ T3889] dump_stack_lvl+0xcd/0x134 [ 119.986051][ T3889] should_fail.cold+0x5/0xa [ 119.990574][ T3889] should_failslab+0x5/0x10 [ 119.995100][ T3889] kmem_cache_alloc_trace+0x60/0x3f0 [ 120.000390][ T3889] ? ref_tracker_alloc+0x14c/0x550 [ 120.005513][ T3889] ref_tracker_alloc+0x14c/0x550 [ 120.010460][ T3889] ? ref_tracker_free+0x6b0/0x6b0 [ 120.015605][ T3889] ? lock_release+0x720/0x720 [ 120.020314][ T3889] ? do_raw_spin_lock+0x120/0x2a0 [ 120.025356][ T3889] ? rwlock_bug.part.0+0x90/0x90 [ 120.030309][ T3889] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 120.035809][ T3889] linkwatch_fire_event+0x202/0x260 [ 120.041041][ T3889] netif_carrier_off+0x96/0xb0 [ 120.045831][ T3889] __tun_detach+0xfe7/0x13e0 [ 120.050448][ T3889] tun_chr_close+0xc4/0x180 [ 120.054969][ T3889] __fput+0x277/0x9d0 [ 120.058957][ T3889] ? __tun_detach+0x13e0/0x13e0 [ 120.063825][ T3889] task_work_run+0xdd/0x1a0 [ 120.068359][ T3889] ptrace_notify+0x114/0x140 [ 120.072979][ T3889] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 120.079256][ T3889] syscall_exit_to_user_mode+0x9/0x60 [ 120.084632][ T3889] do_syscall_64+0x42/0xb0 [ 120.089055][ T3889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.095089][ T3889] RIP: 0033:0x7fc6cd2767a3 [ 120.099739][ T3889] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 120.119431][ T3889] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 120.127843][ T3889] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 120.135819][ T3889] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 120.143888][ T3889] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 120.151875][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 120.159847][ T3889] R13: 00000000000f4240 R14: 000000000001d34a R15: 00007ffdc49a5924 [ 120.167840][ T3889] [pid 3889] close(3) = 0 [pid 3889] close(4) = 0 [pid 3889] close(5) = -1 EBADF (Bad file descriptor) [pid 3889] close(6) = -1 EBADF (Bad file descriptor) [pid 3889] close(7) = -1 EBADF (Bad file descriptor) [pid 3889] close(8) = -1 EBADF (Bad file descriptor) [pid 3889] close(9) = -1 EBADF (Bad file descriptor) [pid 3889] close(10) = -1 EBADF (Bad file descriptor) [pid 3889] close(11) = -1 EBADF (Bad file descriptor) [pid 3889] close(12) = -1 EBADF (Bad file descriptor) [pid 3889] close(13) = -1 EBADF (Bad file descriptor) [pid 3889] close(14) = -1 EBADF (Bad file descriptor) [pid 3889] close(15) = -1 EBADF (Bad file descriptor) [pid 3889] close(16) = -1 EBADF (Bad file descriptor) [pid 3889] close(17) = -1 EBADF (Bad file descriptor) [pid 3889] close(18) = -1 EBADF (Bad file descriptor) [pid 3889] close(19) = -1 EBADF (Bad file descriptor) [pid 3889] close(20) = -1 EBADF (Bad file descriptor) [pid 3889] close(21) = -1 EBADF (Bad file descriptor) [pid 3889] close(22) = -1 EBADF (Bad file descriptor) [pid 3889] close(23) = -1 EBADF (Bad file descriptor) [pid 3889] close(24) = -1 EBADF (Bad file descriptor) [pid 3889] close(25) = -1 EBADF (Bad file descriptor) [pid 3889] close(26) = -1 EBADF (Bad file descriptor) [pid 3889] close(27) = -1 EBADF (Bad file descriptor) [pid 3889] close(28) = -1 EBADF (Bad file descriptor) [pid 3889] close(29) = -1 EBADF (Bad file descriptor) [pid 3889] exit_group(0) = ? [pid 3889] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3890 attached , child_tidptr=0x5555570bd5d0) = 255 [pid 3890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3890] setpgid(0, 0) = 0 [pid 3890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3890] write(3, "1000", 4) = 4 [pid 3890] close(3) = 0 [pid 3890] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3890] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3890] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3890] write(4, "5", 1) = 1 [pid 3890] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 120.253856][ T3890] FAULT_INJECTION: forcing a failure. [ 120.253856][ T3890] name failslab, interval 1, probability 0, space 0, times 0 [ 120.266504][ T3890] CPU: 0 PID: 3890 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 120.276905][ T3890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.286959][ T3890] Call Trace: [ 120.290229][ T3890] [ 120.293138][ T3890] dump_stack_lvl+0xcd/0x134 [ 120.297715][ T3890] should_fail.cold+0x5/0xa [ 120.302201][ T3890] should_failslab+0x5/0x10 [ 120.306689][ T3890] kmem_cache_alloc_trace+0x60/0x3f0 [ 120.311964][ T3890] ? ref_tracker_alloc+0x14c/0x550 [ 120.317068][ T3890] ref_tracker_alloc+0x14c/0x550 [ 120.321994][ T3890] ? ref_tracker_free+0x6b0/0x6b0 [ 120.327005][ T3890] ? lock_release+0x720/0x720 [ 120.331672][ T3890] ? do_raw_spin_lock+0x120/0x2a0 [ 120.336709][ T3890] ? rwlock_bug.part.0+0x90/0x90 [ 120.341639][ T3890] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 120.347015][ T3890] linkwatch_fire_event+0x202/0x260 [ 120.352221][ T3890] netif_carrier_off+0x96/0xb0 [ 120.356977][ T3890] __tun_detach+0xfe7/0x13e0 [ 120.361569][ T3890] tun_chr_close+0xc4/0x180 [ 120.366064][ T3890] __fput+0x277/0x9d0 [ 120.370034][ T3890] ? __tun_detach+0x13e0/0x13e0 [ 120.374895][ T3890] task_work_run+0xdd/0x1a0 [ 120.379408][ T3890] ptrace_notify+0x114/0x140 [ 120.383993][ T3890] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 120.390280][ T3890] syscall_exit_to_user_mode+0x9/0x60 [ 120.395665][ T3890] do_syscall_64+0x42/0xb0 [ 120.400083][ T3890] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.405971][ T3890] RIP: 0033:0x7fc6cd2767a3 [ 120.410402][ T3890] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 120.430013][ T3890] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 120.438442][ T3890] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 120.446585][ T3890] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3890] close(3) = 0 [pid 3890] close(4) = 0 [pid 3890] close(5) = -1 EBADF (Bad file descriptor) [pid 3890] close(6) = -1 EBADF (Bad file descriptor) [pid 3890] close(7) = -1 EBADF (Bad file descriptor) [pid 3890] close(8) = -1 EBADF (Bad file descriptor) [pid 3890] close(9) = -1 EBADF (Bad file descriptor) [pid 3890] close(10) = -1 EBADF (Bad file descriptor) [pid 3890] close(11) = -1 EBADF (Bad file descriptor) [pid 3890] close(12) = -1 EBADF (Bad file descriptor) [pid 3890] close(13) = -1 EBADF (Bad file descriptor) [pid 3890] close(14) = -1 EBADF (Bad file descriptor) [ 120.454566][ T3890] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 120.462535][ T3890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 120.470509][ T3890] R13: 00000000000f4240 R14: 000000000001d46c R15: 00007ffdc49a5924 [ 120.478495][ T3890] [pid 3890] close(15) = -1 EBADF (Bad file descriptor) [pid 3890] close(16) = -1 EBADF (Bad file descriptor) [pid 3890] close(17) = -1 EBADF (Bad file descriptor) [pid 3890] close(18) = -1 EBADF (Bad file descriptor) [pid 3890] close(19) = -1 EBADF (Bad file descriptor) [pid 3890] close(20) = -1 EBADF (Bad file descriptor) [pid 3890] close(21) = -1 EBADF (Bad file descriptor) [pid 3890] close(22) = -1 EBADF (Bad file descriptor) [pid 3890] close(23) = -1 EBADF (Bad file descriptor) [pid 3890] close(24) = -1 EBADF (Bad file descriptor) [pid 3890] close(25) = -1 EBADF (Bad file descriptor) [pid 3890] close(26) = -1 EBADF (Bad file descriptor) [pid 3890] close(27) = -1 EBADF (Bad file descriptor) [pid 3890] close(28) = -1 EBADF (Bad file descriptor) [pid 3890] close(29) = -1 EBADF (Bad file descriptor) [pid 3890] exit_group(0) = ? [pid 3890] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=255, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 256 ./strace-static-x86_64: Process 3891 attached [pid 3891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3891] setpgid(0, 0) = 0 [pid 3891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3891] write(3, "1000", 4) = 4 [pid 3891] close(3) = 0 [pid 3891] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3891] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3891] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3891] write(4, "5", 1) = 1 [pid 3891] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 120.554965][ T3891] FAULT_INJECTION: forcing a failure. [ 120.554965][ T3891] name failslab, interval 1, probability 0, space 0, times 0 [ 120.568050][ T3891] CPU: 0 PID: 3891 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 120.578194][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.588250][ T3891] Call Trace: [ 120.591514][ T3891] [ 120.594426][ T3891] dump_stack_lvl+0xcd/0x134 [ 120.599094][ T3891] should_fail.cold+0x5/0xa [ 120.603583][ T3891] should_failslab+0x5/0x10 [ 120.608070][ T3891] kmem_cache_alloc_trace+0x60/0x3f0 [ 120.613348][ T3891] ? ref_tracker_alloc+0x14c/0x550 [ 120.618456][ T3891] ref_tracker_alloc+0x14c/0x550 [ 120.623394][ T3891] ? ref_tracker_free+0x6b0/0x6b0 [ 120.628412][ T3891] ? lock_release+0x720/0x720 [ 120.633098][ T3891] ? do_raw_spin_lock+0x120/0x2a0 [ 120.638122][ T3891] ? rwlock_bug.part.0+0x90/0x90 [ 120.643063][ T3891] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 120.648439][ T3891] linkwatch_fire_event+0x202/0x260 [ 120.653660][ T3891] netif_carrier_off+0x96/0xb0 [ 120.658421][ T3891] __tun_detach+0xfe7/0x13e0 [ 120.663011][ T3891] tun_chr_close+0xc4/0x180 [ 120.667511][ T3891] __fput+0x277/0x9d0 [ 120.671481][ T3891] ? __tun_detach+0x13e0/0x13e0 [ 120.676342][ T3891] task_work_run+0xdd/0x1a0 [ 120.680839][ T3891] ptrace_notify+0x114/0x140 [ 120.685421][ T3891] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 120.691743][ T3891] syscall_exit_to_user_mode+0x9/0x60 [ 120.697101][ T3891] do_syscall_64+0x42/0xb0 [ 120.701515][ T3891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.707396][ T3891] RIP: 0033:0x7fc6cd2767a3 [ 120.711818][ T3891] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 120.731531][ T3891] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 120.739947][ T3891] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 120.747915][ T3891] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3891] close(3) = 0 [pid 3891] close(4) = 0 [pid 3891] close(5) = -1 EBADF (Bad file descriptor) [pid 3891] close(6) = -1 EBADF (Bad file descriptor) [pid 3891] close(7) = -1 EBADF (Bad file descriptor) [pid 3891] close(8) = -1 EBADF (Bad file descriptor) [pid 3891] close(9) = -1 EBADF (Bad file descriptor) [pid 3891] close(10) = -1 EBADF (Bad file descriptor) [pid 3891] close(11) = -1 EBADF (Bad file descriptor) [pid 3891] close(12) = -1 EBADF (Bad file descriptor) [pid 3891] close(13) = -1 EBADF (Bad file descriptor) [pid 3891] close(14) = -1 EBADF (Bad file descriptor) [pid 3891] close(15) = -1 EBADF (Bad file descriptor) [pid 3891] close(16) = -1 EBADF (Bad file descriptor) [pid 3891] close(17) = -1 EBADF (Bad file descriptor) [pid 3891] close(18) = -1 EBADF (Bad file descriptor) [pid 3891] close(19) = -1 EBADF (Bad file descriptor) [pid 3891] close(20) = -1 EBADF (Bad file descriptor) [pid 3891] close(21) = -1 EBADF (Bad file descriptor) [pid 3891] close(22) = -1 EBADF (Bad file descriptor) [pid 3891] close(23) = -1 EBADF (Bad file descriptor) [pid 3891] close(24) = -1 EBADF (Bad file descriptor) [pid 3891] close(25) = -1 EBADF (Bad file descriptor) [pid 3891] close(26) = -1 EBADF (Bad file descriptor) [pid 3891] close(27) = -1 EBADF (Bad file descriptor) [pid 3891] close(28) = -1 EBADF (Bad file descriptor) [pid 3891] close(29) = -1 EBADF (Bad file descriptor) [pid 3891] exit_group(0) = ? [pid 3891] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=256, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 257 ./strace-static-x86_64: Process 3892 attached [ 120.755900][ T3891] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 120.763860][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 120.771818][ T3891] R13: 00000000000f4240 R14: 000000000001d5a2 R15: 00007ffdc49a5924 [ 120.779790][ T3891] [pid 3892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3892] setpgid(0, 0) = 0 [pid 3892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3892] write(3, "1000", 4) = 4 [pid 3892] close(3) = 0 [pid 3892] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3892] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3892] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3892] write(4, "5", 1) = 1 [pid 3892] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 120.844061][ T3892] FAULT_INJECTION: forcing a failure. [ 120.844061][ T3892] name failslab, interval 1, probability 0, space 0, times 0 [ 120.857543][ T3892] CPU: 1 PID: 3892 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 120.867709][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.877860][ T3892] Call Trace: [ 120.881144][ T3892] [ 120.884057][ T3892] dump_stack_lvl+0xcd/0x134 [ 120.888635][ T3892] should_fail.cold+0x5/0xa [ 120.893130][ T3892] should_failslab+0x5/0x10 [ 120.897619][ T3892] kmem_cache_alloc_trace+0x60/0x3f0 [ 120.902903][ T3892] ? ref_tracker_alloc+0x14c/0x550 [ 120.908014][ T3892] ref_tracker_alloc+0x14c/0x550 [ 120.912935][ T3892] ? ref_tracker_free+0x6b0/0x6b0 [ 120.917947][ T3892] ? lock_release+0x720/0x720 [ 120.922621][ T3892] ? do_raw_spin_lock+0x120/0x2a0 [ 120.927647][ T3892] ? rwlock_bug.part.0+0x90/0x90 [ 120.932585][ T3892] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 120.937966][ T3892] linkwatch_fire_event+0x202/0x260 [ 120.943180][ T3892] netif_carrier_off+0x96/0xb0 [ 120.947960][ T3892] __tun_detach+0xfe7/0x13e0 [ 120.952556][ T3892] tun_chr_close+0xc4/0x180 [ 120.957049][ T3892] __fput+0x277/0x9d0 [ 120.961199][ T3892] ? __tun_detach+0x13e0/0x13e0 [ 120.966050][ T3892] task_work_run+0xdd/0x1a0 [ 120.970547][ T3892] ptrace_notify+0x114/0x140 [ 120.975124][ T3892] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 120.981355][ T3892] syscall_exit_to_user_mode+0x9/0x60 [ 120.986740][ T3892] do_syscall_64+0x42/0xb0 [ 120.991161][ T3892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.997071][ T3892] RIP: 0033:0x7fc6cd2767a3 [ 121.001477][ T3892] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 121.021084][ T3892] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.029500][ T3892] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3892] close(3) = 0 [pid 3892] close(4) = 0 [pid 3892] close(5) = -1 EBADF (Bad file descriptor) [pid 3892] close(6) = -1 EBADF (Bad file descriptor) [pid 3892] close(7) = -1 EBADF (Bad file descriptor) [pid 3892] close(8) = -1 EBADF (Bad file descriptor) [pid 3892] close(9) = -1 EBADF (Bad file descriptor) [pid 3892] close(10) = -1 EBADF (Bad file descriptor) [pid 3892] close(11) = -1 EBADF (Bad file descriptor) [pid 3892] close(12) = -1 EBADF (Bad file descriptor) [pid 3892] close(13) = -1 EBADF (Bad file descriptor) [pid 3892] close(14) = -1 EBADF (Bad file descriptor) [pid 3892] close(15) = -1 EBADF (Bad file descriptor) [pid 3892] close(16) = -1 EBADF (Bad file descriptor) [pid 3892] close(17) = -1 EBADF (Bad file descriptor) [pid 3892] close(18) = -1 EBADF (Bad file descriptor) [pid 3892] close(19) = -1 EBADF (Bad file descriptor) [pid 3892] close(20) = -1 EBADF (Bad file descriptor) [pid 3892] close(21) = -1 EBADF (Bad file descriptor) [pid 3892] close(22) = -1 EBADF (Bad file descriptor) [pid 3892] close(23) = -1 EBADF (Bad file descriptor) [pid 3892] close(24) = -1 EBADF (Bad file descriptor) [pid 3892] close(25) = -1 EBADF (Bad file descriptor) [pid 3892] close(26) = -1 EBADF (Bad file descriptor) [pid 3892] close(27) = -1 EBADF (Bad file descriptor) [pid 3892] close(28) = -1 EBADF (Bad file descriptor) [pid 3892] close(29) = -1 EBADF (Bad file descriptor) [pid 3892] exit_group(0) = ? [pid 3892] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3893 attached [pid 3893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3893] setpgid(0, 0) = 0 [pid 3893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3893] write(3, "1000", 4) = 4 [pid 3893] close(3) = 0 [pid 3893] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 121.037565][ T3892] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 121.045542][ T3892] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 121.053663][ T3892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 121.062122][ T3892] R13: 00000000000f4240 R14: 000000000001d6cf R15: 00007ffdc49a5924 [ 121.070088][ T3892] [pid 3893] ioctl(3, TUNSETIFF, 0x20000000 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 258 [pid 3893] <... ioctl resumed>) = 0 [pid 3893] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3893] write(4, "5", 1) = 1 [pid 3893] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 121.130335][ T3893] FAULT_INJECTION: forcing a failure. [ 121.130335][ T3893] name failslab, interval 1, probability 0, space 0, times 0 [ 121.142965][ T3893] CPU: 0 PID: 3893 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 121.153109][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.163154][ T3893] Call Trace: [ 121.166419][ T3893] [ 121.169336][ T3893] dump_stack_lvl+0xcd/0x134 [ 121.173915][ T3893] should_fail.cold+0x5/0xa [ 121.178487][ T3893] should_failslab+0x5/0x10 [ 121.182977][ T3893] kmem_cache_alloc_trace+0x60/0x3f0 [ 121.188243][ T3893] ? ref_tracker_alloc+0x14c/0x550 [ 121.193341][ T3893] ref_tracker_alloc+0x14c/0x550 [ 121.198259][ T3893] ? ref_tracker_free+0x6b0/0x6b0 [ 121.203264][ T3893] ? lock_release+0x720/0x720 [ 121.207926][ T3893] ? do_raw_spin_lock+0x120/0x2a0 [ 121.212934][ T3893] ? rwlock_bug.part.0+0x90/0x90 [ 121.217869][ T3893] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 121.223233][ T3893] linkwatch_fire_event+0x202/0x260 [ 121.228436][ T3893] netif_carrier_off+0x96/0xb0 [ 121.233181][ T3893] __tun_detach+0xfe7/0x13e0 [ 121.237756][ T3893] tun_chr_close+0xc4/0x180 [ 121.242238][ T3893] __fput+0x277/0x9d0 [ 121.246198][ T3893] ? __tun_detach+0x13e0/0x13e0 [ 121.251029][ T3893] task_work_run+0xdd/0x1a0 [ 121.255513][ T3893] ptrace_notify+0x114/0x140 [ 121.260081][ T3893] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 121.266302][ T3893] syscall_exit_to_user_mode+0x9/0x60 [ 121.271658][ T3893] do_syscall_64+0x42/0xb0 [ 121.276058][ T3893] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 121.282034][ T3893] RIP: 0033:0x7fc6cd2767a3 [ 121.286433][ T3893] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 121.306128][ T3893] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.314527][ T3893] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 121.322481][ T3893] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3893] close(3) = 0 [pid 3893] close(4) = 0 [pid 3893] close(5) = -1 EBADF (Bad file descriptor) [pid 3893] close(6) = -1 EBADF (Bad file descriptor) [pid 3893] close(7) = -1 EBADF (Bad file descriptor) [pid 3893] close(8) = -1 EBADF (Bad file descriptor) [pid 3893] close(9) = -1 EBADF (Bad file descriptor) [pid 3893] close(10) = -1 EBADF (Bad file descriptor) [pid 3893] close(11) = -1 EBADF (Bad file descriptor) [pid 3893] close(12) = -1 EBADF (Bad file descriptor) [pid 3893] close(13) = -1 EBADF (Bad file descriptor) [pid 3893] close(14) = -1 EBADF (Bad file descriptor) [pid 3893] close(15) = -1 EBADF (Bad file descriptor) [pid 3893] close(16) = -1 EBADF (Bad file descriptor) [pid 3893] close(17) = -1 EBADF (Bad file descriptor) [pid 3893] close(18) = -1 EBADF (Bad file descriptor) [pid 3893] close(19) = -1 EBADF (Bad file descriptor) [pid 3893] close(20) = -1 EBADF (Bad file descriptor) [pid 3893] close(21) = -1 EBADF (Bad file descriptor) [pid 3893] close(22) = -1 EBADF (Bad file descriptor) [pid 3893] close(23) = -1 EBADF (Bad file descriptor) [pid 3893] close(24) = -1 EBADF (Bad file descriptor) [pid 3893] close(25) = -1 EBADF (Bad file descriptor) [pid 3893] close(26) = -1 EBADF (Bad file descriptor) [pid 3893] close(27) = -1 EBADF (Bad file descriptor) [pid 3893] close(28) = -1 EBADF (Bad file descriptor) [pid 3893] close(29) = -1 EBADF (Bad file descriptor) [pid 3893] exit_group(0) = ? [pid 3893] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=258, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3894 attached , child_tidptr=0x5555570bd5d0) = 259 [pid 3894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3894] setpgid(0, 0) = 0 [pid 3894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3894] write(3, "1000", 4) = 4 [pid 3894] close(3) = 0 [pid 3894] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3894] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3894] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3894] write(4, "5", 1) = 1 [pid 3894] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 121.330436][ T3893] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 121.338388][ T3893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 121.346341][ T3893] R13: 00000000000f4240 R14: 000000000001d7ee R15: 00007ffdc49a5924 [ 121.354394][ T3893] [ 121.411670][ T3894] FAULT_INJECTION: forcing a failure. [ 121.411670][ T3894] name failslab, interval 1, probability 0, space 0, times 0 [ 121.424297][ T3894] CPU: 0 PID: 3894 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 121.434446][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.444481][ T3894] Call Trace: [ 121.447740][ T3894] [ 121.450736][ T3894] dump_stack_lvl+0xcd/0x134 [ 121.455332][ T3894] should_fail.cold+0x5/0xa [ 121.459814][ T3894] should_failslab+0x5/0x10 [ 121.464291][ T3894] kmem_cache_alloc_trace+0x60/0x3f0 [ 121.469645][ T3894] ? ref_tracker_alloc+0x14c/0x550 [ 121.474753][ T3894] ref_tracker_alloc+0x14c/0x550 [ 121.479679][ T3894] ? ref_tracker_free+0x6b0/0x6b0 [ 121.484690][ T3894] ? lock_release+0x720/0x720 [ 121.489361][ T3894] ? do_raw_spin_lock+0x120/0x2a0 [ 121.494404][ T3894] ? rwlock_bug.part.0+0x90/0x90 [ 121.499333][ T3894] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 121.504719][ T3894] linkwatch_fire_event+0x202/0x260 [ 121.509917][ T3894] netif_carrier_off+0x96/0xb0 [ 121.514685][ T3894] __tun_detach+0xfe7/0x13e0 [ 121.519277][ T3894] tun_chr_close+0xc4/0x180 [ 121.523784][ T3894] __fput+0x277/0x9d0 [ 121.527753][ T3894] ? __tun_detach+0x13e0/0x13e0 [ 121.532593][ T3894] task_work_run+0xdd/0x1a0 [ 121.537089][ T3894] ptrace_notify+0x114/0x140 [ 121.541685][ T3894] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 121.547914][ T3894] syscall_exit_to_user_mode+0x9/0x60 [ 121.553291][ T3894] do_syscall_64+0x42/0xb0 [ 121.557697][ T3894] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 121.563580][ T3894] RIP: 0033:0x7fc6cd2767a3 [ 121.567981][ T3894] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 121.587577][ T3894] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.595993][ T3894] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 121.603950][ T3894] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 121.611908][ T3894] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 121.619864][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 121.627821][ T3894] R13: 00000000000f4240 R14: 000000000001d910 R15: 00007ffdc49a5924 [ 121.635791][ T3894] [pid 3894] close(3) = 0 [pid 3894] close(4) = 0 [pid 3894] close(5) = -1 EBADF (Bad file descriptor) [pid 3894] close(6) = -1 EBADF (Bad file descriptor) [pid 3894] close(7) = -1 EBADF (Bad file descriptor) [pid 3894] close(8) = -1 EBADF (Bad file descriptor) [pid 3894] close(9) = -1 EBADF (Bad file descriptor) [pid 3894] close(10) = -1 EBADF (Bad file descriptor) [pid 3894] close(11) = -1 EBADF (Bad file descriptor) [pid 3894] close(12) = -1 EBADF (Bad file descriptor) [pid 3894] close(13) = -1 EBADF (Bad file descriptor) [pid 3894] close(14) = -1 EBADF (Bad file descriptor) [pid 3894] close(15) = -1 EBADF (Bad file descriptor) [pid 3894] close(16) = -1 EBADF (Bad file descriptor) [pid 3894] close(17) = -1 EBADF (Bad file descriptor) [pid 3894] close(18) = -1 EBADF (Bad file descriptor) [pid 3894] close(19) = -1 EBADF (Bad file descriptor) [pid 3894] close(20) = -1 EBADF (Bad file descriptor) [pid 3894] close(21) = -1 EBADF (Bad file descriptor) [pid 3894] close(22) = -1 EBADF (Bad file descriptor) [pid 3894] close(23) = -1 EBADF (Bad file descriptor) [pid 3894] close(24) = -1 EBADF (Bad file descriptor) [pid 3894] close(25) = -1 EBADF (Bad file descriptor) [pid 3894] close(26) = -1 EBADF (Bad file descriptor) [pid 3894] close(27) = -1 EBADF (Bad file descriptor) [pid 3894] close(28) = -1 EBADF (Bad file descriptor) [pid 3894] close(29) = -1 EBADF (Bad file descriptor) [pid 3894] exit_group(0) = ? [pid 3894] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=259, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3895 attached [pid 3895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3895] setpgid(0, 0) = 0 [pid 3895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 260 [pid 3895] write(3, "1000", 4) = 4 [pid 3895] close(3) = 0 [pid 3895] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3895] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3895] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3895] write(4, "5", 1) = 1 [pid 3895] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 121.717407][ T3895] FAULT_INJECTION: forcing a failure. [ 121.717407][ T3895] name failslab, interval 1, probability 0, space 0, times 0 [ 121.730030][ T3895] CPU: 0 PID: 3895 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 121.740171][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.750227][ T3895] Call Trace: [ 121.753498][ T3895] [ 121.756426][ T3895] dump_stack_lvl+0xcd/0x134 [ 121.761097][ T3895] should_fail.cold+0x5/0xa [ 121.765589][ T3895] should_failslab+0x5/0x10 [ 121.770087][ T3895] kmem_cache_alloc_trace+0x60/0x3f0 [ 121.775362][ T3895] ? ref_tracker_alloc+0x14c/0x550 [ 121.780463][ T3895] ref_tracker_alloc+0x14c/0x550 [ 121.785391][ T3895] ? ref_tracker_free+0x6b0/0x6b0 [ 121.790403][ T3895] ? lock_release+0x720/0x720 [ 121.795069][ T3895] ? do_raw_spin_lock+0x120/0x2a0 [ 121.800086][ T3895] ? rwlock_bug.part.0+0x90/0x90 [ 121.805020][ T3895] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 121.810392][ T3895] linkwatch_fire_event+0x202/0x260 [ 121.815584][ T3895] netif_carrier_off+0x96/0xb0 [ 121.820345][ T3895] __tun_detach+0xfe7/0x13e0 [ 121.824932][ T3895] tun_chr_close+0xc4/0x180 [ 121.829419][ T3895] __fput+0x277/0x9d0 [ 121.833388][ T3895] ? __tun_detach+0x13e0/0x13e0 [ 121.838228][ T3895] task_work_run+0xdd/0x1a0 [ 121.842723][ T3895] ptrace_notify+0x114/0x140 [ 121.847302][ T3895] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 121.853532][ T3895] syscall_exit_to_user_mode+0x9/0x60 [ 121.858895][ T3895] do_syscall_64+0x42/0xb0 [ 121.863307][ T3895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 121.869275][ T3895] RIP: 0033:0x7fc6cd2767a3 [ 121.873676][ T3895] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 121.893274][ T3895] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.901685][ T3895] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 121.909645][ T3895] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3895] close(3) = 0 [pid 3895] close(4) = 0 [pid 3895] close(5) = -1 EBADF (Bad file descriptor) [pid 3895] close(6) = -1 EBADF (Bad file descriptor) [ 121.917604][ T3895] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 121.925668][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 121.933628][ T3895] R13: 00000000000f4240 R14: 000000000001da28 R15: 00007ffdc49a5924 [ 121.941607][ T3895] [pid 3895] close(7) = -1 EBADF (Bad file descriptor) [pid 3895] close(8) = -1 EBADF (Bad file descriptor) [pid 3895] close(9) = -1 EBADF (Bad file descriptor) [pid 3895] close(10) = -1 EBADF (Bad file descriptor) [pid 3895] close(11) = -1 EBADF (Bad file descriptor) [pid 3895] close(12) = -1 EBADF (Bad file descriptor) [pid 3895] close(13) = -1 EBADF (Bad file descriptor) [pid 3895] close(14) = -1 EBADF (Bad file descriptor) [pid 3895] close(15) = -1 EBADF (Bad file descriptor) [pid 3895] close(16) = -1 EBADF (Bad file descriptor) [pid 3895] close(17) = -1 EBADF (Bad file descriptor) [pid 3895] close(18) = -1 EBADF (Bad file descriptor) [pid 3895] close(19) = -1 EBADF (Bad file descriptor) [pid 3895] close(20) = -1 EBADF (Bad file descriptor) [pid 3895] close(21) = -1 EBADF (Bad file descriptor) [pid 3895] close(22) = -1 EBADF (Bad file descriptor) [pid 3895] close(23) = -1 EBADF (Bad file descriptor) [pid 3895] close(24) = -1 EBADF (Bad file descriptor) [pid 3895] close(25) = -1 EBADF (Bad file descriptor) [pid 3895] close(26) = -1 EBADF (Bad file descriptor) [pid 3895] close(27) = -1 EBADF (Bad file descriptor) [pid 3895] close(28) = -1 EBADF (Bad file descriptor) [pid 3895] close(29) = -1 EBADF (Bad file descriptor) [pid 3895] exit_group(0) = ? [pid 3895] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 261 ./strace-static-x86_64: Process 3896 attached [pid 3896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3896] setpgid(0, 0) = 0 [pid 3896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3896] write(3, "1000", 4) = 4 [pid 3896] close(3) = 0 [pid 3896] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3896] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3896] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3896] write(4, "5", 1) = 1 [ 122.020369][ T3896] FAULT_INJECTION: forcing a failure. [ 122.020369][ T3896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.033623][ T3896] CPU: 0 PID: 3896 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 122.043754][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.053877][ T3896] Call Trace: [ 122.057151][ T3896] [ 122.060060][ T3896] dump_stack_lvl+0xcd/0x134 [ 122.064658][ T3896] should_fail.cold+0x5/0xa [ 122.069150][ T3896] prepare_alloc_pages+0x17b/0x570 [ 122.074255][ T3896] __alloc_pages+0x12f/0x500 [ 122.078833][ T3896] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 122.085614][ T3896] ? ___slab_alloc+0x47e/0xf20 [ 122.090462][ T3896] alloc_pages+0x1aa/0x310 [ 122.094859][ T3896] ? mark_held_locks+0x9f/0xe0 [ 122.099607][ T3896] allocate_slab+0x26c/0x3c0 [ 122.104181][ T3896] ___slab_alloc+0x8df/0xf20 [ 122.108773][ T3896] ? napi_skb_cache_get+0xeb/0x170 [ 122.113873][ T3896] ? mark_held_locks+0x9f/0xe0 [ 122.118629][ T3896] kmem_cache_alloc_bulk+0x21c/0x720 [ 122.123901][ T3896] napi_skb_cache_get+0xeb/0x170 [ 122.128841][ T3896] __alloc_skb+0x9b/0x340 [ 122.133186][ T3896] ? __lock_acquire+0xbca/0x56c0 [ 122.138128][ T3896] __napi_alloc_skb+0x70/0x310 [ 122.142884][ T3896] napi_get_frags+0x5e/0x140 [ 122.147461][ T3896] tun_get_user+0xa07/0x3b00 [ 122.152050][ T3896] ? tun_build_skb+0x1170/0x1170 [ 122.156978][ T3896] ? lock_downgrade+0x6e0/0x6e0 [ 122.161824][ T3896] ? find_held_lock+0x2d/0x110 [ 122.166590][ T3896] tun_chr_write_iter+0xdb/0x200 [ 122.171522][ T3896] do_iter_readv_writev+0x3d1/0x640 [ 122.176712][ T3896] ? new_sync_write+0x560/0x560 [ 122.181558][ T3896] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 122.187802][ T3896] ? security_file_permission+0xab/0xd0 [ 122.193385][ T3896] do_iter_write+0x182/0x700 [ 122.197984][ T3896] ? import_iovec+0x10c/0x150 [ 122.202659][ T3896] vfs_writev+0x1aa/0x630 [ 122.206999][ T3896] ? vfs_iter_write+0xa0/0xa0 [ 122.211667][ T3896] ? do_raw_spin_lock+0x120/0x2a0 [ 122.216795][ T3896] ? rwlock_bug.part.0+0x90/0x90 [ 122.221746][ T3896] ? _raw_spin_lock_irq+0x41/0x50 [ 122.226768][ T3896] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 122.233003][ T3896] ? find_held_lock+0x2d/0x110 [ 122.237761][ T3896] ? ptrace_notify+0xfa/0x140 [ 122.242534][ T3896] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 122.248848][ T3896] ? __fget_light+0x20f/0x270 [ 122.253523][ T3896] do_writev+0x133/0x2f0 [ 122.257759][ T3896] ? vfs_writev+0x630/0x630 [ 122.262522][ T3896] ? lockdep_hardirqs_on+0x79/0x100 [ 122.267725][ T3896] ? _raw_spin_unlock_irq+0x2a/0x40 [ 122.272911][ T3896] ? ptrace_notify+0xfa/0x140 [ 122.277582][ T3896] do_syscall_64+0x35/0xb0 [ 122.281993][ T3896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.287876][ T3896] RIP: 0033:0x7fc6cd2b4c39 [ 122.292274][ T3896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 122.311868][ T3896] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3896] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 122.320279][ T3896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 122.328250][ T3896] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 122.336225][ T3896] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 122.344211][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 122.352199][ T3896] R13: 00000000000f4240 R14: 000000000001db5b R15: 00007ffdc49a5924 [ 122.360195][ T3896] [pid 3896] close(3) = 0 [pid 3896] close(4) = 0 [pid 3896] close(5) = -1 EBADF (Bad file descriptor) [pid 3896] close(6) = -1 EBADF (Bad file descriptor) [pid 3896] close(7) = -1 EBADF (Bad file descriptor) [pid 3896] close(8) = -1 EBADF (Bad file descriptor) [pid 3896] close(9) = -1 EBADF (Bad file descriptor) [pid 3896] close(10) = -1 EBADF (Bad file descriptor) [pid 3896] close(11) = -1 EBADF (Bad file descriptor) [pid 3896] close(12) = -1 EBADF (Bad file descriptor) [pid 3896] close(13) = -1 EBADF (Bad file descriptor) [pid 3896] close(14) = -1 EBADF (Bad file descriptor) [pid 3896] close(15) = -1 EBADF (Bad file descriptor) [pid 3896] close(16) = -1 EBADF (Bad file descriptor) [pid 3896] close(17) = -1 EBADF (Bad file descriptor) [pid 3896] close(18) = -1 EBADF (Bad file descriptor) [pid 3896] close(19) = -1 EBADF (Bad file descriptor) [pid 3896] close(20) = -1 EBADF (Bad file descriptor) [pid 3896] close(21) = -1 EBADF (Bad file descriptor) [pid 3896] close(22) = -1 EBADF (Bad file descriptor) [pid 3896] close(23) = -1 EBADF (Bad file descriptor) [pid 3896] close(24) = -1 EBADF (Bad file descriptor) [pid 3896] close(25) = -1 EBADF (Bad file descriptor) [pid 3896] close(26) = -1 EBADF (Bad file descriptor) [pid 3896] close(27) = -1 EBADF (Bad file descriptor) [pid 3896] close(28) = -1 EBADF (Bad file descriptor) [pid 3896] close(29) = -1 EBADF (Bad file descriptor) [pid 3896] exit_group(0) = ? [pid 3896] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=261, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 262 ./strace-static-x86_64: Process 3897 attached [pid 3897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3897] setpgid(0, 0) = 0 [pid 3897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3897] write(3, "1000", 4) = 4 [pid 3897] close(3) = 0 [pid 3897] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3897] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3897] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3897] write(4, "5", 1) = 1 [pid 3897] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 122.426727][ T3897] FAULT_INJECTION: forcing a failure. [ 122.426727][ T3897] name failslab, interval 1, probability 0, space 0, times 0 [ 122.439564][ T3897] CPU: 1 PID: 3897 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 122.449737][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.459876][ T3897] Call Trace: [ 122.463151][ T3897] [ 122.466077][ T3897] dump_stack_lvl+0xcd/0x134 [ 122.470691][ T3897] should_fail.cold+0x5/0xa [ 122.475226][ T3897] should_failslab+0x5/0x10 [ 122.479740][ T3897] kmem_cache_alloc_trace+0x60/0x3f0 [ 122.485128][ T3897] ? ref_tracker_alloc+0x14c/0x550 [ 122.490245][ T3897] ref_tracker_alloc+0x14c/0x550 [ 122.495200][ T3897] ? ref_tracker_free+0x6b0/0x6b0 [ 122.500231][ T3897] ? lock_release+0x720/0x720 [ 122.504924][ T3897] ? do_raw_spin_lock+0x120/0x2a0 [ 122.509978][ T3897] ? rwlock_bug.part.0+0x90/0x90 [ 122.514933][ T3897] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 122.520347][ T3897] linkwatch_fire_event+0x202/0x260 [ 122.525562][ T3897] netif_carrier_off+0x96/0xb0 [ 122.530355][ T3897] __tun_detach+0xfe7/0x13e0 [ 122.534977][ T3897] tun_chr_close+0xc4/0x180 [ 122.539493][ T3897] __fput+0x277/0x9d0 [ 122.543483][ T3897] ? __tun_detach+0x13e0/0x13e0 [ 122.548342][ T3897] task_work_run+0xdd/0x1a0 [ 122.552864][ T3897] ptrace_notify+0x114/0x140 [ 122.557467][ T3897] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 122.563723][ T3897] syscall_exit_to_user_mode+0x9/0x60 [ 122.569125][ T3897] do_syscall_64+0x42/0xb0 [ 122.573570][ T3897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.579556][ T3897] RIP: 0033:0x7fc6cd2767a3 [ 122.583977][ T3897] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 122.603684][ T3897] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 122.612111][ T3897] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3897] close(3) = 0 [pid 3897] close(4) = 0 [pid 3897] close(5) = -1 EBADF (Bad file descriptor) [pid 3897] close(6) = -1 EBADF (Bad file descriptor) [pid 3897] close(7) = -1 EBADF (Bad file descriptor) [pid 3897] close(8) = -1 EBADF (Bad file descriptor) [pid 3897] close(9) = -1 EBADF (Bad file descriptor) [pid 3897] close(10) = -1 EBADF (Bad file descriptor) [pid 3897] close(11) = -1 EBADF (Bad file descriptor) [ 122.620078][ T3897] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 122.628049][ T3897] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 122.636104][ T3897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 122.644074][ T3897] R13: 00000000000f4240 R14: 000000000001dc8a R15: 00007ffdc49a5924 [ 122.652079][ T3897] [pid 3897] close(12) = -1 EBADF (Bad file descriptor) [pid 3897] close(13) = -1 EBADF (Bad file descriptor) [pid 3897] close(14) = -1 EBADF (Bad file descriptor) [pid 3897] close(15) = -1 EBADF (Bad file descriptor) [pid 3897] close(16) = -1 EBADF (Bad file descriptor) [pid 3897] close(17) = -1 EBADF (Bad file descriptor) [pid 3897] close(18) = -1 EBADF (Bad file descriptor) [pid 3897] close(19) = -1 EBADF (Bad file descriptor) [pid 3897] close(20) = -1 EBADF (Bad file descriptor) [pid 3897] close(21) = -1 EBADF (Bad file descriptor) [pid 3897] close(22) = -1 EBADF (Bad file descriptor) [pid 3897] close(23) = -1 EBADF (Bad file descriptor) [pid 3897] close(24) = -1 EBADF (Bad file descriptor) [pid 3897] close(25) = -1 EBADF (Bad file descriptor) [pid 3897] close(26) = -1 EBADF (Bad file descriptor) [pid 3897] close(27) = -1 EBADF (Bad file descriptor) [pid 3897] close(28) = -1 EBADF (Bad file descriptor) [pid 3897] close(29) = -1 EBADF (Bad file descriptor) [pid 3897] exit_group(0) = ? [pid 3897] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=262, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 263 ./strace-static-x86_64: Process 3898 attached [pid 3898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3898] setpgid(0, 0) = 0 [pid 3898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3898] write(3, "1000", 4) = 4 [pid 3898] close(3) = 0 [pid 3898] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3898] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3898] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3898] write(4, "5", 1) = 1 [pid 3898] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 122.723718][ T3898] FAULT_INJECTION: forcing a failure. [ 122.723718][ T3898] name failslab, interval 1, probability 0, space 0, times 0 [ 122.736594][ T3898] CPU: 1 PID: 3898 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 122.746738][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.756779][ T3898] Call Trace: [ 122.760040][ T3898] [ 122.762963][ T3898] dump_stack_lvl+0xcd/0x134 [ 122.767547][ T3898] should_fail.cold+0x5/0xa [ 122.772042][ T3898] should_failslab+0x5/0x10 [ 122.776533][ T3898] kmem_cache_alloc_trace+0x60/0x3f0 [ 122.781805][ T3898] ? ref_tracker_alloc+0x14c/0x550 [ 122.786906][ T3898] ref_tracker_alloc+0x14c/0x550 [ 122.791831][ T3898] ? ref_tracker_free+0x6b0/0x6b0 [ 122.796837][ T3898] ? lock_release+0x720/0x720 [ 122.801506][ T3898] ? do_raw_spin_lock+0x120/0x2a0 [ 122.806523][ T3898] ? rwlock_bug.part.0+0x90/0x90 [ 122.811452][ T3898] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 122.816930][ T3898] linkwatch_fire_event+0x202/0x260 [ 122.822121][ T3898] netif_carrier_off+0x96/0xb0 [ 122.826873][ T3898] __tun_detach+0xfe7/0x13e0 [ 122.831471][ T3898] tun_chr_close+0xc4/0x180 [ 122.836140][ T3898] __fput+0x277/0x9d0 [ 122.840111][ T3898] ? __tun_detach+0x13e0/0x13e0 [ 122.844957][ T3898] task_work_run+0xdd/0x1a0 [ 122.849459][ T3898] ptrace_notify+0x114/0x140 [ 122.854043][ T3898] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 122.860274][ T3898] syscall_exit_to_user_mode+0x9/0x60 [ 122.865634][ T3898] do_syscall_64+0x42/0xb0 [ 122.870043][ T3898] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.875925][ T3898] RIP: 0033:0x7fc6cd2767a3 [ 122.880323][ T3898] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 122.899916][ T3898] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 122.908316][ T3898] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 122.916271][ T3898] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 122.924239][ T3898] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 122.932212][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 122.940166][ T3898] R13: 00000000000f4240 R14: 000000000001de1b R15: 00007ffdc49a5924 [ 122.948150][ T3898] [pid 3898] close(3) = 0 [pid 3898] close(4) = 0 [pid 3898] close(5) = -1 EBADF (Bad file descriptor) [pid 3898] close(6) = -1 EBADF (Bad file descriptor) [pid 3898] close(7) = -1 EBADF (Bad file descriptor) [pid 3898] close(8) = -1 EBADF (Bad file descriptor) [pid 3898] close(9) = -1 EBADF (Bad file descriptor) [pid 3898] close(10) = -1 EBADF (Bad file descriptor) [pid 3898] close(11) = -1 EBADF (Bad file descriptor) [pid 3898] close(12) = -1 EBADF (Bad file descriptor) [pid 3898] close(13) = -1 EBADF (Bad file descriptor) [pid 3898] close(14) = -1 EBADF (Bad file descriptor) [pid 3898] close(15) = -1 EBADF (Bad file descriptor) [pid 3898] close(16) = -1 EBADF (Bad file descriptor) [pid 3898] close(17) = -1 EBADF (Bad file descriptor) [pid 3898] close(18) = -1 EBADF (Bad file descriptor) [pid 3898] close(19) = -1 EBADF (Bad file descriptor) [pid 3898] close(20) = -1 EBADF (Bad file descriptor) [pid 3898] close(21) = -1 EBADF (Bad file descriptor) [pid 3898] close(22) = -1 EBADF (Bad file descriptor) [pid 3898] close(23) = -1 EBADF (Bad file descriptor) [pid 3898] close(24) = -1 EBADF (Bad file descriptor) [pid 3898] close(25) = -1 EBADF (Bad file descriptor) [pid 3898] close(26) = -1 EBADF (Bad file descriptor) [pid 3898] close(27) = -1 EBADF (Bad file descriptor) [pid 3898] close(28) = -1 EBADF (Bad file descriptor) [pid 3898] close(29) = -1 EBADF (Bad file descriptor) [pid 3898] exit_group(0) = ? [pid 3898] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3899 attached , child_tidptr=0x5555570bd5d0) = 264 [pid 3899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3899] setpgid(0, 0) = 0 [pid 3899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3899] write(3, "1000", 4) = 4 [pid 3899] close(3) = 0 [pid 3899] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3899] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3899] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3899] write(4, "5", 1) = 1 [pid 3899] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 123.041654][ T3899] FAULT_INJECTION: forcing a failure. [ 123.041654][ T3899] name failslab, interval 1, probability 0, space 0, times 0 [ 123.054293][ T3899] CPU: 0 PID: 3899 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 123.064444][ T3899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.074618][ T3899] Call Trace: [ 123.077936][ T3899] [ 123.080859][ T3899] dump_stack_lvl+0xcd/0x134 [ 123.085540][ T3899] should_fail.cold+0x5/0xa [ 123.090063][ T3899] should_failslab+0x5/0x10 [ 123.094569][ T3899] kmem_cache_alloc_trace+0x60/0x3f0 [ 123.099874][ T3899] ? ref_tracker_alloc+0x14c/0x550 [ 123.104991][ T3899] ref_tracker_alloc+0x14c/0x550 [ 123.109933][ T3899] ? ref_tracker_free+0x6b0/0x6b0 [ 123.114959][ T3899] ? lock_release+0x720/0x720 [ 123.119645][ T3899] ? do_raw_spin_lock+0x120/0x2a0 [ 123.124681][ T3899] ? rwlock_bug.part.0+0x90/0x90 [ 123.129627][ T3899] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 123.135011][ T3899] linkwatch_fire_event+0x202/0x260 [ 123.140223][ T3899] netif_carrier_off+0x96/0xb0 [ 123.144995][ T3899] __tun_detach+0xfe7/0x13e0 [ 123.149601][ T3899] tun_chr_close+0xc4/0x180 [ 123.154133][ T3899] __fput+0x277/0x9d0 [ 123.158118][ T3899] ? __tun_detach+0x13e0/0x13e0 [ 123.162977][ T3899] task_work_run+0xdd/0x1a0 [ 123.167488][ T3899] ptrace_notify+0x114/0x140 [ 123.172093][ T3899] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 123.178364][ T3899] syscall_exit_to_user_mode+0x9/0x60 [ 123.183846][ T3899] do_syscall_64+0x42/0xb0 [ 123.188270][ T3899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.194173][ T3899] RIP: 0033:0x7fc6cd2767a3 [ 123.198601][ T3899] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 123.218293][ T3899] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 123.226705][ T3899] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 123.234688][ T3899] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3899] close(3) = 0 [pid 3899] close(4) = 0 [pid 3899] close(5) = -1 EBADF (Bad file descriptor) [pid 3899] close(6) = -1 EBADF (Bad file descriptor) [pid 3899] close(7) = -1 EBADF (Bad file descriptor) [pid 3899] close(8) = -1 EBADF (Bad file descriptor) [pid 3899] close(9) = -1 EBADF (Bad file descriptor) [pid 3899] close(10) = -1 EBADF (Bad file descriptor) [pid 3899] close(11) = -1 EBADF (Bad file descriptor) [pid 3899] close(12) = -1 EBADF (Bad file descriptor) [pid 3899] close(13) = -1 EBADF (Bad file descriptor) [pid 3899] close(14) = -1 EBADF (Bad file descriptor) [pid 3899] close(15) = -1 EBADF (Bad file descriptor) [pid 3899] close(16) = -1 EBADF (Bad file descriptor) [pid 3899] close(17) = -1 EBADF (Bad file descriptor) [pid 3899] close(18) = -1 EBADF (Bad file descriptor) [pid 3899] close(19) = -1 EBADF (Bad file descriptor) [pid 3899] close(20) = -1 EBADF (Bad file descriptor) [pid 3899] close(21) = -1 EBADF (Bad file descriptor) [pid 3899] close(22) = -1 EBADF (Bad file descriptor) [pid 3899] close(23) = -1 EBADF (Bad file descriptor) [pid 3899] close(24) = -1 EBADF (Bad file descriptor) [pid 3899] close(25) = -1 EBADF (Bad file descriptor) [pid 3899] close(26) = -1 EBADF (Bad file descriptor) [pid 3899] close(27) = -1 EBADF (Bad file descriptor) [pid 3899] close(28) = -1 EBADF (Bad file descriptor) [pid 3899] close(29) = -1 EBADF (Bad file descriptor) [pid 3899] exit_group(0) = ? [pid 3899] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=264, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 265 ./strace-static-x86_64: Process 3900 attached [pid 3900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3900] setpgid(0, 0) = 0 [pid 3900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3900] write(3, "1000", 4) = 4 [pid 3900] close(3) = 0 [ 123.242676][ T3899] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 123.250655][ T3899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 123.258627][ T3899] R13: 00000000000f4240 R14: 000000000001df45 R15: 00007ffdc49a5924 [ 123.266720][ T3899] [pid 3900] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3900] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3900] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3900] write(4, "5", 1) = 1 [pid 3900] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 123.330817][ T3900] FAULT_INJECTION: forcing a failure. [ 123.330817][ T3900] name failslab, interval 1, probability 0, space 0, times 0 [ 123.344045][ T3900] CPU: 1 PID: 3900 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 123.354830][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.364962][ T3900] Call Trace: [ 123.368243][ T3900] [ 123.371198][ T3900] dump_stack_lvl+0xcd/0x134 [ 123.375797][ T3900] should_fail.cold+0x5/0xa [ 123.380317][ T3900] should_failslab+0x5/0x10 [ 123.384844][ T3900] kmem_cache_alloc_trace+0x60/0x3f0 [ 123.390135][ T3900] ? ref_tracker_alloc+0x14c/0x550 [ 123.395259][ T3900] ref_tracker_alloc+0x14c/0x550 [ 123.400225][ T3900] ? ref_tracker_free+0x6b0/0x6b0 [ 123.405271][ T3900] ? lock_release+0x720/0x720 [ 123.409960][ T3900] ? do_raw_spin_lock+0x120/0x2a0 [ 123.415005][ T3900] ? rwlock_bug.part.0+0x90/0x90 [ 123.420069][ T3900] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 123.425475][ T3900] linkwatch_fire_event+0x202/0x260 [ 123.430833][ T3900] netif_carrier_off+0x96/0xb0 [ 123.435714][ T3900] __tun_detach+0xfe7/0x13e0 [ 123.440318][ T3900] tun_chr_close+0xc4/0x180 [ 123.444833][ T3900] __fput+0x277/0x9d0 [ 123.448845][ T3900] ? __tun_detach+0x13e0/0x13e0 [ 123.453724][ T3900] task_work_run+0xdd/0x1a0 [ 123.458251][ T3900] ptrace_notify+0x114/0x140 [ 123.462866][ T3900] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 123.469112][ T3900] syscall_exit_to_user_mode+0x9/0x60 [ 123.474494][ T3900] do_syscall_64+0x42/0xb0 [ 123.478914][ T3900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.484809][ T3900] RIP: 0033:0x7fc6cd2767a3 [ 123.489235][ T3900] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 123.508957][ T3900] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 123.517366][ T3900] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3900] close(3) = 0 [pid 3900] close(4) = 0 [pid 3900] close(5) = -1 EBADF (Bad file descriptor) [pid 3900] close(6) = -1 EBADF (Bad file descriptor) [pid 3900] close(7) = -1 EBADF (Bad file descriptor) [pid 3900] close(8) = -1 EBADF (Bad file descriptor) [pid 3900] close(9) = -1 EBADF (Bad file descriptor) [pid 3900] close(10) = -1 EBADF (Bad file descriptor) [pid 3900] close(11) = -1 EBADF (Bad file descriptor) [pid 3900] close(12) = -1 EBADF (Bad file descriptor) [pid 3900] close(13) = -1 EBADF (Bad file descriptor) [pid 3900] close(14) = -1 EBADF (Bad file descriptor) [pid 3900] close(15) = -1 EBADF (Bad file descriptor) [pid 3900] close(16) = -1 EBADF (Bad file descriptor) [pid 3900] close(17) = -1 EBADF (Bad file descriptor) [pid 3900] close(18) = -1 EBADF (Bad file descriptor) [pid 3900] close(19) = -1 EBADF (Bad file descriptor) [pid 3900] close(20) = -1 EBADF (Bad file descriptor) [pid 3900] close(21) = -1 EBADF (Bad file descriptor) [pid 3900] close(22) = -1 EBADF (Bad file descriptor) [pid 3900] close(23) = -1 EBADF (Bad file descriptor) [pid 3900] close(24) = -1 EBADF (Bad file descriptor) [pid 3900] close(25) = -1 EBADF (Bad file descriptor) [pid 3900] close(26) = -1 EBADF (Bad file descriptor) [pid 3900] close(27) = -1 EBADF (Bad file descriptor) [ 123.525361][ T3900] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 123.533331][ T3900] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 123.541306][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 123.549293][ T3900] R13: 00000000000f4240 R14: 000000000001e085 R15: 00007ffdc49a5924 [ 123.557288][ T3900] [pid 3900] close(28) = -1 EBADF (Bad file descriptor) [pid 3900] close(29) = -1 EBADF (Bad file descriptor) [pid 3900] exit_group(0) = ? [pid 3900] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=265, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 266 ./strace-static-x86_64: Process 3901 attached [pid 3901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3901] setpgid(0, 0) = 0 [pid 3901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3901] write(3, "1000", 4) = 4 [pid 3901] close(3) = 0 [pid 3901] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3901] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3901] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3901] write(4, "5", 1) = 1 [pid 3901] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 123.627111][ T3901] FAULT_INJECTION: forcing a failure. [ 123.627111][ T3901] name failslab, interval 1, probability 0, space 0, times 0 [ 123.639962][ T3901] CPU: 1 PID: 3901 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 123.650117][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.660186][ T3901] Call Trace: [ 123.663466][ T3901] [ 123.666410][ T3901] dump_stack_lvl+0xcd/0x134 [ 123.671092][ T3901] should_fail.cold+0x5/0xa [ 123.675603][ T3901] should_failslab+0x5/0x10 [ 123.680119][ T3901] kmem_cache_alloc_trace+0x60/0x3f0 [ 123.685406][ T3901] ? ref_tracker_alloc+0x14c/0x550 [ 123.690529][ T3901] ref_tracker_alloc+0x14c/0x550 [ 123.695469][ T3901] ? ref_tracker_free+0x6b0/0x6b0 [ 123.700512][ T3901] ? lock_release+0x720/0x720 [ 123.705194][ T3901] ? do_raw_spin_lock+0x120/0x2a0 [ 123.710226][ T3901] ? rwlock_bug.part.0+0x90/0x90 [ 123.715174][ T3901] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 123.720574][ T3901] linkwatch_fire_event+0x202/0x260 [ 123.725790][ T3901] netif_carrier_off+0x96/0xb0 [ 123.730561][ T3901] __tun_detach+0xfe7/0x13e0 [ 123.735168][ T3901] tun_chr_close+0xc4/0x180 [ 123.739688][ T3901] __fput+0x277/0x9d0 [ 123.743681][ T3901] ? __tun_detach+0x13e0/0x13e0 [ 123.748541][ T3901] task_work_run+0xdd/0x1a0 [ 123.753059][ T3901] ptrace_notify+0x114/0x140 [ 123.757767][ T3901] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 123.764087][ T3901] syscall_exit_to_user_mode+0x9/0x60 [ 123.769469][ T3901] do_syscall_64+0x42/0xb0 [ 123.773897][ T3901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.779793][ T3901] RIP: 0033:0x7fc6cd2767a3 [ 123.784199][ T3901] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 123.803803][ T3901] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 123.812211][ T3901] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3901] close(3) = 0 [pid 3901] close(4) = 0 [pid 3901] close(5) = -1 EBADF (Bad file descriptor) [pid 3901] close(6) = -1 EBADF (Bad file descriptor) [pid 3901] close(7) = -1 EBADF (Bad file descriptor) [pid 3901] close(8) = -1 EBADF (Bad file descriptor) [pid 3901] close(9) = -1 EBADF (Bad file descriptor) [pid 3901] close(10) = -1 EBADF (Bad file descriptor) [pid 3901] close(11) = -1 EBADF (Bad file descriptor) [pid 3901] close(12) = -1 EBADF (Bad file descriptor) [pid 3901] close(13) = -1 EBADF (Bad file descriptor) [pid 3901] close(14) = -1 EBADF (Bad file descriptor) [pid 3901] close(15) = -1 EBADF (Bad file descriptor) [pid 3901] close(16) = -1 EBADF (Bad file descriptor) [pid 3901] close(17) = -1 EBADF (Bad file descriptor) [pid 3901] close(18) = -1 EBADF (Bad file descriptor) [pid 3901] close(19) = -1 EBADF (Bad file descriptor) [pid 3901] close(20) = -1 EBADF (Bad file descriptor) [pid 3901] close(21) = -1 EBADF (Bad file descriptor) [pid 3901] close(22) = -1 EBADF (Bad file descriptor) [pid 3901] close(23) = -1 EBADF (Bad file descriptor) [pid 3901] close(24) = -1 EBADF (Bad file descriptor) [pid 3901] close(25) = -1 EBADF (Bad file descriptor) [pid 3901] close(26) = -1 EBADF (Bad file descriptor) [ 123.820181][ T3901] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 123.828154][ T3901] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 123.836225][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 123.844198][ T3901] R13: 00000000000f4240 R14: 000000000001e1a3 R15: 00007ffdc49a5924 [ 123.852189][ T3901] [pid 3901] close(27) = -1 EBADF (Bad file descriptor) [pid 3901] close(28) = -1 EBADF (Bad file descriptor) [pid 3901] close(29) = -1 EBADF (Bad file descriptor) [pid 3901] exit_group(0) = ? [pid 3901] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3902 attached , child_tidptr=0x5555570bd5d0) = 267 [pid 3902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3902] setpgid(0, 0) = 0 [pid 3902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3902] write(3, "1000", 4) = 4 [pid 3902] close(3) = 0 [pid 3902] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3902] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3902] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3902] write(4, "5", 1) = 1 [pid 3902] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 123.931858][ T3902] FAULT_INJECTION: forcing a failure. [ 123.931858][ T3902] name failslab, interval 1, probability 0, space 0, times 0 [ 123.944498][ T3902] CPU: 0 PID: 3902 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 123.954645][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.964696][ T3902] Call Trace: [ 123.967964][ T3902] [ 123.970882][ T3902] dump_stack_lvl+0xcd/0x134 [ 123.975493][ T3902] should_fail.cold+0x5/0xa [ 123.979995][ T3902] should_failslab+0x5/0x10 [ 123.984511][ T3902] kmem_cache_alloc_trace+0x60/0x3f0 [ 123.989798][ T3902] ? ref_tracker_alloc+0x14c/0x550 [ 123.994920][ T3902] ref_tracker_alloc+0x14c/0x550 [ 123.999851][ T3902] ? ref_tracker_free+0x6b0/0x6b0 [ 124.004866][ T3902] ? lock_release+0x720/0x720 [ 124.009542][ T3902] ? do_raw_spin_lock+0x120/0x2a0 [ 124.014560][ T3902] ? rwlock_bug.part.0+0x90/0x90 [ 124.019499][ T3902] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 124.024873][ T3902] linkwatch_fire_event+0x202/0x260 [ 124.030075][ T3902] netif_carrier_off+0x96/0xb0 [ 124.034839][ T3902] __tun_detach+0xfe7/0x13e0 [ 124.039436][ T3902] tun_chr_close+0xc4/0x180 [ 124.043946][ T3902] __fput+0x277/0x9d0 [ 124.048056][ T3902] ? __tun_detach+0x13e0/0x13e0 [ 124.053004][ T3902] task_work_run+0xdd/0x1a0 [ 124.057506][ T3902] ptrace_notify+0x114/0x140 [ 124.062090][ T3902] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 124.068318][ T3902] syscall_exit_to_user_mode+0x9/0x60 [ 124.073678][ T3902] do_syscall_64+0x42/0xb0 [ 124.078084][ T3902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.083964][ T3902] RIP: 0033:0x7fc6cd2767a3 [ 124.088363][ T3902] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 124.107960][ T3902] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.116360][ T3902] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 124.124312][ T3902] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3902] close(3) = 0 [pid 3902] close(4) = 0 [pid 3902] close(5) = -1 EBADF (Bad file descriptor) [pid 3902] close(6) = -1 EBADF (Bad file descriptor) [pid 3902] close(7) = -1 EBADF (Bad file descriptor) [pid 3902] close(8) = -1 EBADF (Bad file descriptor) [pid 3902] close(9) = -1 EBADF (Bad file descriptor) [pid 3902] close(10) = -1 EBADF (Bad file descriptor) [pid 3902] close(11) = -1 EBADF (Bad file descriptor) [pid 3902] close(12) = -1 EBADF (Bad file descriptor) [pid 3902] close(13) = -1 EBADF (Bad file descriptor) [pid 3902] close(14) = -1 EBADF (Bad file descriptor) [pid 3902] close(15) = -1 EBADF (Bad file descriptor) [pid 3902] close(16) = -1 EBADF (Bad file descriptor) [pid 3902] close(17) = -1 EBADF (Bad file descriptor) [pid 3902] close(18) = -1 EBADF (Bad file descriptor) [pid 3902] close(19) = -1 EBADF (Bad file descriptor) [pid 3902] close(20) = -1 EBADF (Bad file descriptor) [pid 3902] close(21) = -1 EBADF (Bad file descriptor) [pid 3902] close(22) = -1 EBADF (Bad file descriptor) [pid 3902] close(23) = -1 EBADF (Bad file descriptor) [pid 3902] close(24) = -1 EBADF (Bad file descriptor) [pid 3902] close(25) = -1 EBADF (Bad file descriptor) [pid 3902] close(26) = -1 EBADF (Bad file descriptor) [pid 3902] close(27) = -1 EBADF (Bad file descriptor) [pid 3902] close(28) = -1 EBADF (Bad file descriptor) [pid 3902] close(29) = -1 EBADF (Bad file descriptor) [pid 3902] exit_group(0) = ? [pid 3902] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=267, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3903 attached , child_tidptr=0x5555570bd5d0) = 268 [pid 3903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3903] setpgid(0, 0) = 0 [pid 3903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3903] write(3, "1000", 4) = 4 [pid 3903] close(3) = 0 [pid 3903] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [ 124.132266][ T3902] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 124.140219][ T3902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 124.148173][ T3902] R13: 00000000000f4240 R14: 000000000001e2cc R15: 00007ffdc49a5924 [ 124.156141][ T3902] [pid 3903] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3903] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3903] write(4, "5", 1) = 1 [pid 3903] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 124.218783][ T3903] FAULT_INJECTION: forcing a failure. [ 124.218783][ T3903] name failslab, interval 1, probability 0, space 0, times 0 [ 124.231527][ T3903] CPU: 0 PID: 3903 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 124.241665][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.251712][ T3903] Call Trace: [ 124.254982][ T3903] [ 124.257891][ T3903] dump_stack_lvl+0xcd/0x134 [ 124.262492][ T3903] should_fail.cold+0x5/0xa [ 124.266979][ T3903] should_failslab+0x5/0x10 [ 124.271473][ T3903] kmem_cache_alloc_trace+0x60/0x3f0 [ 124.277019][ T3903] ? ref_tracker_alloc+0x14c/0x550 [ 124.282123][ T3903] ref_tracker_alloc+0x14c/0x550 [ 124.287049][ T3903] ? ref_tracker_free+0x6b0/0x6b0 [ 124.292055][ T3903] ? lock_release+0x720/0x720 [ 124.296722][ T3903] ? do_raw_spin_lock+0x120/0x2a0 [ 124.301734][ T3903] ? rwlock_bug.part.0+0x90/0x90 [ 124.306660][ T3903] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 124.312026][ T3903] linkwatch_fire_event+0x202/0x260 [ 124.317220][ T3903] netif_carrier_off+0x96/0xb0 [ 124.321974][ T3903] __tun_detach+0xfe7/0x13e0 [ 124.326573][ T3903] tun_chr_close+0xc4/0x180 [ 124.331082][ T3903] __fput+0x277/0x9d0 [ 124.335051][ T3903] ? __tun_detach+0x13e0/0x13e0 [ 124.339889][ T3903] task_work_run+0xdd/0x1a0 [ 124.344387][ T3903] ptrace_notify+0x114/0x140 [ 124.348969][ T3903] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 124.355201][ T3903] syscall_exit_to_user_mode+0x9/0x60 [ 124.360559][ T3903] do_syscall_64+0x42/0xb0 [ 124.364962][ T3903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.370846][ T3903] RIP: 0033:0x7fc6cd2767a3 [ 124.375247][ T3903] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 124.394839][ T3903] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.403238][ T3903] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 124.411189][ T3903] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3903] close(3) = 0 [pid 3903] close(4) = 0 [pid 3903] close(5) = -1 EBADF (Bad file descriptor) [pid 3903] close(6) = -1 EBADF (Bad file descriptor) [pid 3903] close(7) = -1 EBADF (Bad file descriptor) [pid 3903] close(8) = -1 EBADF (Bad file descriptor) [pid 3903] close(9) = -1 EBADF (Bad file descriptor) [pid 3903] close(10) = -1 EBADF (Bad file descriptor) [pid 3903] close(11) = -1 EBADF (Bad file descriptor) [pid 3903] close(12) = -1 EBADF (Bad file descriptor) [pid 3903] close(13) = -1 EBADF (Bad file descriptor) [pid 3903] close(14) = -1 EBADF (Bad file descriptor) [pid 3903] close(15) = -1 EBADF (Bad file descriptor) [pid 3903] close(16) = -1 EBADF (Bad file descriptor) [pid 3903] close(17) = -1 EBADF (Bad file descriptor) [pid 3903] close(18) = -1 EBADF (Bad file descriptor) [pid 3903] close(19) = -1 EBADF (Bad file descriptor) [pid 3903] close(20) = -1 EBADF (Bad file descriptor) [pid 3903] close(21) = -1 EBADF (Bad file descriptor) [pid 3903] close(22) = -1 EBADF (Bad file descriptor) [pid 3903] close(23) = -1 EBADF (Bad file descriptor) [pid 3903] close(24) = -1 EBADF (Bad file descriptor) [pid 3903] close(25) = -1 EBADF (Bad file descriptor) [ 124.419166][ T3903] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 124.427120][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 124.435093][ T3903] R13: 00000000000f4240 R14: 000000000001e3fc R15: 00007ffdc49a5924 [ 124.443080][ T3903] [pid 3903] close(26) = -1 EBADF (Bad file descriptor) [pid 3903] close(27) = -1 EBADF (Bad file descriptor) [pid 3903] close(28) = -1 EBADF (Bad file descriptor) [pid 3903] close(29) = -1 EBADF (Bad file descriptor) [pid 3903] exit_group(0) = ? [pid 3903] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=268, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 269 ./strace-static-x86_64: Process 3904 attached [pid 3904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3904] setpgid(0, 0) = 0 [pid 3904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3904] write(3, "1000", 4) = 4 [pid 3904] close(3) = 0 [pid 3904] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3904] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3904] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3904] write(4, "5", 1) = 1 [pid 3904] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 124.514870][ T3904] FAULT_INJECTION: forcing a failure. [ 124.514870][ T3904] name failslab, interval 1, probability 0, space 0, times 0 [ 124.527577][ T3904] CPU: 0 PID: 3904 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 124.537901][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.547953][ T3904] Call Trace: [ 124.551226][ T3904] [ 124.554150][ T3904] dump_stack_lvl+0xcd/0x134 [ 124.558760][ T3904] should_fail.cold+0x5/0xa [ 124.563296][ T3904] should_failslab+0x5/0x10 [ 124.567804][ T3904] kmem_cache_alloc_trace+0x60/0x3f0 [ 124.573095][ T3904] ? ref_tracker_alloc+0x14c/0x550 [ 124.578235][ T3904] ref_tracker_alloc+0x14c/0x550 [ 124.583270][ T3904] ? ref_tracker_free+0x6b0/0x6b0 [ 124.588302][ T3904] ? lock_release+0x720/0x720 [ 124.592989][ T3904] ? do_raw_spin_lock+0x120/0x2a0 [ 124.598031][ T3904] ? rwlock_bug.part.0+0x90/0x90 [ 124.602975][ T3904] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 124.608360][ T3904] linkwatch_fire_event+0x202/0x260 [ 124.613573][ T3904] netif_carrier_off+0x96/0xb0 [ 124.618367][ T3904] __tun_detach+0xfe7/0x13e0 [ 124.622994][ T3904] tun_chr_close+0xc4/0x180 [ 124.627510][ T3904] __fput+0x277/0x9d0 [ 124.631500][ T3904] ? __tun_detach+0x13e0/0x13e0 [ 124.636447][ T3904] task_work_run+0xdd/0x1a0 [ 124.640967][ T3904] ptrace_notify+0x114/0x140 [ 124.645594][ T3904] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 124.651867][ T3904] syscall_exit_to_user_mode+0x9/0x60 [ 124.657256][ T3904] do_syscall_64+0x42/0xb0 [ 124.661686][ T3904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.667577][ T3904] RIP: 0033:0x7fc6cd2767a3 [ 124.671987][ T3904] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 124.691595][ T3904] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.700007][ T3904] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3904] close(3) = 0 [pid 3904] close(4) = 0 [pid 3904] close(5) = -1 EBADF (Bad file descriptor) [pid 3904] close(6) = -1 EBADF (Bad file descriptor) [pid 3904] close(7) = -1 EBADF (Bad file descriptor) [pid 3904] close(8) = -1 EBADF (Bad file descriptor) [pid 3904] close(9) = -1 EBADF (Bad file descriptor) [pid 3904] close(10) = -1 EBADF (Bad file descriptor) [pid 3904] close(11) = -1 EBADF (Bad file descriptor) [pid 3904] close(12) = -1 EBADF (Bad file descriptor) [pid 3904] close(13) = -1 EBADF (Bad file descriptor) [pid 3904] close(14) = -1 EBADF (Bad file descriptor) [pid 3904] close(15) = -1 EBADF (Bad file descriptor) [pid 3904] close(16) = -1 EBADF (Bad file descriptor) [pid 3904] close(17) = -1 EBADF (Bad file descriptor) [pid 3904] close(18) = -1 EBADF (Bad file descriptor) [pid 3904] close(19) = -1 EBADF (Bad file descriptor) [ 124.707980][ T3904] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 124.715951][ T3904] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 124.724031][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 124.732020][ T3904] R13: 00000000000f4240 R14: 000000000001e51a R15: 00007ffdc49a5924 [ 124.740000][ T3904] [pid 3904] close(20) = -1 EBADF (Bad file descriptor) [pid 3904] close(21) = -1 EBADF (Bad file descriptor) [pid 3904] close(22) = -1 EBADF (Bad file descriptor) [pid 3904] close(23) = -1 EBADF (Bad file descriptor) [pid 3904] close(24) = -1 EBADF (Bad file descriptor) [pid 3904] close(25) = -1 EBADF (Bad file descriptor) [pid 3904] close(26) = -1 EBADF (Bad file descriptor) [pid 3904] close(27) = -1 EBADF (Bad file descriptor) [pid 3904] close(28) = -1 EBADF (Bad file descriptor) [pid 3904] close(29) = -1 EBADF (Bad file descriptor) [pid 3904] exit_group(0) = ? [pid 3904] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 270 ./strace-static-x86_64: Process 3905 attached [pid 3905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3905] setpgid(0, 0) = 0 [pid 3905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3905] write(3, "1000", 4) = 4 [pid 3905] close(3) = 0 [pid 3905] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3905] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3905] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3905] write(4, "5", 1) = 1 [pid 3905] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 124.811859][ T3905] FAULT_INJECTION: forcing a failure. [ 124.811859][ T3905] name failslab, interval 1, probability 0, space 0, times 0 [ 124.824486][ T3905] CPU: 0 PID: 3905 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 124.834636][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.844693][ T3905] Call Trace: [ 124.847973][ T3905] [ 124.850890][ T3905] dump_stack_lvl+0xcd/0x134 [ 124.855495][ T3905] should_fail.cold+0x5/0xa [ 124.860043][ T3905] should_failslab+0x5/0x10 [ 124.864543][ T3905] kmem_cache_alloc_trace+0x60/0x3f0 [ 124.870068][ T3905] ? ref_tracker_alloc+0x14c/0x550 [ 124.875193][ T3905] ref_tracker_alloc+0x14c/0x550 [ 124.880138][ T3905] ? ref_tracker_free+0x6b0/0x6b0 [ 124.885161][ T3905] ? lock_release+0x720/0x720 [ 124.889839][ T3905] ? do_raw_spin_lock+0x120/0x2a0 [ 124.894861][ T3905] ? rwlock_bug.part.0+0x90/0x90 [ 124.899799][ T3905] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 124.905180][ T3905] linkwatch_fire_event+0x202/0x260 [ 124.910391][ T3905] netif_carrier_off+0x96/0xb0 [ 124.915158][ T3905] __tun_detach+0xfe7/0x13e0 [ 124.919752][ T3905] tun_chr_close+0xc4/0x180 [ 124.924263][ T3905] __fput+0x277/0x9d0 [ 124.928270][ T3905] ? __tun_detach+0x13e0/0x13e0 [ 124.933145][ T3905] task_work_run+0xdd/0x1a0 [ 124.937655][ T3905] ptrace_notify+0x114/0x140 [ 124.942249][ T3905] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 124.948501][ T3905] syscall_exit_to_user_mode+0x9/0x60 [ 124.953877][ T3905] do_syscall_64+0x42/0xb0 [ 124.958326][ T3905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.964226][ T3905] RIP: 0033:0x7fc6cd2767a3 [ 124.968901][ T3905] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 124.988524][ T3905] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.996939][ T3905] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 125.004925][ T3905] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3905] close(3) = 0 [pid 3905] close(4) = 0 [pid 3905] close(5) = -1 EBADF (Bad file descriptor) [pid 3905] close(6) = -1 EBADF (Bad file descriptor) [pid 3905] close(7) = -1 EBADF (Bad file descriptor) [pid 3905] close(8) = -1 EBADF (Bad file descriptor) [pid 3905] close(9) = -1 EBADF (Bad file descriptor) [pid 3905] close(10) = -1 EBADF (Bad file descriptor) [pid 3905] close(11) = -1 EBADF (Bad file descriptor) [pid 3905] close(12) = -1 EBADF (Bad file descriptor) [pid 3905] close(13) = -1 EBADF (Bad file descriptor) [pid 3905] close(14) = -1 EBADF (Bad file descriptor) [pid 3905] close(15) = -1 EBADF (Bad file descriptor) [pid 3905] close(16) = -1 EBADF (Bad file descriptor) [pid 3905] close(17) = -1 EBADF (Bad file descriptor) [pid 3905] close(18) = -1 EBADF (Bad file descriptor) [pid 3905] close(19) = -1 EBADF (Bad file descriptor) [pid 3905] close(20) = -1 EBADF (Bad file descriptor) [pid 3905] close(21) = -1 EBADF (Bad file descriptor) [pid 3905] close(22) = -1 EBADF (Bad file descriptor) [pid 3905] close(23) = -1 EBADF (Bad file descriptor) [pid 3905] close(24) = -1 EBADF (Bad file descriptor) [pid 3905] close(25) = -1 EBADF (Bad file descriptor) [pid 3905] close(26) = -1 EBADF (Bad file descriptor) [pid 3905] close(27) = -1 EBADF (Bad file descriptor) [pid 3905] close(28) = -1 EBADF (Bad file descriptor) [pid 3905] close(29) = -1 EBADF (Bad file descriptor) [pid 3905] exit_group(0) = ? [pid 3905] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=270, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3906 attached [pid 3906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 271 [pid 3906] <... prctl resumed>) = 0 [pid 3906] setpgid(0, 0) = 0 [ 125.012915][ T3905] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 125.020927][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 125.028915][ T3905] R13: 00000000000f4240 R14: 000000000001e643 R15: 00007ffdc49a5924 [ 125.036910][ T3905] [pid 3906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3906] write(3, "1000", 4) = 4 [pid 3906] close(3) = 0 [pid 3906] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3906] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3906] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3906] write(4, "5", 1) = 1 [pid 3906] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 125.102471][ T3906] FAULT_INJECTION: forcing a failure. [ 125.102471][ T3906] name failslab, interval 1, probability 0, space 0, times 0 [ 125.115108][ T3906] CPU: 0 PID: 3906 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 125.125256][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.135324][ T3906] Call Trace: [ 125.138604][ T3906] [ 125.141557][ T3906] dump_stack_lvl+0xcd/0x134 [ 125.146152][ T3906] should_fail.cold+0x5/0xa [ 125.150670][ T3906] should_failslab+0x5/0x10 [ 125.155177][ T3906] kmem_cache_alloc_trace+0x60/0x3f0 [ 125.160464][ T3906] ? ref_tracker_alloc+0x14c/0x550 [ 125.165588][ T3906] ref_tracker_alloc+0x14c/0x550 [ 125.170534][ T3906] ? ref_tracker_free+0x6b0/0x6b0 [ 125.175566][ T3906] ? lock_release+0x720/0x720 [ 125.180255][ T3906] ? do_raw_spin_lock+0x120/0x2a0 [ 125.185292][ T3906] ? rwlock_bug.part.0+0x90/0x90 [ 125.190259][ T3906] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 125.195643][ T3906] linkwatch_fire_event+0x202/0x260 [ 125.200852][ T3906] netif_carrier_off+0x96/0xb0 [ 125.205630][ T3906] __tun_detach+0xfe7/0x13e0 [ 125.210246][ T3906] tun_chr_close+0xc4/0x180 [ 125.214755][ T3906] __fput+0x277/0x9d0 [ 125.218738][ T3906] ? __tun_detach+0x13e0/0x13e0 [ 125.223600][ T3906] task_work_run+0xdd/0x1a0 [ 125.228131][ T3906] ptrace_notify+0x114/0x140 [ 125.232734][ T3906] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 125.239008][ T3906] syscall_exit_to_user_mode+0x9/0x60 [ 125.244390][ T3906] do_syscall_64+0x42/0xb0 [ 125.248820][ T3906] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 125.255067][ T3906] RIP: 0033:0x7fc6cd2767a3 [ 125.259496][ T3906] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 125.279102][ T3906] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 125.287519][ T3906] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 125.295510][ T3906] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3906] close(3) = 0 [pid 3906] close(4) = 0 [pid 3906] close(5) = -1 EBADF (Bad file descriptor) [pid 3906] close(6) = -1 EBADF (Bad file descriptor) [pid 3906] close(7) = -1 EBADF (Bad file descriptor) [pid 3906] close(8) = -1 EBADF (Bad file descriptor) [pid 3906] close(9) = -1 EBADF (Bad file descriptor) [pid 3906] close(10) = -1 EBADF (Bad file descriptor) [pid 3906] close(11) = -1 EBADF (Bad file descriptor) [pid 3906] close(12) = -1 EBADF (Bad file descriptor) [pid 3906] close(13) = -1 EBADF (Bad file descriptor) [pid 3906] close(14) = -1 EBADF (Bad file descriptor) [pid 3906] close(15) = -1 EBADF (Bad file descriptor) [pid 3906] close(16) = -1 EBADF (Bad file descriptor) [pid 3906] close(17) = -1 EBADF (Bad file descriptor) [pid 3906] close(18) = -1 EBADF (Bad file descriptor) [pid 3906] close(19) = -1 EBADF (Bad file descriptor) [pid 3906] close(20) = -1 EBADF (Bad file descriptor) [pid 3906] close(21) = -1 EBADF (Bad file descriptor) [pid 3906] close(22) = -1 EBADF (Bad file descriptor) [pid 3906] close(23) = -1 EBADF (Bad file descriptor) [pid 3906] close(24) = -1 EBADF (Bad file descriptor) [pid 3906] close(25) = -1 EBADF (Bad file descriptor) [pid 3906] close(26) = -1 EBADF (Bad file descriptor) [pid 3906] close(27) = -1 EBADF (Bad file descriptor) [pid 3906] close(28) = -1 EBADF (Bad file descriptor) [ 125.303483][ T3906] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 125.311462][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 125.319439][ T3906] R13: 00000000000f4240 R14: 000000000001e76e R15: 00007ffdc49a5924 [ 125.327429][ T3906] [pid 3906] close(29) = -1 EBADF (Bad file descriptor) [pid 3906] exit_group(0) = ? [pid 3906] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=271, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3907 attached , child_tidptr=0x5555570bd5d0) = 272 [pid 3907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3907] setpgid(0, 0) = 0 [pid 3907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3907] write(3, "1000", 4) = 4 [pid 3907] close(3) = 0 [pid 3907] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3907] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3907] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3907] write(4, "5", 1) = 1 [pid 3907] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 125.398699][ T3907] FAULT_INJECTION: forcing a failure. [ 125.398699][ T3907] name failslab, interval 1, probability 0, space 0, times 0 [ 125.411331][ T3907] CPU: 0 PID: 3907 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 125.421488][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.431629][ T3907] Call Trace: [ 125.434889][ T3907] [ 125.437799][ T3907] dump_stack_lvl+0xcd/0x134 [ 125.442376][ T3907] should_fail.cold+0x5/0xa [ 125.446856][ T3907] should_failslab+0x5/0x10 [ 125.451335][ T3907] kmem_cache_alloc_trace+0x60/0x3f0 [ 125.456596][ T3907] ? ref_tracker_alloc+0x14c/0x550 [ 125.461707][ T3907] ref_tracker_alloc+0x14c/0x550 [ 125.466624][ T3907] ? ref_tracker_free+0x6b0/0x6b0 [ 125.471627][ T3907] ? lock_release+0x720/0x720 [ 125.476287][ T3907] ? do_raw_spin_lock+0x120/0x2a0 [ 125.481295][ T3907] ? rwlock_bug.part.0+0x90/0x90 [ 125.486215][ T3907] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 125.491748][ T3907] linkwatch_fire_event+0x202/0x260 [ 125.496932][ T3907] netif_carrier_off+0x96/0xb0 [ 125.501673][ T3907] __tun_detach+0xfe7/0x13e0 [ 125.506247][ T3907] tun_chr_close+0xc4/0x180 [ 125.510732][ T3907] __fput+0x277/0x9d0 [ 125.514781][ T3907] ? __tun_detach+0x13e0/0x13e0 [ 125.519722][ T3907] task_work_run+0xdd/0x1a0 [ 125.524942][ T3907] ptrace_notify+0x114/0x140 [ 125.529540][ T3907] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 125.535782][ T3907] syscall_exit_to_user_mode+0x9/0x60 [ 125.541135][ T3907] do_syscall_64+0x42/0xb0 [ 125.545555][ T3907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 125.551446][ T3907] RIP: 0033:0x7fc6cd2767a3 [ 125.555838][ T3907] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 125.575428][ T3907] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 125.583837][ T3907] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 125.591785][ T3907] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3907] close(3) = 0 [pid 3907] close(4) = 0 [pid 3907] close(5) = -1 EBADF (Bad file descriptor) [pid 3907] close(6) = -1 EBADF (Bad file descriptor) [pid 3907] close(7) = -1 EBADF (Bad file descriptor) [pid 3907] close(8) = -1 EBADF (Bad file descriptor) [pid 3907] close(9) = -1 EBADF (Bad file descriptor) [pid 3907] close(10) = -1 EBADF (Bad file descriptor) [pid 3907] close(11) = -1 EBADF (Bad file descriptor) [pid 3907] close(12) = -1 EBADF (Bad file descriptor) [pid 3907] close(13) = -1 EBADF (Bad file descriptor) [pid 3907] close(14) = -1 EBADF (Bad file descriptor) [pid 3907] close(15) = -1 EBADF (Bad file descriptor) [pid 3907] close(16) = -1 EBADF (Bad file descriptor) [pid 3907] close(17) = -1 EBADF (Bad file descriptor) [pid 3907] close(18) = -1 EBADF (Bad file descriptor) [pid 3907] close(19) = -1 EBADF (Bad file descriptor) [pid 3907] close(20) = -1 EBADF (Bad file descriptor) [pid 3907] close(21) = -1 EBADF (Bad file descriptor) [ 125.599732][ T3907] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 125.607681][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 125.615631][ T3907] R13: 00000000000f4240 R14: 000000000001e890 R15: 00007ffdc49a5924 [ 125.623591][ T3907] [pid 3907] close(22) = -1 EBADF (Bad file descriptor) [pid 3907] close(23) = -1 EBADF (Bad file descriptor) [pid 3907] close(24) = -1 EBADF (Bad file descriptor) [pid 3907] close(25) = -1 EBADF (Bad file descriptor) [pid 3907] close(26) = -1 EBADF (Bad file descriptor) [pid 3907] close(27) = -1 EBADF (Bad file descriptor) [pid 3907] close(28) = -1 EBADF (Bad file descriptor) [pid 3907] close(29) = -1 EBADF (Bad file descriptor) [pid 3907] exit_group(0) = ? [pid 3907] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 273 ./strace-static-x86_64: Process 3908 attached [pid 3908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3908] setpgid(0, 0) = 0 [pid 3908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3908] write(3, "1000", 4) = 4 [pid 3908] close(3) = 0 [pid 3908] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3908] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3908] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3908] write(4, "5", 1) = 1 [pid 3908] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 125.691615][ T3908] FAULT_INJECTION: forcing a failure. [ 125.691615][ T3908] name failslab, interval 1, probability 0, space 0, times 0 [ 125.704235][ T3908] CPU: 0 PID: 3908 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 125.714460][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.724605][ T3908] Call Trace: [ 125.727891][ T3908] [ 125.730811][ T3908] dump_stack_lvl+0xcd/0x134 [ 125.735402][ T3908] should_fail.cold+0x5/0xa [ 125.739912][ T3908] should_failslab+0x5/0x10 [ 125.744409][ T3908] kmem_cache_alloc_trace+0x60/0x3f0 [ 125.749873][ T3908] ? ref_tracker_alloc+0x14c/0x550 [ 125.754981][ T3908] ref_tracker_alloc+0x14c/0x550 [ 125.759905][ T3908] ? ref_tracker_free+0x6b0/0x6b0 [ 125.764912][ T3908] ? lock_release+0x720/0x720 [ 125.769578][ T3908] ? do_raw_spin_lock+0x120/0x2a0 [ 125.774680][ T3908] ? rwlock_bug.part.0+0x90/0x90 [ 125.779626][ T3908] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 125.784995][ T3908] linkwatch_fire_event+0x202/0x260 [ 125.790187][ T3908] netif_carrier_off+0x96/0xb0 [ 125.794937][ T3908] __tun_detach+0xfe7/0x13e0 [ 125.799544][ T3908] tun_chr_close+0xc4/0x180 [ 125.804036][ T3908] __fput+0x277/0x9d0 [ 125.808023][ T3908] ? __tun_detach+0x13e0/0x13e0 [ 125.812864][ T3908] task_work_run+0xdd/0x1a0 [ 125.817365][ T3908] ptrace_notify+0x114/0x140 [ 125.821951][ T3908] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 125.828182][ T3908] syscall_exit_to_user_mode+0x9/0x60 [ 125.833566][ T3908] do_syscall_64+0x42/0xb0 [ 125.837977][ T3908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 125.843896][ T3908] RIP: 0033:0x7fc6cd2767a3 [ 125.848300][ T3908] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 125.868014][ T3908] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 125.876413][ T3908] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 125.884365][ T3908] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 125.892316][ T3908] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 125.900269][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 125.908222][ T3908] R13: 00000000000f4240 R14: 000000000001e9b7 R15: 00007ffdc49a5924 [ 125.916193][ T3908] [pid 3908] close(3) = 0 [pid 3908] close(4) = 0 [pid 3908] close(5) = -1 EBADF (Bad file descriptor) [pid 3908] close(6) = -1 EBADF (Bad file descriptor) [pid 3908] close(7) = -1 EBADF (Bad file descriptor) [pid 3908] close(8) = -1 EBADF (Bad file descriptor) [pid 3908] close(9) = -1 EBADF (Bad file descriptor) [pid 3908] close(10) = -1 EBADF (Bad file descriptor) [pid 3908] close(11) = -1 EBADF (Bad file descriptor) [pid 3908] close(12) = -1 EBADF (Bad file descriptor) [pid 3908] close(13) = -1 EBADF (Bad file descriptor) [pid 3908] close(14) = -1 EBADF (Bad file descriptor) [pid 3908] close(15) = -1 EBADF (Bad file descriptor) [pid 3908] close(16) = -1 EBADF (Bad file descriptor) [pid 3908] close(17) = -1 EBADF (Bad file descriptor) [pid 3908] close(18) = -1 EBADF (Bad file descriptor) [pid 3908] close(19) = -1 EBADF (Bad file descriptor) [pid 3908] close(20) = -1 EBADF (Bad file descriptor) [pid 3908] close(21) = -1 EBADF (Bad file descriptor) [pid 3908] close(22) = -1 EBADF (Bad file descriptor) [pid 3908] close(23) = -1 EBADF (Bad file descriptor) [pid 3908] close(24) = -1 EBADF (Bad file descriptor) [pid 3908] close(25) = -1 EBADF (Bad file descriptor) [pid 3908] close(26) = -1 EBADF (Bad file descriptor) [pid 3908] close(27) = -1 EBADF (Bad file descriptor) [pid 3908] close(28) = -1 EBADF (Bad file descriptor) [pid 3908] close(29) = -1 EBADF (Bad file descriptor) [pid 3908] exit_group(0) = ? [pid 3908] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=273, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 274 ./strace-static-x86_64: Process 3909 attached [pid 3909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3909] setpgid(0, 0) = 0 [pid 3909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3909] write(3, "1000", 4) = 4 [pid 3909] close(3) = 0 [pid 3909] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3909] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3909] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3909] write(4, "5", 1) = 1 [pid 3909] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 126.003954][ T3909] FAULT_INJECTION: forcing a failure. [ 126.003954][ T3909] name failslab, interval 1, probability 0, space 0, times 0 [ 126.016593][ T3909] CPU: 0 PID: 3909 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 126.026825][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.036877][ T3909] Call Trace: [ 126.040153][ T3909] [ 126.043087][ T3909] dump_stack_lvl+0xcd/0x134 [ 126.047669][ T3909] should_fail.cold+0x5/0xa [ 126.052159][ T3909] should_failslab+0x5/0x10 [ 126.056823][ T3909] kmem_cache_alloc_trace+0x60/0x3f0 [ 126.062093][ T3909] ? ref_tracker_alloc+0x14c/0x550 [ 126.067193][ T3909] ref_tracker_alloc+0x14c/0x550 [ 126.072204][ T3909] ? ref_tracker_free+0x6b0/0x6b0 [ 126.077214][ T3909] ? lock_release+0x720/0x720 [ 126.081911][ T3909] ? do_raw_spin_lock+0x120/0x2a0 [ 126.086922][ T3909] ? rwlock_bug.part.0+0x90/0x90 [ 126.091850][ T3909] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 126.097235][ T3909] linkwatch_fire_event+0x202/0x260 [ 126.102531][ T3909] netif_carrier_off+0x96/0xb0 [ 126.107288][ T3909] __tun_detach+0xfe7/0x13e0 [ 126.111869][ T3909] tun_chr_close+0xc4/0x180 [ 126.116352][ T3909] __fput+0x277/0x9d0 [ 126.120336][ T3909] ? __tun_detach+0x13e0/0x13e0 [ 126.125172][ T3909] task_work_run+0xdd/0x1a0 [ 126.129664][ T3909] ptrace_notify+0x114/0x140 [ 126.134239][ T3909] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 126.140472][ T3909] syscall_exit_to_user_mode+0x9/0x60 [ 126.145854][ T3909] do_syscall_64+0x42/0xb0 [ 126.150258][ T3909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 126.156139][ T3909] RIP: 0033:0x7fc6cd2767a3 [ 126.160548][ T3909] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 126.180137][ T3909] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 126.188617][ T3909] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 126.196573][ T3909] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3909] close(3) = 0 [pid 3909] close(4) = 0 [pid 3909] close(5) = -1 EBADF (Bad file descriptor) [pid 3909] close(6) = -1 EBADF (Bad file descriptor) [pid 3909] close(7) = -1 EBADF (Bad file descriptor) [pid 3909] close(8) = -1 EBADF (Bad file descriptor) [pid 3909] close(9) = -1 EBADF (Bad file descriptor) [pid 3909] close(10) = -1 EBADF (Bad file descriptor) [pid 3909] close(11) = -1 EBADF (Bad file descriptor) [pid 3909] close(12) = -1 EBADF (Bad file descriptor) [pid 3909] close(13) = -1 EBADF (Bad file descriptor) [pid 3909] close(14) = -1 EBADF (Bad file descriptor) [pid 3909] close(15) = -1 EBADF (Bad file descriptor) [pid 3909] close(16) = -1 EBADF (Bad file descriptor) [pid 3909] close(17) = -1 EBADF (Bad file descriptor) [pid 3909] close(18) = -1 EBADF (Bad file descriptor) [pid 3909] close(19) = -1 EBADF (Bad file descriptor) [pid 3909] close(20) = -1 EBADF (Bad file descriptor) [pid 3909] close(21) = -1 EBADF (Bad file descriptor) [pid 3909] close(22) = -1 EBADF (Bad file descriptor) [pid 3909] close(23) = -1 EBADF (Bad file descriptor) [pid 3909] close(24) = -1 EBADF (Bad file descriptor) [pid 3909] close(25) = -1 EBADF (Bad file descriptor) [pid 3909] close(26) = -1 EBADF (Bad file descriptor) [pid 3909] close(27) = -1 EBADF (Bad file descriptor) [pid 3909] close(28) = -1 EBADF (Bad file descriptor) [pid 3909] close(29) = -1 EBADF (Bad file descriptor) [pid 3909] exit_group(0) = ? [pid 3909] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=274, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 126.204531][ T3909] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 126.212505][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 126.220464][ T3909] R13: 00000000000f4240 R14: 000000000001eae2 R15: 00007ffdc49a5924 [ 126.228439][ T3909] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 275 ./strace-static-x86_64: Process 3910 attached [pid 3910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3910] setpgid(0, 0) = 0 [pid 3910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3910] write(3, "1000", 4) = 4 [pid 3910] close(3) = 0 [pid 3910] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3910] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3910] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3910] write(4, "5", 1) = 1 [pid 3910] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 126.295317][ T3910] FAULT_INJECTION: forcing a failure. [ 126.295317][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 126.308438][ T3910] CPU: 0 PID: 3910 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 126.318587][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.328618][ T3910] Call Trace: [ 126.331878][ T3910] [ 126.334793][ T3910] dump_stack_lvl+0xcd/0x134 [ 126.339386][ T3910] should_fail.cold+0x5/0xa [ 126.343879][ T3910] should_failslab+0x5/0x10 [ 126.348384][ T3910] kmem_cache_alloc_trace+0x60/0x3f0 [ 126.353653][ T3910] ? ref_tracker_alloc+0x14c/0x550 [ 126.358748][ T3910] ref_tracker_alloc+0x14c/0x550 [ 126.363668][ T3910] ? ref_tracker_free+0x6b0/0x6b0 [ 126.368762][ T3910] ? lock_release+0x720/0x720 [ 126.373438][ T3910] ? do_raw_spin_lock+0x120/0x2a0 [ 126.378445][ T3910] ? rwlock_bug.part.0+0x90/0x90 [ 126.383366][ T3910] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 126.388744][ T3910] linkwatch_fire_event+0x202/0x260 [ 126.393929][ T3910] netif_carrier_off+0x96/0xb0 [ 126.398679][ T3910] __tun_detach+0xfe7/0x13e0 [ 126.403259][ T3910] tun_chr_close+0xc4/0x180 [ 126.407743][ T3910] __fput+0x277/0x9d0 [ 126.411709][ T3910] ? __tun_detach+0x13e0/0x13e0 [ 126.416546][ T3910] task_work_run+0xdd/0x1a0 [ 126.421049][ T3910] ptrace_notify+0x114/0x140 [ 126.425646][ T3910] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 126.431873][ T3910] syscall_exit_to_user_mode+0x9/0x60 [ 126.437227][ T3910] do_syscall_64+0x42/0xb0 [ 126.441628][ T3910] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 126.447510][ T3910] RIP: 0033:0x7fc6cd2767a3 [ 126.451905][ T3910] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 126.471495][ T3910] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 126.480250][ T3910] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 126.488204][ T3910] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3910] close(3) = 0 [pid 3910] close(4) = 0 [pid 3910] close(5) = -1 EBADF (Bad file descriptor) [pid 3910] close(6) = -1 EBADF (Bad file descriptor) [ 126.496178][ T3910] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 126.504137][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 126.512101][ T3910] R13: 00000000000f4240 R14: 000000000001ec18 R15: 00007ffdc49a5924 [ 126.520065][ T3910] [pid 3910] close(7) = -1 EBADF (Bad file descriptor) [pid 3910] close(8) = -1 EBADF (Bad file descriptor) [pid 3910] close(9) = -1 EBADF (Bad file descriptor) [pid 3910] close(10) = -1 EBADF (Bad file descriptor) [pid 3910] close(11) = -1 EBADF (Bad file descriptor) [pid 3910] close(12) = -1 EBADF (Bad file descriptor) [pid 3910] close(13) = -1 EBADF (Bad file descriptor) [pid 3910] close(14) = -1 EBADF (Bad file descriptor) [pid 3910] close(15) = -1 EBADF (Bad file descriptor) [pid 3910] close(16) = -1 EBADF (Bad file descriptor) [pid 3910] close(17) = -1 EBADF (Bad file descriptor) [pid 3910] close(18) = -1 EBADF (Bad file descriptor) [pid 3910] close(19) = -1 EBADF (Bad file descriptor) [pid 3910] close(20) = -1 EBADF (Bad file descriptor) [pid 3910] close(21) = -1 EBADF (Bad file descriptor) [pid 3910] close(22) = -1 EBADF (Bad file descriptor) [pid 3910] close(23) = -1 EBADF (Bad file descriptor) [pid 3910] close(24) = -1 EBADF (Bad file descriptor) [pid 3910] close(25) = -1 EBADF (Bad file descriptor) [pid 3910] close(26) = -1 EBADF (Bad file descriptor) [pid 3910] close(27) = -1 EBADF (Bad file descriptor) [pid 3910] close(28) = -1 EBADF (Bad file descriptor) [pid 3910] close(29) = -1 EBADF (Bad file descriptor) [pid 3910] exit_group(0) = ? [pid 3910] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 276 ./strace-static-x86_64: Process 3911 attached [pid 3911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3911] setpgid(0, 0) = 0 [pid 3911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3911] write(3, "1000", 4) = 4 [pid 3911] close(3) = 0 [pid 3911] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3911] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3911] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3911] write(4, "5", 1) = 1 [ 126.591760][ T3911] FAULT_INJECTION: forcing a failure. [ 126.591760][ T3911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.605046][ T3911] CPU: 1 PID: 3911 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 126.615210][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.625278][ T3911] Call Trace: [ 126.628551][ T3911] [ 126.631483][ T3911] dump_stack_lvl+0xcd/0x134 [ 126.636093][ T3911] should_fail.cold+0x5/0xa [ 126.640601][ T3911] prepare_alloc_pages+0x17b/0x570 [ 126.645709][ T3911] __alloc_pages+0x12f/0x500 [ 126.650290][ T3911] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 126.657057][ T3911] ? ___slab_alloc+0x47e/0xf20 [ 126.661813][ T3911] alloc_pages+0x1aa/0x310 [ 126.666217][ T3911] ? mark_held_locks+0x9f/0xe0 [ 126.670978][ T3911] allocate_slab+0x26c/0x3c0 [ 126.675576][ T3911] ___slab_alloc+0x8df/0xf20 [ 126.680158][ T3911] ? napi_skb_cache_get+0xeb/0x170 [ 126.685261][ T3911] ? mark_held_locks+0x9f/0xe0 [ 126.690026][ T3911] kmem_cache_alloc_bulk+0x21c/0x720 [ 126.695495][ T3911] napi_skb_cache_get+0xeb/0x170 [ 126.700434][ T3911] __alloc_skb+0x9b/0x340 [ 126.704753][ T3911] ? __lock_acquire+0xbca/0x56c0 [ 126.709685][ T3911] __napi_alloc_skb+0x70/0x310 [ 126.714442][ T3911] napi_get_frags+0x5e/0x140 [ 126.719021][ T3911] tun_get_user+0xa07/0x3b00 [ 126.723618][ T3911] ? tun_build_skb+0x1170/0x1170 [ 126.728546][ T3911] ? lock_downgrade+0x6e0/0x6e0 [ 126.733391][ T3911] ? find_held_lock+0x2d/0x110 [ 126.738155][ T3911] tun_chr_write_iter+0xdb/0x200 [ 126.743085][ T3911] do_iter_readv_writev+0x3d1/0x640 [ 126.748273][ T3911] ? new_sync_write+0x560/0x560 [ 126.753116][ T3911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 126.759343][ T3911] ? security_file_permission+0xab/0xd0 [ 126.764978][ T3911] do_iter_write+0x182/0x700 [ 126.769657][ T3911] ? import_iovec+0x10c/0x150 [ 126.774335][ T3911] vfs_writev+0x1aa/0x630 [ 126.778688][ T3911] ? vfs_iter_write+0xa0/0xa0 [ 126.783359][ T3911] ? do_raw_spin_lock+0x120/0x2a0 [ 126.788379][ T3911] ? rwlock_bug.part.0+0x90/0x90 [ 126.793310][ T3911] ? _raw_spin_lock_irq+0x41/0x50 [ 126.798333][ T3911] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 126.804745][ T3911] ? find_held_lock+0x2d/0x110 [ 126.809508][ T3911] ? ptrace_notify+0xfa/0x140 [ 126.814181][ T3911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 126.820415][ T3911] ? __fget_light+0x20f/0x270 [ 126.825091][ T3911] do_writev+0x133/0x2f0 [ 126.829329][ T3911] ? vfs_writev+0x630/0x630 [ 126.833830][ T3911] ? lockdep_hardirqs_on+0x79/0x100 [ 126.839027][ T3911] ? _raw_spin_unlock_irq+0x2a/0x40 [ 126.844222][ T3911] ? ptrace_notify+0xfa/0x140 [ 126.848899][ T3911] do_syscall_64+0x35/0xb0 [ 126.853315][ T3911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 126.859203][ T3911] RIP: 0033:0x7fc6cd2b4c39 [ 126.863615][ T3911] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 126.883653][ T3911] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3911] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 126.892067][ T3911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 126.900036][ T3911] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 126.907995][ T3911] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 126.915950][ T3911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 126.923903][ T3911] R13: 00000000000f4240 R14: 000000000001ed3a R15: 00007ffdc49a5924 [ 126.931878][ T3911] [pid 3911] close(3) = 0 [pid 3911] close(4) = 0 [pid 3911] close(5) = -1 EBADF (Bad file descriptor) [pid 3911] close(6) = -1 EBADF (Bad file descriptor) [pid 3911] close(7) = -1 EBADF (Bad file descriptor) [pid 3911] close(8) = -1 EBADF (Bad file descriptor) [pid 3911] close(9) = -1 EBADF (Bad file descriptor) [pid 3911] close(10) = -1 EBADF (Bad file descriptor) [pid 3911] close(11) = -1 EBADF (Bad file descriptor) [pid 3911] close(12) = -1 EBADF (Bad file descriptor) [pid 3911] close(13) = -1 EBADF (Bad file descriptor) [pid 3911] close(14) = -1 EBADF (Bad file descriptor) [pid 3911] close(15) = -1 EBADF (Bad file descriptor) [pid 3911] close(16) = -1 EBADF (Bad file descriptor) [pid 3911] close(17) = -1 EBADF (Bad file descriptor) [pid 3911] close(18) = -1 EBADF (Bad file descriptor) [pid 3911] close(19) = -1 EBADF (Bad file descriptor) [pid 3911] close(20) = -1 EBADF (Bad file descriptor) [pid 3911] close(21) = -1 EBADF (Bad file descriptor) [pid 3911] close(22) = -1 EBADF (Bad file descriptor) [pid 3911] close(23) = -1 EBADF (Bad file descriptor) [pid 3911] close(24) = -1 EBADF (Bad file descriptor) [pid 3911] close(25) = -1 EBADF (Bad file descriptor) [pid 3911] close(26) = -1 EBADF (Bad file descriptor) [pid 3911] close(27) = -1 EBADF (Bad file descriptor) [pid 3911] close(28) = -1 EBADF (Bad file descriptor) [pid 3911] close(29) = -1 EBADF (Bad file descriptor) [pid 3911] exit_group(0) = ? [pid 3911] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=276, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3912 attached , child_tidptr=0x5555570bd5d0) = 277 [pid 3912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3912] setpgid(0, 0) = 0 [pid 3912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3912] write(3, "1000", 4) = 4 [pid 3912] close(3) = 0 [pid 3912] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3912] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3912] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3912] write(4, "5", 1) = 1 [pid 3912] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 127.024764][ T3912] FAULT_INJECTION: forcing a failure. [ 127.024764][ T3912] name failslab, interval 1, probability 0, space 0, times 0 [ 127.037382][ T3912] CPU: 0 PID: 3912 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 127.047534][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.057600][ T3912] Call Trace: [ 127.060878][ T3912] [ 127.063802][ T3912] dump_stack_lvl+0xcd/0x134 [ 127.068619][ T3912] should_fail.cold+0x5/0xa [ 127.073122][ T3912] should_failslab+0x5/0x10 [ 127.077624][ T3912] kmem_cache_alloc_trace+0x60/0x3f0 [ 127.082945][ T3912] ? ref_tracker_alloc+0x14c/0x550 [ 127.088053][ T3912] ref_tracker_alloc+0x14c/0x550 [ 127.092983][ T3912] ? ref_tracker_free+0x6b0/0x6b0 [ 127.098007][ T3912] ? lock_release+0x720/0x720 [ 127.102676][ T3912] ? do_raw_spin_lock+0x120/0x2a0 [ 127.107694][ T3912] ? rwlock_bug.part.0+0x90/0x90 [ 127.112630][ T3912] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 127.118088][ T3912] linkwatch_fire_event+0x202/0x260 [ 127.123286][ T3912] netif_carrier_off+0x96/0xb0 [ 127.128075][ T3912] __tun_detach+0xfe7/0x13e0 [ 127.132678][ T3912] tun_chr_close+0xc4/0x180 [ 127.137192][ T3912] __fput+0x277/0x9d0 [ 127.141183][ T3912] ? __tun_detach+0x13e0/0x13e0 [ 127.146029][ T3912] task_work_run+0xdd/0x1a0 [ 127.150614][ T3912] ptrace_notify+0x114/0x140 [ 127.155196][ T3912] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 127.161434][ T3912] syscall_exit_to_user_mode+0x9/0x60 [ 127.166797][ T3912] do_syscall_64+0x42/0xb0 [ 127.171208][ T3912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.177095][ T3912] RIP: 0033:0x7fc6cd2767a3 [ 127.181500][ T3912] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 127.201099][ T3912] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.209506][ T3912] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 127.217485][ T3912] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 127.225446][ T3912] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 127.233415][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 127.241386][ T3912] R13: 00000000000f4240 R14: 000000000001ee62 R15: 00007ffdc49a5924 [ 127.249363][ T3912] [pid 3912] close(3) = 0 [pid 3912] close(4) = 0 [pid 3912] close(5) = -1 EBADF (Bad file descriptor) [pid 3912] close(6) = -1 EBADF (Bad file descriptor) [pid 3912] close(7) = -1 EBADF (Bad file descriptor) [pid 3912] close(8) = -1 EBADF (Bad file descriptor) [pid 3912] close(9) = -1 EBADF (Bad file descriptor) [pid 3912] close(10) = -1 EBADF (Bad file descriptor) [pid 3912] close(11) = -1 EBADF (Bad file descriptor) [pid 3912] close(12) = -1 EBADF (Bad file descriptor) [pid 3912] close(13) = -1 EBADF (Bad file descriptor) [pid 3912] close(14) = -1 EBADF (Bad file descriptor) [pid 3912] close(15) = -1 EBADF (Bad file descriptor) [pid 3912] close(16) = -1 EBADF (Bad file descriptor) [pid 3912] close(17) = -1 EBADF (Bad file descriptor) [pid 3912] close(18) = -1 EBADF (Bad file descriptor) [pid 3912] close(19) = -1 EBADF (Bad file descriptor) [pid 3912] close(20) = -1 EBADF (Bad file descriptor) [pid 3912] close(21) = -1 EBADF (Bad file descriptor) [pid 3912] close(22) = -1 EBADF (Bad file descriptor) [pid 3912] close(23) = -1 EBADF (Bad file descriptor) [pid 3912] close(24) = -1 EBADF (Bad file descriptor) [pid 3912] close(25) = -1 EBADF (Bad file descriptor) [pid 3912] close(26) = -1 EBADF (Bad file descriptor) [pid 3912] close(27) = -1 EBADF (Bad file descriptor) [pid 3912] close(28) = -1 EBADF (Bad file descriptor) [pid 3912] close(29) = -1 EBADF (Bad file descriptor) [pid 3912] exit_group(0) = ? [pid 3912] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=277, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 278 ./strace-static-x86_64: Process 3913 attached [pid 3913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3913] setpgid(0, 0) = 0 [pid 3913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3913] write(3, "1000", 4) = 4 [pid 3913] close(3) = 0 [pid 3913] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3913] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3913] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3913] write(4, "5", 1) = 1 [pid 3913] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 127.323948][ T3913] FAULT_INJECTION: forcing a failure. [ 127.323948][ T3913] name failslab, interval 1, probability 0, space 0, times 0 [ 127.337317][ T3913] CPU: 0 PID: 3913 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 127.347841][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.357895][ T3913] Call Trace: [ 127.361179][ T3913] [ 127.364112][ T3913] dump_stack_lvl+0xcd/0x134 [ 127.368719][ T3913] should_fail.cold+0x5/0xa [ 127.373314][ T3913] should_failslab+0x5/0x10 [ 127.377848][ T3913] kmem_cache_alloc_trace+0x60/0x3f0 [ 127.383128][ T3913] ? ref_tracker_alloc+0x14c/0x550 [ 127.388253][ T3913] ref_tracker_alloc+0x14c/0x550 [ 127.393189][ T3913] ? ref_tracker_free+0x6b0/0x6b0 [ 127.398206][ T3913] ? lock_release+0x720/0x720 [ 127.402881][ T3913] ? do_raw_spin_lock+0x120/0x2a0 [ 127.407904][ T3913] ? rwlock_bug.part.0+0x90/0x90 [ 127.412841][ T3913] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 127.418226][ T3913] linkwatch_fire_event+0x202/0x260 [ 127.423434][ T3913] netif_carrier_off+0x96/0xb0 [ 127.428201][ T3913] __tun_detach+0xfe7/0x13e0 [ 127.432821][ T3913] tun_chr_close+0xc4/0x180 [ 127.437325][ T3913] __fput+0x277/0x9d0 [ 127.441467][ T3913] ? __tun_detach+0x13e0/0x13e0 [ 127.446330][ T3913] task_work_run+0xdd/0x1a0 [ 127.450833][ T3913] ptrace_notify+0x114/0x140 [ 127.455417][ T3913] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 127.461661][ T3913] syscall_exit_to_user_mode+0x9/0x60 [ 127.467036][ T3913] do_syscall_64+0x42/0xb0 [ 127.471449][ T3913] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.477338][ T3913] RIP: 0033:0x7fc6cd2767a3 [ 127.481751][ T3913] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 127.501356][ T3913] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.509967][ T3913] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3913] close(3) = 0 [pid 3913] close(4) = 0 [pid 3913] close(5) = -1 EBADF (Bad file descriptor) [pid 3913] close(6) = -1 EBADF (Bad file descriptor) [pid 3913] close(7) = -1 EBADF (Bad file descriptor) [pid 3913] close(8) = -1 EBADF (Bad file descriptor) [pid 3913] close(9) = -1 EBADF (Bad file descriptor) [pid 3913] close(10) = -1 EBADF (Bad file descriptor) [pid 3913] close(11) = -1 EBADF (Bad file descriptor) [pid 3913] close(12) = -1 EBADF (Bad file descriptor) [pid 3913] close(13) = -1 EBADF (Bad file descriptor) [pid 3913] close(14) = -1 EBADF (Bad file descriptor) [pid 3913] close(15) = -1 EBADF (Bad file descriptor) [pid 3913] close(16) = -1 EBADF (Bad file descriptor) [pid 3913] close(17) = -1 EBADF (Bad file descriptor) [pid 3913] close(18) = -1 EBADF (Bad file descriptor) [pid 3913] close(19) = -1 EBADF (Bad file descriptor) [pid 3913] close(20) = -1 EBADF (Bad file descriptor) [pid 3913] close(21) = -1 EBADF (Bad file descriptor) [pid 3913] close(22) = -1 EBADF (Bad file descriptor) [ 127.517938][ T3913] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 127.525899][ T3913] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 127.533876][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 127.541923][ T3913] R13: 00000000000f4240 R14: 000000000001f010 R15: 00007ffdc49a5924 [ 127.549901][ T3913] [pid 3913] close(23) = -1 EBADF (Bad file descriptor) [pid 3913] close(24) = -1 EBADF (Bad file descriptor) [pid 3913] close(25) = -1 EBADF (Bad file descriptor) [pid 3913] close(26) = -1 EBADF (Bad file descriptor) [pid 3913] close(27) = -1 EBADF (Bad file descriptor) [pid 3913] close(28) = -1 EBADF (Bad file descriptor) [pid 3913] close(29) = -1 EBADF (Bad file descriptor) [pid 3913] exit_group(0) = ? [pid 3913] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=278, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3914 attached [pid 3914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3914] setpgid(0, 0) = 0 [pid 3914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 279 [pid 3914] write(3, "1000", 4) = 4 [pid 3914] close(3) = 0 [pid 3914] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3914] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3914] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3914] write(4, "5", 1) = 1 [pid 3914] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 127.620034][ T3914] FAULT_INJECTION: forcing a failure. [ 127.620034][ T3914] name failslab, interval 1, probability 0, space 0, times 0 [ 127.632761][ T3914] CPU: 0 PID: 3914 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 127.642899][ T3914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.652941][ T3914] Call Trace: [ 127.656205][ T3914] [ 127.659113][ T3914] dump_stack_lvl+0xcd/0x134 [ 127.663689][ T3914] should_fail.cold+0x5/0xa [ 127.668175][ T3914] should_failslab+0x5/0x10 [ 127.672662][ T3914] kmem_cache_alloc_trace+0x60/0x3f0 [ 127.677932][ T3914] ? ref_tracker_alloc+0x14c/0x550 [ 127.683031][ T3914] ref_tracker_alloc+0x14c/0x550 [ 127.687946][ T3914] ? ref_tracker_free+0x6b0/0x6b0 [ 127.692945][ T3914] ? lock_release+0x720/0x720 [ 127.697614][ T3914] ? do_raw_spin_lock+0x120/0x2a0 [ 127.702651][ T3914] ? rwlock_bug.part.0+0x90/0x90 [ 127.707579][ T3914] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 127.712938][ T3914] linkwatch_fire_event+0x202/0x260 [ 127.718128][ T3914] netif_carrier_off+0x96/0xb0 [ 127.722883][ T3914] __tun_detach+0xfe7/0x13e0 [ 127.727463][ T3914] tun_chr_close+0xc4/0x180 [ 127.731949][ T3914] __fput+0x277/0x9d0 [ 127.735915][ T3914] ? __tun_detach+0x13e0/0x13e0 [ 127.740757][ T3914] task_work_run+0xdd/0x1a0 [ 127.745253][ T3914] ptrace_notify+0x114/0x140 [ 127.749843][ T3914] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 127.756080][ T3914] syscall_exit_to_user_mode+0x9/0x60 [ 127.761437][ T3914] do_syscall_64+0x42/0xb0 [ 127.765844][ T3914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.771724][ T3914] RIP: 0033:0x7fc6cd2767a3 [ 127.776122][ T3914] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 127.795714][ T3914] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.804115][ T3914] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 127.812088][ T3914] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3914] close(3) = 0 [pid 3914] close(4) = 0 [pid 3914] close(5) = -1 EBADF (Bad file descriptor) [pid 3914] close(6) = -1 EBADF (Bad file descriptor) [pid 3914] close(7) = -1 EBADF (Bad file descriptor) [pid 3914] close(8) = -1 EBADF (Bad file descriptor) [pid 3914] close(9) = -1 EBADF (Bad file descriptor) [pid 3914] close(10) = -1 EBADF (Bad file descriptor) [pid 3914] close(11) = -1 EBADF (Bad file descriptor) [pid 3914] close(12) = -1 EBADF (Bad file descriptor) [pid 3914] close(13) = -1 EBADF (Bad file descriptor) [pid 3914] close(14) = -1 EBADF (Bad file descriptor) [pid 3914] close(15) = -1 EBADF (Bad file descriptor) [pid 3914] close(16) = -1 EBADF (Bad file descriptor) [pid 3914] close(17) = -1 EBADF (Bad file descriptor) [pid 3914] close(18) = -1 EBADF (Bad file descriptor) [pid 3914] close(19) = -1 EBADF (Bad file descriptor) [pid 3914] close(20) = -1 EBADF (Bad file descriptor) [pid 3914] close(21) = -1 EBADF (Bad file descriptor) [pid 3914] close(22) = -1 EBADF (Bad file descriptor) [pid 3914] close(23) = -1 EBADF (Bad file descriptor) [pid 3914] close(24) = -1 EBADF (Bad file descriptor) [pid 3914] close(25) = -1 EBADF (Bad file descriptor) [pid 3914] close(26) = -1 EBADF (Bad file descriptor) [ 127.820048][ T3914] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 127.828011][ T3914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 127.835964][ T3914] R13: 00000000000f4240 R14: 000000000001f13d R15: 00007ffdc49a5924 [ 127.844027][ T3914] [pid 3914] close(27) = -1 EBADF (Bad file descriptor) [pid 3914] close(28) = -1 EBADF (Bad file descriptor) [pid 3914] close(29) = -1 EBADF (Bad file descriptor) [pid 3914] exit_group(0) = ? [pid 3914] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=279, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 280 ./strace-static-x86_64: Process 3915 attached [pid 3915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3915] setpgid(0, 0) = 0 [pid 3915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3915] write(3, "1000", 4) = 4 [pid 3915] close(3) = 0 [pid 3915] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3915] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3915] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3915] write(4, "5", 1) = 1 [pid 3915] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 127.912590][ T3915] FAULT_INJECTION: forcing a failure. [ 127.912590][ T3915] name failslab, interval 1, probability 0, space 0, times 0 [ 127.925244][ T3915] CPU: 0 PID: 3915 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 127.935399][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.945461][ T3915] Call Trace: [ 127.948761][ T3915] [ 127.951685][ T3915] dump_stack_lvl+0xcd/0x134 [ 127.956283][ T3915] should_fail.cold+0x5/0xa [ 127.960828][ T3915] should_failslab+0x5/0x10 [ 127.965334][ T3915] kmem_cache_alloc_trace+0x60/0x3f0 [ 127.970622][ T3915] ? ref_tracker_alloc+0x14c/0x550 [ 127.975741][ T3915] ref_tracker_alloc+0x14c/0x550 [ 127.980674][ T3915] ? ref_tracker_free+0x6b0/0x6b0 [ 127.985685][ T3915] ? lock_release+0x720/0x720 [ 127.990354][ T3915] ? do_raw_spin_lock+0x120/0x2a0 [ 127.995370][ T3915] ? rwlock_bug.part.0+0x90/0x90 [ 128.000305][ T3915] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 128.005679][ T3915] linkwatch_fire_event+0x202/0x260 [ 128.010878][ T3915] netif_carrier_off+0x96/0xb0 [ 128.015640][ T3915] __tun_detach+0xfe7/0x13e0 [ 128.020236][ T3915] tun_chr_close+0xc4/0x180 [ 128.024755][ T3915] __fput+0x277/0x9d0 [ 128.028728][ T3915] ? __tun_detach+0x13e0/0x13e0 [ 128.033575][ T3915] task_work_run+0xdd/0x1a0 [ 128.038078][ T3915] ptrace_notify+0x114/0x140 [ 128.042661][ T3915] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 128.048902][ T3915] syscall_exit_to_user_mode+0x9/0x60 [ 128.054361][ T3915] do_syscall_64+0x42/0xb0 [ 128.058784][ T3915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 128.064680][ T3915] RIP: 0033:0x7fc6cd2767a3 [ 128.069094][ T3915] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 128.088794][ T3915] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 128.097231][ T3915] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 128.105204][ T3915] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 128.113170][ T3915] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 128.121144][ T3915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 128.129115][ T3915] R13: 00000000000f4240 R14: 000000000001f269 R15: 00007ffdc49a5924 [ 128.137097][ T3915] [pid 3915] close(3) = 0 [pid 3915] close(4) = 0 [pid 3915] close(5) = -1 EBADF (Bad file descriptor) [pid 3915] close(6) = -1 EBADF (Bad file descriptor) [pid 3915] close(7) = -1 EBADF (Bad file descriptor) [pid 3915] close(8) = -1 EBADF (Bad file descriptor) [pid 3915] close(9) = -1 EBADF (Bad file descriptor) [pid 3915] close(10) = -1 EBADF (Bad file descriptor) [pid 3915] close(11) = -1 EBADF (Bad file descriptor) [pid 3915] close(12) = -1 EBADF (Bad file descriptor) [pid 3915] close(13) = -1 EBADF (Bad file descriptor) [pid 3915] close(14) = -1 EBADF (Bad file descriptor) [pid 3915] close(15) = -1 EBADF (Bad file descriptor) [pid 3915] close(16) = -1 EBADF (Bad file descriptor) [pid 3915] close(17) = -1 EBADF (Bad file descriptor) [pid 3915] close(18) = -1 EBADF (Bad file descriptor) [pid 3915] close(19) = -1 EBADF (Bad file descriptor) [pid 3915] close(20) = -1 EBADF (Bad file descriptor) [pid 3915] close(21) = -1 EBADF (Bad file descriptor) [pid 3915] close(22) = -1 EBADF (Bad file descriptor) [pid 3915] close(23) = -1 EBADF (Bad file descriptor) [pid 3915] close(24) = -1 EBADF (Bad file descriptor) [pid 3915] close(25) = -1 EBADF (Bad file descriptor) [pid 3915] close(26) = -1 EBADF (Bad file descriptor) [pid 3915] close(27) = -1 EBADF (Bad file descriptor) [pid 3915] close(28) = -1 EBADF (Bad file descriptor) [pid 3915] close(29) = -1 EBADF (Bad file descriptor) [pid 3915] exit_group(0) = ? [pid 3915] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=280, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 281 ./strace-static-x86_64: Process 3916 attached [pid 3916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3916] setpgid(0, 0) = 0 [pid 3916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3916] write(3, "1000", 4) = 4 [pid 3916] close(3) = 0 [pid 3916] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3916] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3916] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3916] write(4, "5", 1) = 1 [ 128.218306][ T3916] FAULT_INJECTION: forcing a failure. [ 128.218306][ T3916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.231587][ T3916] CPU: 0 PID: 3916 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 128.241736][ T3916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.251799][ T3916] Call Trace: [ 128.255080][ T3916] [ 128.258024][ T3916] dump_stack_lvl+0xcd/0x134 [ 128.262624][ T3916] should_fail.cold+0x5/0xa [ 128.267405][ T3916] prepare_alloc_pages+0x17b/0x570 [ 128.272544][ T3916] __alloc_pages+0x12f/0x500 [ 128.277162][ T3916] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 128.283937][ T3916] ? ___slab_alloc+0x47e/0xf20 [ 128.288712][ T3916] alloc_pages+0x1aa/0x310 [ 128.293131][ T3916] ? mark_held_locks+0x9f/0xe0 [ 128.297893][ T3916] allocate_slab+0x26c/0x3c0 [ 128.302477][ T3916] ___slab_alloc+0x8df/0xf20 [ 128.307058][ T3916] ? napi_skb_cache_get+0xeb/0x170 [ 128.312168][ T3916] ? mark_held_locks+0x9f/0xe0 [ 128.316933][ T3916] kmem_cache_alloc_bulk+0x21c/0x720 [ 128.322217][ T3916] napi_skb_cache_get+0xeb/0x170 [ 128.327153][ T3916] __alloc_skb+0x9b/0x340 [ 128.331483][ T3916] ? __lock_acquire+0xbca/0x56c0 [ 128.336532][ T3916] __napi_alloc_skb+0x70/0x310 [ 128.341302][ T3916] napi_get_frags+0x5e/0x140 [ 128.345884][ T3916] tun_get_user+0xa07/0x3b00 [ 128.350482][ T3916] ? tun_build_skb+0x1170/0x1170 [ 128.355416][ T3916] ? lock_downgrade+0x6e0/0x6e0 [ 128.360259][ T3916] ? find_held_lock+0x2d/0x110 [ 128.365019][ T3916] tun_chr_write_iter+0xdb/0x200 [ 128.369949][ T3916] do_iter_readv_writev+0x3d1/0x640 [ 128.375138][ T3916] ? new_sync_write+0x560/0x560 [ 128.380065][ T3916] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 128.386295][ T3916] ? security_file_permission+0xab/0xd0 [ 128.391841][ T3916] do_iter_write+0x182/0x700 [ 128.396427][ T3916] ? import_iovec+0x10c/0x150 [ 128.401111][ T3916] vfs_writev+0x1aa/0x630 [ 128.405529][ T3916] ? vfs_iter_write+0xa0/0xa0 [ 128.410194][ T3916] ? do_raw_spin_lock+0x120/0x2a0 [ 128.415214][ T3916] ? rwlock_bug.part.0+0x90/0x90 [ 128.420146][ T3916] ? _raw_spin_lock_irq+0x41/0x50 [ 128.425172][ T3916] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 128.431412][ T3916] ? find_held_lock+0x2d/0x110 [ 128.436173][ T3916] ? ptrace_notify+0xfa/0x140 [ 128.440844][ T3916] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 128.447075][ T3916] ? __fget_light+0x20f/0x270 [ 128.451745][ T3916] do_writev+0x133/0x2f0 [ 128.455981][ T3916] ? vfs_writev+0x630/0x630 [ 128.460467][ T3916] ? lockdep_hardirqs_on+0x79/0x100 [ 128.465685][ T3916] ? _raw_spin_unlock_irq+0x2a/0x40 [ 128.470871][ T3916] ? ptrace_notify+0xfa/0x140 [ 128.475629][ T3916] do_syscall_64+0x35/0xb0 [ 128.480122][ T3916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 128.486002][ T3916] RIP: 0033:0x7fc6cd2b4c39 [ 128.490403][ T3916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 128.509998][ T3916] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [pid 3916] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 128.518401][ T3916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 128.526360][ T3916] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 128.534316][ T3916] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 128.542273][ T3916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 128.550230][ T3916] R13: 00000000000f4240 R14: 000000000001f38b R15: 00007ffdc49a5924 [ 128.558198][ T3916] [pid 3916] close(3) = 0 [pid 3916] close(4) = 0 [pid 3916] close(5) = -1 EBADF (Bad file descriptor) [pid 3916] close(6) = -1 EBADF (Bad file descriptor) [pid 3916] close(7) = -1 EBADF (Bad file descriptor) [pid 3916] close(8) = -1 EBADF (Bad file descriptor) [pid 3916] close(9) = -1 EBADF (Bad file descriptor) [pid 3916] close(10) = -1 EBADF (Bad file descriptor) [pid 3916] close(11) = -1 EBADF (Bad file descriptor) [pid 3916] close(12) = -1 EBADF (Bad file descriptor) [pid 3916] close(13) = -1 EBADF (Bad file descriptor) [pid 3916] close(14) = -1 EBADF (Bad file descriptor) [pid 3916] close(15) = -1 EBADF (Bad file descriptor) [pid 3916] close(16) = -1 EBADF (Bad file descriptor) [pid 3916] close(17) = -1 EBADF (Bad file descriptor) [pid 3916] close(18) = -1 EBADF (Bad file descriptor) [pid 3916] close(19) = -1 EBADF (Bad file descriptor) [pid 3916] close(20) = -1 EBADF (Bad file descriptor) [pid 3916] close(21) = -1 EBADF (Bad file descriptor) [pid 3916] close(22) = -1 EBADF (Bad file descriptor) [pid 3916] close(23) = -1 EBADF (Bad file descriptor) [pid 3916] close(24) = -1 EBADF (Bad file descriptor) [pid 3916] close(25) = -1 EBADF (Bad file descriptor) [pid 3916] close(26) = -1 EBADF (Bad file descriptor) [pid 3916] close(27) = -1 EBADF (Bad file descriptor) [pid 3916] close(28) = -1 EBADF (Bad file descriptor) [pid 3916] close(29) = -1 EBADF (Bad file descriptor) [pid 3916] exit_group(0) = ? [pid 3916] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=281, si_uid=0, si_status=0, si_utime=0, si_stime=34} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3917 attached , child_tidptr=0x5555570bd5d0) = 282 [pid 3917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3917] setpgid(0, 0) = 0 [pid 3917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3917] write(3, "1000", 4) = 4 [pid 3917] close(3) = 0 [pid 3917] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3917] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3917] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3917] write(4, "5", 1) = 1 [pid 3917] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 128.626614][ T3917] FAULT_INJECTION: forcing a failure. [ 128.626614][ T3917] name failslab, interval 1, probability 0, space 0, times 0 [ 128.639247][ T3917] CPU: 0 PID: 3917 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 128.649384][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.659420][ T3917] Call Trace: [ 128.662678][ T3917] [ 128.665588][ T3917] dump_stack_lvl+0xcd/0x134 [ 128.670170][ T3917] should_fail.cold+0x5/0xa [ 128.674657][ T3917] should_failslab+0x5/0x10 [ 128.679143][ T3917] kmem_cache_alloc_trace+0x60/0x3f0 [ 128.684408][ T3917] ? ref_tracker_alloc+0x14c/0x550 [ 128.689520][ T3917] ref_tracker_alloc+0x14c/0x550 [ 128.694477][ T3917] ? ref_tracker_free+0x6b0/0x6b0 [ 128.699490][ T3917] ? lock_release+0x720/0x720 [ 128.704164][ T3917] ? do_raw_spin_lock+0x120/0x2a0 [ 128.709194][ T3917] ? rwlock_bug.part.0+0x90/0x90 [ 128.714128][ T3917] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 128.719510][ T3917] linkwatch_fire_event+0x202/0x260 [ 128.724712][ T3917] netif_carrier_off+0x96/0xb0 [ 128.729482][ T3917] __tun_detach+0xfe7/0x13e0 [ 128.734103][ T3917] tun_chr_close+0xc4/0x180 [ 128.738600][ T3917] __fput+0x277/0x9d0 [ 128.742574][ T3917] ? __tun_detach+0x13e0/0x13e0 [ 128.747419][ T3917] task_work_run+0xdd/0x1a0 [ 128.751923][ T3917] ptrace_notify+0x114/0x140 [ 128.756524][ T3917] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 128.762773][ T3917] syscall_exit_to_user_mode+0x9/0x60 [ 128.768140][ T3917] do_syscall_64+0x42/0xb0 [ 128.772553][ T3917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 128.778438][ T3917] RIP: 0033:0x7fc6cd2767a3 [ 128.782839][ T3917] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 128.802461][ T3917] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 128.810895][ T3917] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 128.818862][ T3917] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3917] close(3) = 0 [pid 3917] close(4) = 0 [pid 3917] close(5) = -1 EBADF (Bad file descriptor) [pid 3917] close(6) = -1 EBADF (Bad file descriptor) [ 128.826831][ T3917] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 128.834800][ T3917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 128.842765][ T3917] R13: 00000000000f4240 R14: 000000000001f4c1 R15: 00007ffdc49a5924 [ 128.850744][ T3917] [pid 3917] close(7) = -1 EBADF (Bad file descriptor) [pid 3917] close(8) = -1 EBADF (Bad file descriptor) [pid 3917] close(9) = -1 EBADF (Bad file descriptor) [pid 3917] close(10) = -1 EBADF (Bad file descriptor) [pid 3917] close(11) = -1 EBADF (Bad file descriptor) [pid 3917] close(12) = -1 EBADF (Bad file descriptor) [pid 3917] close(13) = -1 EBADF (Bad file descriptor) [pid 3917] close(14) = -1 EBADF (Bad file descriptor) [pid 3917] close(15) = -1 EBADF (Bad file descriptor) [pid 3917] close(16) = -1 EBADF (Bad file descriptor) [pid 3917] close(17) = -1 EBADF (Bad file descriptor) [pid 3917] close(18) = -1 EBADF (Bad file descriptor) [pid 3917] close(19) = -1 EBADF (Bad file descriptor) [pid 3917] close(20) = -1 EBADF (Bad file descriptor) [pid 3917] close(21) = -1 EBADF (Bad file descriptor) [pid 3917] close(22) = -1 EBADF (Bad file descriptor) [pid 3917] close(23) = -1 EBADF (Bad file descriptor) [pid 3917] close(24) = -1 EBADF (Bad file descriptor) [pid 3917] close(25) = -1 EBADF (Bad file descriptor) [pid 3917] close(26) = -1 EBADF (Bad file descriptor) [pid 3917] close(27) = -1 EBADF (Bad file descriptor) [pid 3917] close(28) = -1 EBADF (Bad file descriptor) [pid 3917] close(29) = -1 EBADF (Bad file descriptor) [pid 3917] exit_group(0) = ? [pid 3917] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=282, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 283 ./strace-static-x86_64: Process 3918 attached [pid 3918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3918] setpgid(0, 0) = 0 [pid 3918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3918] write(3, "1000", 4) = 4 [pid 3918] close(3) = 0 [pid 3918] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3918] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3918] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3918] write(4, "5", 1) = 1 [pid 3918] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 128.929088][ T3918] FAULT_INJECTION: forcing a failure. [ 128.929088][ T3918] name failslab, interval 1, probability 0, space 0, times 0 [ 128.941710][ T3918] CPU: 1 PID: 3918 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 128.951853][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.961929][ T3918] Call Trace: [ 128.965205][ T3918] [ 128.968120][ T3918] dump_stack_lvl+0xcd/0x134 [ 128.972714][ T3918] should_fail.cold+0x5/0xa [ 128.977400][ T3918] should_failslab+0x5/0x10 [ 128.981977][ T3918] kmem_cache_alloc_trace+0x60/0x3f0 [ 128.987339][ T3918] ? ref_tracker_alloc+0x14c/0x550 [ 128.992446][ T3918] ref_tracker_alloc+0x14c/0x550 [ 128.997373][ T3918] ? ref_tracker_free+0x6b0/0x6b0 [ 129.002471][ T3918] ? lock_release+0x720/0x720 [ 129.007137][ T3918] ? do_raw_spin_lock+0x120/0x2a0 [ 129.012150][ T3918] ? rwlock_bug.part.0+0x90/0x90 [ 129.017085][ T3918] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 129.022455][ T3918] linkwatch_fire_event+0x202/0x260 [ 129.027651][ T3918] netif_carrier_off+0x96/0xb0 [ 129.032408][ T3918] __tun_detach+0xfe7/0x13e0 [ 129.037006][ T3918] tun_chr_close+0xc4/0x180 [ 129.041500][ T3918] __fput+0x277/0x9d0 [ 129.045475][ T3918] ? __tun_detach+0x13e0/0x13e0 [ 129.050327][ T3918] task_work_run+0xdd/0x1a0 [ 129.054829][ T3918] ptrace_notify+0x114/0x140 [ 129.059435][ T3918] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 129.065679][ T3918] syscall_exit_to_user_mode+0x9/0x60 [ 129.071041][ T3918] do_syscall_64+0x42/0xb0 [ 129.075452][ T3918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.081336][ T3918] RIP: 0033:0x7fc6cd2767a3 [ 129.085739][ T3918] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 129.105342][ T3918] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 129.113759][ T3918] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 129.121732][ T3918] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3918] close(3) = 0 [pid 3918] close(4) = 0 [pid 3918] close(5) = -1 EBADF (Bad file descriptor) [pid 3918] close(6) = -1 EBADF (Bad file descriptor) [pid 3918] close(7) = -1 EBADF (Bad file descriptor) [pid 3918] close(8) = -1 EBADF (Bad file descriptor) [pid 3918] close(9) = -1 EBADF (Bad file descriptor) [pid 3918] close(10) = -1 EBADF (Bad file descriptor) [pid 3918] close(11) = -1 EBADF (Bad file descriptor) [pid 3918] close(12) = -1 EBADF (Bad file descriptor) [pid 3918] close(13) = -1 EBADF (Bad file descriptor) [pid 3918] close(14) = -1 EBADF (Bad file descriptor) [pid 3918] close(15) = -1 EBADF (Bad file descriptor) [pid 3918] close(16) = -1 EBADF (Bad file descriptor) [pid 3918] close(17) = -1 EBADF (Bad file descriptor) [pid 3918] close(18) = -1 EBADF (Bad file descriptor) [ 129.129701][ T3918] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 129.137664][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 129.145621][ T3918] R13: 00000000000f4240 R14: 000000000001f656 R15: 00007ffdc49a5924 [ 129.153595][ T3918] [pid 3918] close(19) = -1 EBADF (Bad file descriptor) [pid 3918] close(20) = -1 EBADF (Bad file descriptor) [pid 3918] close(21) = -1 EBADF (Bad file descriptor) [pid 3918] close(22) = -1 EBADF (Bad file descriptor) [pid 3918] close(23) = -1 EBADF (Bad file descriptor) [pid 3918] close(24) = -1 EBADF (Bad file descriptor) [pid 3918] close(25) = -1 EBADF (Bad file descriptor) [pid 3918] close(26) = -1 EBADF (Bad file descriptor) [pid 3918] close(27) = -1 EBADF (Bad file descriptor) [pid 3918] close(28) = -1 EBADF (Bad file descriptor) [pid 3918] close(29) = -1 EBADF (Bad file descriptor) [pid 3918] exit_group(0) = ? [pid 3918] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=283, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 284 ./strace-static-x86_64: Process 3919 attached [pid 3919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3919] setpgid(0, 0) = 0 [pid 3919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3919] write(3, "1000", 4) = 4 [pid 3919] close(3) = 0 [pid 3919] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3919] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3919] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3919] write(4, "5", 1) = 1 [pid 3919] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 129.226586][ T3919] FAULT_INJECTION: forcing a failure. [ 129.226586][ T3919] name failslab, interval 1, probability 0, space 0, times 0 [ 129.239580][ T3919] CPU: 1 PID: 3919 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 129.249832][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.259886][ T3919] Call Trace: [ 129.263171][ T3919] [ 129.266101][ T3919] dump_stack_lvl+0xcd/0x134 [ 129.270697][ T3919] should_fail.cold+0x5/0xa [ 129.275194][ T3919] should_failslab+0x5/0x10 [ 129.279693][ T3919] kmem_cache_alloc_trace+0x60/0x3f0 [ 129.284979][ T3919] ? ref_tracker_alloc+0x14c/0x550 [ 129.290096][ T3919] ref_tracker_alloc+0x14c/0x550 [ 129.295036][ T3919] ? ref_tracker_free+0x6b0/0x6b0 [ 129.300148][ T3919] ? lock_release+0x720/0x720 [ 129.304827][ T3919] ? do_raw_spin_lock+0x120/0x2a0 [ 129.309854][ T3919] ? rwlock_bug.part.0+0x90/0x90 [ 129.314797][ T3919] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 129.320175][ T3919] linkwatch_fire_event+0x202/0x260 [ 129.325388][ T3919] netif_carrier_off+0x96/0xb0 [ 129.330148][ T3919] __tun_detach+0xfe7/0x13e0 [ 129.334740][ T3919] tun_chr_close+0xc4/0x180 [ 129.339240][ T3919] __fput+0x277/0x9d0 [ 129.343219][ T3919] ? __tun_detach+0x13e0/0x13e0 [ 129.348063][ T3919] task_work_run+0xdd/0x1a0 [ 129.352562][ T3919] ptrace_notify+0x114/0x140 [ 129.357144][ T3919] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 129.363471][ T3919] syscall_exit_to_user_mode+0x9/0x60 [ 129.368842][ T3919] do_syscall_64+0x42/0xb0 [ 129.373263][ T3919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.379156][ T3919] RIP: 0033:0x7fc6cd2767a3 [ 129.383561][ T3919] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 129.403163][ T3919] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 129.411579][ T3919] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 129.419549][ T3919] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3919] close(3) = 0 [pid 3919] close(4) = 0 [pid 3919] close(5) = -1 EBADF (Bad file descriptor) [ 129.427511][ T3919] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 129.435465][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 129.443416][ T3919] R13: 00000000000f4240 R14: 000000000001f783 R15: 00007ffdc49a5924 [ 129.451386][ T3919] [pid 3919] close(6) = -1 EBADF (Bad file descriptor) [pid 3919] close(7) = -1 EBADF (Bad file descriptor) [pid 3919] close(8) = -1 EBADF (Bad file descriptor) [pid 3919] close(9) = -1 EBADF (Bad file descriptor) [pid 3919] close(10) = -1 EBADF (Bad file descriptor) [pid 3919] close(11) = -1 EBADF (Bad file descriptor) [pid 3919] close(12) = -1 EBADF (Bad file descriptor) [pid 3919] close(13) = -1 EBADF (Bad file descriptor) [pid 3919] close(14) = -1 EBADF (Bad file descriptor) [pid 3919] close(15) = -1 EBADF (Bad file descriptor) [pid 3919] close(16) = -1 EBADF (Bad file descriptor) [pid 3919] close(17) = -1 EBADF (Bad file descriptor) [pid 3919] close(18) = -1 EBADF (Bad file descriptor) [pid 3919] close(19) = -1 EBADF (Bad file descriptor) [pid 3919] close(20) = -1 EBADF (Bad file descriptor) [pid 3919] close(21) = -1 EBADF (Bad file descriptor) [pid 3919] close(22) = -1 EBADF (Bad file descriptor) [pid 3919] close(23) = -1 EBADF (Bad file descriptor) [pid 3919] close(24) = -1 EBADF (Bad file descriptor) [pid 3919] close(25) = -1 EBADF (Bad file descriptor) [pid 3919] close(26) = -1 EBADF (Bad file descriptor) [pid 3919] close(27) = -1 EBADF (Bad file descriptor) [pid 3919] close(28) = -1 EBADF (Bad file descriptor) [pid 3919] close(29) = -1 EBADF (Bad file descriptor) [pid 3919] exit_group(0) = ? [pid 3919] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=284, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 285 ./strace-static-x86_64: Process 3920 attached [pid 3920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3920] setpgid(0, 0) = 0 [pid 3920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3920] write(3, "1000", 4) = 4 [pid 3920] close(3) = 0 [pid 3920] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3920] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3920] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3920] write(4, "5", 1) = 1 [pid 3920] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 129.530300][ T3920] FAULT_INJECTION: forcing a failure. [ 129.530300][ T3920] name failslab, interval 1, probability 0, space 0, times 0 [ 129.542922][ T3920] CPU: 0 PID: 3920 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 129.553068][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.563114][ T3920] Call Trace: [ 129.566381][ T3920] [ 129.569290][ T3920] dump_stack_lvl+0xcd/0x134 [ 129.573865][ T3920] should_fail.cold+0x5/0xa [ 129.578357][ T3920] should_failslab+0x5/0x10 [ 129.582845][ T3920] kmem_cache_alloc_trace+0x60/0x3f0 [ 129.588115][ T3920] ? ref_tracker_alloc+0x14c/0x550 [ 129.593218][ T3920] ref_tracker_alloc+0x14c/0x550 [ 129.598136][ T3920] ? ref_tracker_free+0x6b0/0x6b0 [ 129.603140][ T3920] ? lock_release+0x720/0x720 [ 129.607802][ T3920] ? do_raw_spin_lock+0x120/0x2a0 [ 129.612812][ T3920] ? rwlock_bug.part.0+0x90/0x90 [ 129.617737][ T3920] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 129.623101][ T3920] linkwatch_fire_event+0x202/0x260 [ 129.628287][ T3920] netif_carrier_off+0x96/0xb0 [ 129.633031][ T3920] __tun_detach+0xfe7/0x13e0 [ 129.637608][ T3920] tun_chr_close+0xc4/0x180 [ 129.642087][ T3920] __fput+0x277/0x9d0 [ 129.646046][ T3920] ? __tun_detach+0x13e0/0x13e0 [ 129.650876][ T3920] task_work_run+0xdd/0x1a0 [ 129.655362][ T3920] ptrace_notify+0x114/0x140 [ 129.659939][ T3920] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 129.666168][ T3920] syscall_exit_to_user_mode+0x9/0x60 [ 129.671828][ T3920] do_syscall_64+0x42/0xb0 [ 129.676228][ T3920] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.682108][ T3920] RIP: 0033:0x7fc6cd2767a3 [ 129.686515][ T3920] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 129.706140][ T3920] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 129.714543][ T3920] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 129.722605][ T3920] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3920] close(3) = 0 [pid 3920] close(4) = 0 [pid 3920] close(5) = -1 EBADF (Bad file descriptor) [pid 3920] close(6) = -1 EBADF (Bad file descriptor) [pid 3920] close(7) = -1 EBADF (Bad file descriptor) [pid 3920] close(8) = -1 EBADF (Bad file descriptor) [pid 3920] close(9) = -1 EBADF (Bad file descriptor) [pid 3920] close(10) = -1 EBADF (Bad file descriptor) [pid 3920] close(11) = -1 EBADF (Bad file descriptor) [pid 3920] close(12) = -1 EBADF (Bad file descriptor) [pid 3920] close(13) = -1 EBADF (Bad file descriptor) [pid 3920] close(14) = -1 EBADF (Bad file descriptor) [pid 3920] close(15) = -1 EBADF (Bad file descriptor) [pid 3920] close(16) = -1 EBADF (Bad file descriptor) [pid 3920] close(17) = -1 EBADF (Bad file descriptor) [pid 3920] close(18) = -1 EBADF (Bad file descriptor) [pid 3920] close(19) = -1 EBADF (Bad file descriptor) [pid 3920] close(20) = -1 EBADF (Bad file descriptor) [pid 3920] close(21) = -1 EBADF (Bad file descriptor) [pid 3920] close(22) = -1 EBADF (Bad file descriptor) [pid 3920] close(23) = -1 EBADF (Bad file descriptor) [pid 3920] close(24) = -1 EBADF (Bad file descriptor) [pid 3920] close(25) = -1 EBADF (Bad file descriptor) [pid 3920] close(26) = -1 EBADF (Bad file descriptor) [pid 3920] close(27) = -1 EBADF (Bad file descriptor) [pid 3920] close(28) = -1 EBADF (Bad file descriptor) [pid 3920] close(29) = -1 EBADF (Bad file descriptor) [pid 3920] exit_group(0) = ? [pid 3920] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=285, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 286 ./strace-static-x86_64: Process 3921 attached [pid 3921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3921] setpgid(0, 0) = 0 [pid 3921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3921] write(3, "1000", 4) = 4 [ 129.730568][ T3920] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 129.738617][ T3920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 129.746590][ T3920] R13: 00000000000f4240 R14: 000000000001f8ab R15: 00007ffdc49a5924 [ 129.754575][ T3920] [pid 3921] close(3) = 0 [pid 3921] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3921] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3921] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3921] write(4, "5", 1) = 1 [pid 3921] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 129.817151][ T3921] FAULT_INJECTION: forcing a failure. [ 129.817151][ T3921] name failslab, interval 1, probability 0, space 0, times 0 [ 129.830196][ T3921] CPU: 0 PID: 3921 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 129.840335][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.850376][ T3921] Call Trace: [ 129.853639][ T3921] [ 129.856548][ T3921] dump_stack_lvl+0xcd/0x134 [ 129.861127][ T3921] should_fail.cold+0x5/0xa [ 129.865611][ T3921] should_failslab+0x5/0x10 [ 129.870090][ T3921] kmem_cache_alloc_trace+0x60/0x3f0 [ 129.875353][ T3921] ? ref_tracker_alloc+0x14c/0x550 [ 129.880459][ T3921] ref_tracker_alloc+0x14c/0x550 [ 129.885488][ T3921] ? ref_tracker_free+0x6b0/0x6b0 [ 129.890495][ T3921] ? lock_release+0x720/0x720 [ 129.895153][ T3921] ? do_raw_spin_lock+0x120/0x2a0 [ 129.900170][ T3921] ? rwlock_bug.part.0+0x90/0x90 [ 129.905114][ T3921] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 129.910490][ T3921] linkwatch_fire_event+0x202/0x260 [ 129.915690][ T3921] netif_carrier_off+0x96/0xb0 [ 129.920444][ T3921] __tun_detach+0xfe7/0x13e0 [ 129.925030][ T3921] tun_chr_close+0xc4/0x180 [ 129.929530][ T3921] __fput+0x277/0x9d0 [ 129.933528][ T3921] ? __tun_detach+0x13e0/0x13e0 [ 129.938371][ T3921] task_work_run+0xdd/0x1a0 [ 129.942863][ T3921] ptrace_notify+0x114/0x140 [ 129.947438][ T3921] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 129.953664][ T3921] syscall_exit_to_user_mode+0x9/0x60 [ 129.959109][ T3921] do_syscall_64+0x42/0xb0 [ 129.963514][ T3921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.969396][ T3921] RIP: 0033:0x7fc6cd2767a3 [ 129.973797][ T3921] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 129.993392][ T3921] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 130.002033][ T3921] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 130.010017][ T3921] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 130.017980][ T3921] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 130.026378][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 130.034335][ T3921] R13: 00000000000f4240 R14: 000000000001f9e1 R15: 00007ffdc49a5924 [ 130.042391][ T3921] [pid 3921] close(3) = 0 [pid 3921] close(4) = 0 [pid 3921] close(5) = -1 EBADF (Bad file descriptor) [pid 3921] close(6) = -1 EBADF (Bad file descriptor) [pid 3921] close(7) = -1 EBADF (Bad file descriptor) [pid 3921] close(8) = -1 EBADF (Bad file descriptor) [pid 3921] close(9) = -1 EBADF (Bad file descriptor) [pid 3921] close(10) = -1 EBADF (Bad file descriptor) [pid 3921] close(11) = -1 EBADF (Bad file descriptor) [pid 3921] close(12) = -1 EBADF (Bad file descriptor) [pid 3921] close(13) = -1 EBADF (Bad file descriptor) [pid 3921] close(14) = -1 EBADF (Bad file descriptor) [pid 3921] close(15) = -1 EBADF (Bad file descriptor) [pid 3921] close(16) = -1 EBADF (Bad file descriptor) [pid 3921] close(17) = -1 EBADF (Bad file descriptor) [pid 3921] close(18) = -1 EBADF (Bad file descriptor) [pid 3921] close(19) = -1 EBADF (Bad file descriptor) [pid 3921] close(20) = -1 EBADF (Bad file descriptor) [pid 3921] close(21) = -1 EBADF (Bad file descriptor) [pid 3921] close(22) = -1 EBADF (Bad file descriptor) [pid 3921] close(23) = -1 EBADF (Bad file descriptor) [pid 3921] close(24) = -1 EBADF (Bad file descriptor) [pid 3921] close(25) = -1 EBADF (Bad file descriptor) [pid 3921] close(26) = -1 EBADF (Bad file descriptor) [pid 3921] close(27) = -1 EBADF (Bad file descriptor) [pid 3921] close(28) = -1 EBADF (Bad file descriptor) [pid 3921] close(29) = -1 EBADF (Bad file descriptor) [pid 3921] exit_group(0) = ? [pid 3921] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=286, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 287 ./strace-static-x86_64: Process 3922 attached [pid 3922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3922] setpgid(0, 0) = 0 [pid 3922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3922] write(3, "1000", 4) = 4 [pid 3922] close(3) = 0 [pid 3922] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3922] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3922] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3922] write(4, "5", 1) = 1 [pid 3922] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 130.131420][ T3922] FAULT_INJECTION: forcing a failure. [ 130.131420][ T3922] name failslab, interval 1, probability 0, space 0, times 0 [ 130.144032][ T3922] CPU: 1 PID: 3922 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 130.154172][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.164222][ T3922] Call Trace: [ 130.167490][ T3922] [ 130.170405][ T3922] dump_stack_lvl+0xcd/0x134 [ 130.174982][ T3922] should_fail.cold+0x5/0xa [ 130.179684][ T3922] should_failslab+0x5/0x10 [ 130.184177][ T3922] kmem_cache_alloc_trace+0x60/0x3f0 [ 130.189453][ T3922] ? ref_tracker_alloc+0x14c/0x550 [ 130.194558][ T3922] ref_tracker_alloc+0x14c/0x550 [ 130.199485][ T3922] ? ref_tracker_free+0x6b0/0x6b0 [ 130.204497][ T3922] ? lock_release+0x720/0x720 [ 130.209166][ T3922] ? do_raw_spin_lock+0x120/0x2a0 [ 130.214186][ T3922] ? rwlock_bug.part.0+0x90/0x90 [ 130.219120][ T3922] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 130.224507][ T3922] linkwatch_fire_event+0x202/0x260 [ 130.229718][ T3922] netif_carrier_off+0x96/0xb0 [ 130.234497][ T3922] __tun_detach+0xfe7/0x13e0 [ 130.239089][ T3922] tun_chr_close+0xc4/0x180 [ 130.243583][ T3922] __fput+0x277/0x9d0 [ 130.247547][ T3922] ? __tun_detach+0x13e0/0x13e0 [ 130.252390][ T3922] task_work_run+0xdd/0x1a0 [ 130.256878][ T3922] ptrace_notify+0x114/0x140 [ 130.261458][ T3922] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 130.267694][ T3922] syscall_exit_to_user_mode+0x9/0x60 [ 130.273085][ T3922] do_syscall_64+0x42/0xb0 [ 130.277485][ T3922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.283359][ T3922] RIP: 0033:0x7fc6cd2767a3 [ 130.287756][ T3922] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 130.307353][ T3922] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 130.315752][ T3922] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 130.323700][ T3922] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3922] close(3) = 0 [pid 3922] close(4) = 0 [pid 3922] close(5) = -1 EBADF (Bad file descriptor) [pid 3922] close(6) = -1 EBADF (Bad file descriptor) [pid 3922] close(7) = -1 EBADF (Bad file descriptor) [pid 3922] close(8) = -1 EBADF (Bad file descriptor) [pid 3922] close(9) = -1 EBADF (Bad file descriptor) [pid 3922] close(10) = -1 EBADF (Bad file descriptor) [pid 3922] close(11) = -1 EBADF (Bad file descriptor) [pid 3922] close(12) = -1 EBADF (Bad file descriptor) [pid 3922] close(13) = -1 EBADF (Bad file descriptor) [pid 3922] close(14) = -1 EBADF (Bad file descriptor) [pid 3922] close(15) = -1 EBADF (Bad file descriptor) [pid 3922] close(16) = -1 EBADF (Bad file descriptor) [pid 3922] close(17) = -1 EBADF (Bad file descriptor) [pid 3922] close(18) = -1 EBADF (Bad file descriptor) [pid 3922] close(19) = -1 EBADF (Bad file descriptor) [pid 3922] close(20) = -1 EBADF (Bad file descriptor) [pid 3922] close(21) = -1 EBADF (Bad file descriptor) [pid 3922] close(22) = -1 EBADF (Bad file descriptor) [pid 3922] close(23) = -1 EBADF (Bad file descriptor) [pid 3922] close(24) = -1 EBADF (Bad file descriptor) [pid 3922] close(25) = -1 EBADF (Bad file descriptor) [ 130.331657][ T3922] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 130.339620][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 130.347580][ T3922] R13: 00000000000f4240 R14: 000000000001fafb R15: 00007ffdc49a5924 [ 130.355555][ T3922] [pid 3922] close(26) = -1 EBADF (Bad file descriptor) [pid 3922] close(27) = -1 EBADF (Bad file descriptor) [pid 3922] close(28) = -1 EBADF (Bad file descriptor) [pid 3922] close(29) = -1 EBADF (Bad file descriptor) [pid 3922] exit_group(0) = ? [pid 3922] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 288 ./strace-static-x86_64: Process 3923 attached [pid 3923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3923] setpgid(0, 0) = 0 [pid 3923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3923] write(3, "1000", 4) = 4 [pid 3923] close(3) = 0 [pid 3923] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3923] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3923] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3923] write(4, "5", 1) = 1 [pid 3923] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 130.429055][ T3923] FAULT_INJECTION: forcing a failure. [ 130.429055][ T3923] name failslab, interval 1, probability 0, space 0, times 0 [ 130.441683][ T3923] CPU: 0 PID: 3923 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 130.451936][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.461990][ T3923] Call Trace: [ 130.465272][ T3923] [ 130.468194][ T3923] dump_stack_lvl+0xcd/0x134 [ 130.472781][ T3923] should_fail.cold+0x5/0xa [ 130.477272][ T3923] should_failslab+0x5/0x10 [ 130.481759][ T3923] kmem_cache_alloc_trace+0x60/0x3f0 [ 130.487026][ T3923] ? ref_tracker_alloc+0x14c/0x550 [ 130.492127][ T3923] ref_tracker_alloc+0x14c/0x550 [ 130.497049][ T3923] ? ref_tracker_free+0x6b0/0x6b0 [ 130.502054][ T3923] ? lock_release+0x720/0x720 [ 130.506712][ T3923] ? do_raw_spin_lock+0x120/0x2a0 [ 130.511971][ T3923] ? rwlock_bug.part.0+0x90/0x90 [ 130.517123][ T3923] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 130.522508][ T3923] linkwatch_fire_event+0x202/0x260 [ 130.527697][ T3923] netif_carrier_off+0x96/0xb0 [ 130.532446][ T3923] __tun_detach+0xfe7/0x13e0 [ 130.537027][ T3923] tun_chr_close+0xc4/0x180 [ 130.541515][ T3923] __fput+0x277/0x9d0 [ 130.545478][ T3923] ? __tun_detach+0x13e0/0x13e0 [ 130.550313][ T3923] task_work_run+0xdd/0x1a0 [ 130.554799][ T3923] ptrace_notify+0x114/0x140 [ 130.559369][ T3923] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 130.565601][ T3923] syscall_exit_to_user_mode+0x9/0x60 [ 130.570955][ T3923] do_syscall_64+0x42/0xb0 [ 130.575350][ T3923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.581321][ T3923] RIP: 0033:0x7fc6cd2767a3 [ 130.585716][ T3923] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 130.605306][ T3923] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 130.613710][ T3923] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 130.621680][ T3923] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3923] close(3) = 0 [pid 3923] close(4) = 0 [pid 3923] close(5) = -1 EBADF (Bad file descriptor) [pid 3923] close(6) = -1 EBADF (Bad file descriptor) [pid 3923] close(7) = -1 EBADF (Bad file descriptor) [pid 3923] close(8) = -1 EBADF (Bad file descriptor) [pid 3923] close(9) = -1 EBADF (Bad file descriptor) [pid 3923] close(10) = -1 EBADF (Bad file descriptor) [pid 3923] close(11) = -1 EBADF (Bad file descriptor) [pid 3923] close(12) = -1 EBADF (Bad file descriptor) [pid 3923] close(13) = -1 EBADF (Bad file descriptor) [pid 3923] close(14) = -1 EBADF (Bad file descriptor) [pid 3923] close(15) = -1 EBADF (Bad file descriptor) [pid 3923] close(16) = -1 EBADF (Bad file descriptor) [pid 3923] close(17) = -1 EBADF (Bad file descriptor) [pid 3923] close(18) = -1 EBADF (Bad file descriptor) [pid 3923] close(19) = -1 EBADF (Bad file descriptor) [pid 3923] close(20) = -1 EBADF (Bad file descriptor) [pid 3923] close(21) = -1 EBADF (Bad file descriptor) [pid 3923] close(22) = -1 EBADF (Bad file descriptor) [pid 3923] close(23) = -1 EBADF (Bad file descriptor) [pid 3923] close(24) = -1 EBADF (Bad file descriptor) [pid 3923] close(25) = -1 EBADF (Bad file descriptor) [pid 3923] close(26) = -1 EBADF (Bad file descriptor) [pid 3923] close(27) = -1 EBADF (Bad file descriptor) [pid 3923] close(28) = -1 EBADF (Bad file descriptor) [pid 3923] close(29) = -1 EBADF (Bad file descriptor) [pid 3923] exit_group(0) = ? [pid 3923] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 289 ./strace-static-x86_64: Process 3924 attached [pid 3924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3924] setpgid(0, 0) = 0 [pid 3924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3924] write(3, "1000", 4) = 4 [pid 3924] close(3) = 0 [ 130.629632][ T3923] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 130.637585][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 130.645538][ T3923] R13: 00000000000f4240 R14: 000000000001fc33 R15: 00007ffdc49a5924 [ 130.653517][ T3923] [pid 3924] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3924] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3924] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3924] write(4, "5", 1) = 1 [pid 3924] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 130.716169][ T3924] FAULT_INJECTION: forcing a failure. [ 130.716169][ T3924] name failslab, interval 1, probability 0, space 0, times 0 [ 130.728789][ T3924] CPU: 1 PID: 3924 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 130.738925][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.749062][ T3924] Call Trace: [ 130.752579][ T3924] [ 130.755516][ T3924] dump_stack_lvl+0xcd/0x134 [ 130.760123][ T3924] should_fail.cold+0x5/0xa [ 130.764616][ T3924] should_failslab+0x5/0x10 [ 130.769110][ T3924] kmem_cache_alloc_trace+0x60/0x3f0 [ 130.774558][ T3924] ? ref_tracker_alloc+0x14c/0x550 [ 130.779679][ T3924] ref_tracker_alloc+0x14c/0x550 [ 130.784603][ T3924] ? ref_tracker_free+0x6b0/0x6b0 [ 130.789610][ T3924] ? lock_release+0x720/0x720 [ 130.794298][ T3924] ? do_raw_spin_lock+0x120/0x2a0 [ 130.799401][ T3924] ? rwlock_bug.part.0+0x90/0x90 [ 130.804345][ T3924] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 130.809712][ T3924] linkwatch_fire_event+0x202/0x260 [ 130.814910][ T3924] netif_carrier_off+0x96/0xb0 [ 130.819665][ T3924] __tun_detach+0xfe7/0x13e0 [ 130.824254][ T3924] tun_chr_close+0xc4/0x180 [ 130.828750][ T3924] __fput+0x277/0x9d0 [ 130.832720][ T3924] ? __tun_detach+0x13e0/0x13e0 [ 130.837576][ T3924] task_work_run+0xdd/0x1a0 [ 130.842073][ T3924] ptrace_notify+0x114/0x140 [ 130.846655][ T3924] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 130.852888][ T3924] syscall_exit_to_user_mode+0x9/0x60 [ 130.858251][ T3924] do_syscall_64+0x42/0xb0 [ 130.862666][ T3924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.868550][ T3924] RIP: 0033:0x7fc6cd2767a3 [ 130.872952][ T3924] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 130.892546][ T3924] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 130.900989][ T3924] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 130.908964][ T3924] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3924] close(3) = 0 [pid 3924] close(4) = 0 [pid 3924] close(5) = -1 EBADF (Bad file descriptor) [pid 3924] close(6) = -1 EBADF (Bad file descriptor) [pid 3924] close(7) = -1 EBADF (Bad file descriptor) [pid 3924] close(8) = -1 EBADF (Bad file descriptor) [pid 3924] close(9) = -1 EBADF (Bad file descriptor) [pid 3924] close(10) = -1 EBADF (Bad file descriptor) [pid 3924] close(11) = -1 EBADF (Bad file descriptor) [pid 3924] close(12) = -1 EBADF (Bad file descriptor) [pid 3924] close(13) = -1 EBADF (Bad file descriptor) [pid 3924] close(14) = -1 EBADF (Bad file descriptor) [pid 3924] close(15) = -1 EBADF (Bad file descriptor) [pid 3924] close(16) = -1 EBADF (Bad file descriptor) [pid 3924] close(17) = -1 EBADF (Bad file descriptor) [pid 3924] close(18) = -1 EBADF (Bad file descriptor) [pid 3924] close(19) = -1 EBADF (Bad file descriptor) [pid 3924] close(20) = -1 EBADF (Bad file descriptor) [pid 3924] close(21) = -1 EBADF (Bad file descriptor) [pid 3924] close(22) = -1 EBADF (Bad file descriptor) [pid 3924] close(23) = -1 EBADF (Bad file descriptor) [pid 3924] close(24) = -1 EBADF (Bad file descriptor) [pid 3924] close(25) = -1 EBADF (Bad file descriptor) [pid 3924] close(26) = -1 EBADF (Bad file descriptor) [pid 3924] close(27) = -1 EBADF (Bad file descriptor) [pid 3924] close(28) = -1 EBADF (Bad file descriptor) [pid 3924] close(29) = -1 EBADF (Bad file descriptor) [pid 3924] exit_group(0) = ? [pid 3924] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 130.916937][ T3924] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 130.924893][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 130.932864][ T3924] R13: 00000000000f4240 R14: 000000000001fd5d R15: 00007ffdc49a5924 [ 130.940856][ T3924] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3925 attached , child_tidptr=0x5555570bd5d0) = 290 [pid 3925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3925] setpgid(0, 0) = 0 [pid 3925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3925] write(3, "1000", 4) = 4 [pid 3925] close(3) = 0 [pid 3925] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3925] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3925] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3925] write(4, "5", 1) = 1 [pid 3925] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 131.008495][ T3925] FAULT_INJECTION: forcing a failure. [ 131.008495][ T3925] name failslab, interval 1, probability 0, space 0, times 0 [ 131.021112][ T3925] CPU: 0 PID: 3925 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 131.031260][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.041300][ T3925] Call Trace: [ 131.044560][ T3925] [ 131.047473][ T3925] dump_stack_lvl+0xcd/0x134 [ 131.052050][ T3925] should_fail.cold+0x5/0xa [ 131.056536][ T3925] should_failslab+0x5/0x10 [ 131.061019][ T3925] kmem_cache_alloc_trace+0x60/0x3f0 [ 131.066286][ T3925] ? ref_tracker_alloc+0x14c/0x550 [ 131.071410][ T3925] ref_tracker_alloc+0x14c/0x550 [ 131.076335][ T3925] ? ref_tracker_free+0x6b0/0x6b0 [ 131.081345][ T3925] ? lock_release+0x720/0x720 [ 131.086014][ T3925] ? do_raw_spin_lock+0x120/0x2a0 [ 131.091025][ T3925] ? rwlock_bug.part.0+0x90/0x90 [ 131.095951][ T3925] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 131.101322][ T3925] linkwatch_fire_event+0x202/0x260 [ 131.106516][ T3925] netif_carrier_off+0x96/0xb0 [ 131.111268][ T3925] __tun_detach+0xfe7/0x13e0 [ 131.115856][ T3925] tun_chr_close+0xc4/0x180 [ 131.120354][ T3925] __fput+0x277/0x9d0 [ 131.124331][ T3925] ? __tun_detach+0x13e0/0x13e0 [ 131.129185][ T3925] task_work_run+0xdd/0x1a0 [ 131.133691][ T3925] ptrace_notify+0x114/0x140 [ 131.138276][ T3925] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 131.144513][ T3925] syscall_exit_to_user_mode+0x9/0x60 [ 131.149881][ T3925] do_syscall_64+0x42/0xb0 [ 131.154308][ T3925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.160199][ T3925] RIP: 0033:0x7fc6cd2767a3 [ 131.164695][ T3925] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 131.184297][ T3925] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 131.192710][ T3925] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 131.200674][ T3925] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3925] close(3) = 0 [pid 3925] close(4) = 0 [pid 3925] close(5) = -1 EBADF (Bad file descriptor) [pid 3925] close(6) = -1 EBADF (Bad file descriptor) [pid 3925] close(7) = -1 EBADF (Bad file descriptor) [pid 3925] close(8) = -1 EBADF (Bad file descriptor) [pid 3925] close(9) = -1 EBADF (Bad file descriptor) [ 131.208635][ T3925] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 131.216594][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 131.224571][ T3925] R13: 00000000000f4240 R14: 000000000001fe7e R15: 00007ffdc49a5924 [ 131.232546][ T3925] [pid 3925] close(10) = -1 EBADF (Bad file descriptor) [pid 3925] close(11) = -1 EBADF (Bad file descriptor) [pid 3925] close(12) = -1 EBADF (Bad file descriptor) [pid 3925] close(13) = -1 EBADF (Bad file descriptor) [pid 3925] close(14) = -1 EBADF (Bad file descriptor) [pid 3925] close(15) = -1 EBADF (Bad file descriptor) [pid 3925] close(16) = -1 EBADF (Bad file descriptor) [pid 3925] close(17) = -1 EBADF (Bad file descriptor) [pid 3925] close(18) = -1 EBADF (Bad file descriptor) [pid 3925] close(19) = -1 EBADF (Bad file descriptor) [pid 3925] close(20) = -1 EBADF (Bad file descriptor) [pid 3925] close(21) = -1 EBADF (Bad file descriptor) [pid 3925] close(22) = -1 EBADF (Bad file descriptor) [pid 3925] close(23) = -1 EBADF (Bad file descriptor) [pid 3925] close(24) = -1 EBADF (Bad file descriptor) [pid 3925] close(25) = -1 EBADF (Bad file descriptor) [pid 3925] close(26) = -1 EBADF (Bad file descriptor) [pid 3925] close(27) = -1 EBADF (Bad file descriptor) [pid 3925] close(28) = -1 EBADF (Bad file descriptor) [pid 3925] close(29) = -1 EBADF (Bad file descriptor) [pid 3925] exit_group(0) = ? [pid 3925] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 291 ./strace-static-x86_64: Process 3926 attached [pid 3926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3926] setpgid(0, 0) = 0 [pid 3926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3926] write(3, "1000", 4) = 4 [pid 3926] close(3) = 0 [pid 3926] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3926] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3926] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3926] write(4, "5", 1) = 1 [pid 3926] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 131.307282][ T3926] FAULT_INJECTION: forcing a failure. [ 131.307282][ T3926] name failslab, interval 1, probability 0, space 0, times 0 [ 131.320334][ T3926] CPU: 0 PID: 3926 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 131.330486][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.340551][ T3926] Call Trace: [ 131.343821][ T3926] [ 131.346735][ T3926] dump_stack_lvl+0xcd/0x134 [ 131.351320][ T3926] should_fail.cold+0x5/0xa [ 131.355815][ T3926] should_failslab+0x5/0x10 [ 131.360307][ T3926] kmem_cache_alloc_trace+0x60/0x3f0 [ 131.365586][ T3926] ? ref_tracker_alloc+0x14c/0x550 [ 131.370706][ T3926] ref_tracker_alloc+0x14c/0x550 [ 131.375901][ T3926] ? ref_tracker_free+0x6b0/0x6b0 [ 131.380914][ T3926] ? lock_release+0x720/0x720 [ 131.385581][ T3926] ? do_raw_spin_lock+0x120/0x2a0 [ 131.390596][ T3926] ? rwlock_bug.part.0+0x90/0x90 [ 131.395519][ T3926] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 131.400887][ T3926] linkwatch_fire_event+0x202/0x260 [ 131.406092][ T3926] netif_carrier_off+0x96/0xb0 [ 131.410859][ T3926] __tun_detach+0xfe7/0x13e0 [ 131.415450][ T3926] tun_chr_close+0xc4/0x180 [ 131.419953][ T3926] __fput+0x277/0x9d0 [ 131.423937][ T3926] ? __tun_detach+0x13e0/0x13e0 [ 131.428814][ T3926] task_work_run+0xdd/0x1a0 [ 131.433319][ T3926] ptrace_notify+0x114/0x140 [ 131.437910][ T3926] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 131.444148][ T3926] syscall_exit_to_user_mode+0x9/0x60 [ 131.449520][ T3926] do_syscall_64+0x42/0xb0 [ 131.453930][ T3926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.459833][ T3926] RIP: 0033:0x7fc6cd2767a3 [ 131.464238][ T3926] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 131.483842][ T3926] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 131.492258][ T3926] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 131.500224][ T3926] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3926] close(3) = 0 [pid 3926] close(4) = 0 [pid 3926] close(5) = -1 EBADF (Bad file descriptor) [pid 3926] close(6) = -1 EBADF (Bad file descriptor) [pid 3926] close(7) = -1 EBADF (Bad file descriptor) [ 131.508190][ T3926] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 131.516152][ T3926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 131.524113][ T3926] R13: 00000000000f4240 R14: 000000000001ffa1 R15: 00007ffdc49a5924 [ 131.532092][ T3926] [pid 3926] close(8) = -1 EBADF (Bad file descriptor) [pid 3926] close(9) = -1 EBADF (Bad file descriptor) [pid 3926] close(10) = -1 EBADF (Bad file descriptor) [pid 3926] close(11) = -1 EBADF (Bad file descriptor) [pid 3926] close(12) = -1 EBADF (Bad file descriptor) [pid 3926] close(13) = -1 EBADF (Bad file descriptor) [pid 3926] close(14) = -1 EBADF (Bad file descriptor) [pid 3926] close(15) = -1 EBADF (Bad file descriptor) [pid 3926] close(16) = -1 EBADF (Bad file descriptor) [pid 3926] close(17) = -1 EBADF (Bad file descriptor) [pid 3926] close(18) = -1 EBADF (Bad file descriptor) [pid 3926] close(19) = -1 EBADF (Bad file descriptor) [pid 3926] close(20) = -1 EBADF (Bad file descriptor) [pid 3926] close(21) = -1 EBADF (Bad file descriptor) [pid 3926] close(22) = -1 EBADF (Bad file descriptor) [pid 3926] close(23) = -1 EBADF (Bad file descriptor) [pid 3926] close(24) = -1 EBADF (Bad file descriptor) [pid 3926] close(25) = -1 EBADF (Bad file descriptor) [pid 3926] close(26) = -1 EBADF (Bad file descriptor) [pid 3926] close(27) = -1 EBADF (Bad file descriptor) [pid 3926] close(28) = -1 EBADF (Bad file descriptor) [pid 3926] close(29) = -1 EBADF (Bad file descriptor) [pid 3926] exit_group(0) = ? [pid 3926] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 292 ./strace-static-x86_64: Process 3927 attached [pid 3927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3927] setpgid(0, 0) = 0 [pid 3927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3927] write(3, "1000", 4) = 4 [pid 3927] close(3) = 0 [pid 3927] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3927] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3927] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3927] write(4, "5", 1) = 1 [pid 3927] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 131.614780][ T3927] FAULT_INJECTION: forcing a failure. [ 131.614780][ T3927] name failslab, interval 1, probability 0, space 0, times 0 [ 131.627656][ T3927] CPU: 0 PID: 3927 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 131.637817][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.647959][ T3927] Call Trace: [ 131.651243][ T3927] [ 131.654167][ T3927] dump_stack_lvl+0xcd/0x134 [ 131.658860][ T3927] should_fail.cold+0x5/0xa [ 131.663386][ T3927] should_failslab+0x5/0x10 [ 131.667894][ T3927] kmem_cache_alloc_trace+0x60/0x3f0 [ 131.673183][ T3927] ? ref_tracker_alloc+0x14c/0x550 [ 131.678300][ T3927] ref_tracker_alloc+0x14c/0x550 [ 131.683250][ T3927] ? ref_tracker_free+0x6b0/0x6b0 [ 131.688290][ T3927] ? lock_release+0x720/0x720 [ 131.692981][ T3927] ? do_raw_spin_lock+0x120/0x2a0 [ 131.698016][ T3927] ? rwlock_bug.part.0+0x90/0x90 [ 131.702965][ T3927] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 131.708373][ T3927] linkwatch_fire_event+0x202/0x260 [ 131.713586][ T3927] netif_carrier_off+0x96/0xb0 [ 131.718369][ T3927] __tun_detach+0xfe7/0x13e0 [ 131.722968][ T3927] tun_chr_close+0xc4/0x180 [ 131.727479][ T3927] __fput+0x277/0x9d0 [ 131.731460][ T3927] ? __tun_detach+0x13e0/0x13e0 [ 131.736318][ T3927] task_work_run+0xdd/0x1a0 [ 131.740827][ T3927] ptrace_notify+0x114/0x140 [ 131.745429][ T3927] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 131.751696][ T3927] syscall_exit_to_user_mode+0x9/0x60 [ 131.757093][ T3927] do_syscall_64+0x42/0xb0 [ 131.761539][ T3927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.767437][ T3927] RIP: 0033:0x7fc6cd2767a3 [ 131.771865][ T3927] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 131.791474][ T3927] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 131.799883][ T3927] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 131.807868][ T3927] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3927] close(3) = 0 [pid 3927] close(4) = 0 [pid 3927] close(5) = -1 EBADF (Bad file descriptor) [pid 3927] close(6) = -1 EBADF (Bad file descriptor) [pid 3927] close(7) = -1 EBADF (Bad file descriptor) [pid 3927] close(8) = -1 EBADF (Bad file descriptor) [pid 3927] close(9) = -1 EBADF (Bad file descriptor) [pid 3927] close(10) = -1 EBADF (Bad file descriptor) [pid 3927] close(11) = -1 EBADF (Bad file descriptor) [pid 3927] close(12) = -1 EBADF (Bad file descriptor) [pid 3927] close(13) = -1 EBADF (Bad file descriptor) [pid 3927] close(14) = -1 EBADF (Bad file descriptor) [pid 3927] close(15) = -1 EBADF (Bad file descriptor) [pid 3927] close(16) = -1 EBADF (Bad file descriptor) [pid 3927] close(17) = -1 EBADF (Bad file descriptor) [pid 3927] close(18) = -1 EBADF (Bad file descriptor) [pid 3927] close(19) = -1 EBADF (Bad file descriptor) [pid 3927] close(20) = -1 EBADF (Bad file descriptor) [pid 3927] close(21) = -1 EBADF (Bad file descriptor) [pid 3927] close(22) = -1 EBADF (Bad file descriptor) [pid 3927] close(23) = -1 EBADF (Bad file descriptor) [pid 3927] close(24) = -1 EBADF (Bad file descriptor) [pid 3927] close(25) = -1 EBADF (Bad file descriptor) [pid 3927] close(26) = -1 EBADF (Bad file descriptor) [pid 3927] close(27) = -1 EBADF (Bad file descriptor) [pid 3927] close(28) = -1 EBADF (Bad file descriptor) [pid 3927] close(29) = -1 EBADF (Bad file descriptor) [pid 3927] exit_group(0) = ? [pid 3927] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 131.815853][ T3927] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 131.823861][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 131.831847][ T3927] R13: 00000000000f4240 R14: 00000000000200d0 R15: 00007ffdc49a5924 [ 131.839837][ T3927] [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 293 ./strace-static-x86_64: Process 3928 attached [pid 3928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3928] setpgid(0, 0) = 0 [pid 3928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3928] write(3, "1000", 4) = 4 [pid 3928] close(3) = 0 [pid 3928] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3928] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3928] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3928] write(4, "5", 1) = 1 [pid 3928] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 131.905821][ T3928] FAULT_INJECTION: forcing a failure. [ 131.905821][ T3928] name failslab, interval 1, probability 0, space 0, times 0 [ 131.918526][ T3928] CPU: 0 PID: 3928 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 131.928662][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.938699][ T3928] Call Trace: [ 131.941957][ T3928] [ 131.944865][ T3928] dump_stack_lvl+0xcd/0x134 [ 131.949441][ T3928] should_fail.cold+0x5/0xa [ 131.953924][ T3928] should_failslab+0x5/0x10 [ 131.958403][ T3928] kmem_cache_alloc_trace+0x60/0x3f0 [ 131.963664][ T3928] ? ref_tracker_alloc+0x14c/0x550 [ 131.968763][ T3928] ref_tracker_alloc+0x14c/0x550 [ 131.973696][ T3928] ? ref_tracker_free+0x6b0/0x6b0 [ 131.978879][ T3928] ? lock_release+0x720/0x720 [ 131.983547][ T3928] ? do_raw_spin_lock+0x120/0x2a0 [ 131.988558][ T3928] ? rwlock_bug.part.0+0x90/0x90 [ 131.993510][ T3928] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 131.998964][ T3928] linkwatch_fire_event+0x202/0x260 [ 132.004166][ T3928] netif_carrier_off+0x96/0xb0 [ 132.008921][ T3928] __tun_detach+0xfe7/0x13e0 [ 132.013509][ T3928] tun_chr_close+0xc4/0x180 [ 132.018008][ T3928] __fput+0x277/0x9d0 [ 132.021985][ T3928] ? __tun_detach+0x13e0/0x13e0 [ 132.026831][ T3928] task_work_run+0xdd/0x1a0 [ 132.031328][ T3928] ptrace_notify+0x114/0x140 [ 132.035910][ T3928] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 132.042143][ T3928] syscall_exit_to_user_mode+0x9/0x60 [ 132.047534][ T3928] do_syscall_64+0x42/0xb0 [ 132.051962][ T3928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.057850][ T3928] RIP: 0033:0x7fc6cd2767a3 [ 132.062254][ T3928] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 132.081854][ T3928] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.090267][ T3928] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 132.098227][ T3928] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 132.106185][ T3928] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 132.114149][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 132.122116][ T3928] R13: 00000000000f4240 R14: 0000000000020202 R15: 00007ffdc49a5924 [ 132.130095][ T3928] [pid 3928] close(3) = 0 [pid 3928] close(4) = 0 [pid 3928] close(5) = -1 EBADF (Bad file descriptor) [pid 3928] close(6) = -1 EBADF (Bad file descriptor) [pid 3928] close(7) = -1 EBADF (Bad file descriptor) [pid 3928] close(8) = -1 EBADF (Bad file descriptor) [pid 3928] close(9) = -1 EBADF (Bad file descriptor) [pid 3928] close(10) = -1 EBADF (Bad file descriptor) [pid 3928] close(11) = -1 EBADF (Bad file descriptor) [pid 3928] close(12) = -1 EBADF (Bad file descriptor) [pid 3928] close(13) = -1 EBADF (Bad file descriptor) [pid 3928] close(14) = -1 EBADF (Bad file descriptor) [pid 3928] close(15) = -1 EBADF (Bad file descriptor) [pid 3928] close(16) = -1 EBADF (Bad file descriptor) [pid 3928] close(17) = -1 EBADF (Bad file descriptor) [pid 3928] close(18) = -1 EBADF (Bad file descriptor) [pid 3928] close(19) = -1 EBADF (Bad file descriptor) [pid 3928] close(20) = -1 EBADF (Bad file descriptor) [pid 3928] close(21) = -1 EBADF (Bad file descriptor) [pid 3928] close(22) = -1 EBADF (Bad file descriptor) [pid 3928] close(23) = -1 EBADF (Bad file descriptor) [pid 3928] close(24) = -1 EBADF (Bad file descriptor) [pid 3928] close(25) = -1 EBADF (Bad file descriptor) [pid 3928] close(26) = -1 EBADF (Bad file descriptor) [pid 3928] close(27) = -1 EBADF (Bad file descriptor) [pid 3928] close(28) = -1 EBADF (Bad file descriptor) [pid 3928] close(29) = -1 EBADF (Bad file descriptor) [pid 3928] exit_group(0) = ? [pid 3928] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 294 ./strace-static-x86_64: Process 3929 attached [pid 3929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3929] setpgid(0, 0) = 0 [pid 3929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3929] write(3, "1000", 4) = 4 [pid 3929] close(3) = 0 [pid 3929] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3929] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3929] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3929] write(4, "5", 1) = 1 [pid 3929] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 132.213896][ T3929] FAULT_INJECTION: forcing a failure. [ 132.213896][ T3929] name failslab, interval 1, probability 0, space 0, times 0 [ 132.226611][ T3929] CPU: 0 PID: 3929 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 132.236766][ T3929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.246825][ T3929] Call Trace: [ 132.250102][ T3929] [ 132.253026][ T3929] dump_stack_lvl+0xcd/0x134 [ 132.257626][ T3929] should_fail.cold+0x5/0xa [ 132.262139][ T3929] should_failslab+0x5/0x10 [ 132.266642][ T3929] kmem_cache_alloc_trace+0x60/0x3f0 [ 132.272014][ T3929] ? ref_tracker_alloc+0x14c/0x550 [ 132.277131][ T3929] ref_tracker_alloc+0x14c/0x550 [ 132.282072][ T3929] ? ref_tracker_free+0x6b0/0x6b0 [ 132.287096][ T3929] ? lock_release+0x720/0x720 [ 132.291776][ T3929] ? do_raw_spin_lock+0x120/0x2a0 [ 132.296799][ T3929] ? rwlock_bug.part.0+0x90/0x90 [ 132.301738][ T3929] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 132.307126][ T3929] linkwatch_fire_event+0x202/0x260 [ 132.312333][ T3929] netif_carrier_off+0x96/0xb0 [ 132.317191][ T3929] __tun_detach+0xfe7/0x13e0 [ 132.321796][ T3929] tun_chr_close+0xc4/0x180 [ 132.326302][ T3929] __fput+0x277/0x9d0 [ 132.330289][ T3929] ? __tun_detach+0x13e0/0x13e0 [ 132.335149][ T3929] task_work_run+0xdd/0x1a0 [ 132.339661][ T3929] ptrace_notify+0x114/0x140 [ 132.344257][ T3929] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 132.350509][ T3929] syscall_exit_to_user_mode+0x9/0x60 [ 132.355896][ T3929] do_syscall_64+0x42/0xb0 [ 132.360319][ T3929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.366222][ T3929] RIP: 0033:0x7fc6cd2767a3 [ 132.370637][ T3929] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 132.390245][ T3929] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.398674][ T3929] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 132.406646][ T3929] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 132.414609][ T3929] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 132.422588][ T3929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 132.430566][ T3929] R13: 00000000000f4240 R14: 0000000000020324 R15: 00007ffdc49a5924 [ 132.438554][ T3929] [pid 3929] close(3) = 0 [pid 3929] close(4) = 0 [pid 3929] close(5) = -1 EBADF (Bad file descriptor) [pid 3929] close(6) = -1 EBADF (Bad file descriptor) [pid 3929] close(7) = -1 EBADF (Bad file descriptor) [pid 3929] close(8) = -1 EBADF (Bad file descriptor) [pid 3929] close(9) = -1 EBADF (Bad file descriptor) [pid 3929] close(10) = -1 EBADF (Bad file descriptor) [pid 3929] close(11) = -1 EBADF (Bad file descriptor) [pid 3929] close(12) = -1 EBADF (Bad file descriptor) [pid 3929] close(13) = -1 EBADF (Bad file descriptor) [pid 3929] close(14) = -1 EBADF (Bad file descriptor) [pid 3929] close(15) = -1 EBADF (Bad file descriptor) [pid 3929] close(16) = -1 EBADF (Bad file descriptor) [pid 3929] close(17) = -1 EBADF (Bad file descriptor) [pid 3929] close(18) = -1 EBADF (Bad file descriptor) [pid 3929] close(19) = -1 EBADF (Bad file descriptor) [pid 3929] close(20) = -1 EBADF (Bad file descriptor) [pid 3929] close(21) = -1 EBADF (Bad file descriptor) [pid 3929] close(22) = -1 EBADF (Bad file descriptor) [pid 3929] close(23) = -1 EBADF (Bad file descriptor) [pid 3929] close(24) = -1 EBADF (Bad file descriptor) [pid 3929] close(25) = -1 EBADF (Bad file descriptor) [pid 3929] close(26) = -1 EBADF (Bad file descriptor) [pid 3929] close(27) = -1 EBADF (Bad file descriptor) [pid 3929] close(28) = -1 EBADF (Bad file descriptor) [pid 3929] close(29) = -1 EBADF (Bad file descriptor) [pid 3929] exit_group(0) = ? [pid 3929] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 295 ./strace-static-x86_64: Process 3930 attached [pid 3930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3930] setpgid(0, 0) = 0 [pid 3930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3930] write(3, "1000", 4) = 4 [pid 3930] close(3) = 0 [pid 3930] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3930] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3930] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3930] write(4, "5", 1) = 1 [pid 3930] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 132.513689][ T3930] FAULT_INJECTION: forcing a failure. [ 132.513689][ T3930] name failslab, interval 1, probability 0, space 0, times 0 [ 132.526451][ T3930] CPU: 0 PID: 3930 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 132.536591][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.546630][ T3930] Call Trace: [ 132.549933][ T3930] [ 132.552846][ T3930] dump_stack_lvl+0xcd/0x134 [ 132.557426][ T3930] should_fail.cold+0x5/0xa [ 132.561911][ T3930] should_failslab+0x5/0x10 [ 132.566398][ T3930] kmem_cache_alloc_trace+0x60/0x3f0 [ 132.571684][ T3930] ? ref_tracker_alloc+0x14c/0x550 [ 132.576806][ T3930] ref_tracker_alloc+0x14c/0x550 [ 132.581747][ T3930] ? ref_tracker_free+0x6b0/0x6b0 [ 132.586761][ T3930] ? lock_release+0x720/0x720 [ 132.591433][ T3930] ? do_raw_spin_lock+0x120/0x2a0 [ 132.596452][ T3930] ? rwlock_bug.part.0+0x90/0x90 [ 132.601381][ T3930] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 132.606748][ T3930] linkwatch_fire_event+0x202/0x260 [ 132.611946][ T3930] netif_carrier_off+0x96/0xb0 [ 132.616723][ T3930] __tun_detach+0xfe7/0x13e0 [ 132.621313][ T3930] tun_chr_close+0xc4/0x180 [ 132.625807][ T3930] __fput+0x277/0x9d0 [ 132.629778][ T3930] ? __tun_detach+0x13e0/0x13e0 [ 132.634624][ T3930] task_work_run+0xdd/0x1a0 [ 132.639127][ T3930] ptrace_notify+0x114/0x140 [ 132.643715][ T3930] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 132.649949][ T3930] syscall_exit_to_user_mode+0x9/0x60 [ 132.655594][ T3930] do_syscall_64+0x42/0xb0 [ 132.660018][ T3930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.665899][ T3930] RIP: 0033:0x7fc6cd2767a3 [ 132.670323][ T3930] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 132.689925][ T3930] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.698337][ T3930] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 132.706300][ T3930] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3930] close(3) = 0 [ 132.714264][ T3930] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 132.722250][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 132.730215][ T3930] R13: 00000000000f4240 R14: 0000000000020458 R15: 00007ffdc49a5924 [ 132.738192][ T3930] [pid 3930] close(4) = 0 [pid 3930] close(5) = -1 EBADF (Bad file descriptor) [pid 3930] close(6) = -1 EBADF (Bad file descriptor) [pid 3930] close(7) = -1 EBADF (Bad file descriptor) [pid 3930] close(8) = -1 EBADF (Bad file descriptor) [pid 3930] close(9) = -1 EBADF (Bad file descriptor) [pid 3930] close(10) = -1 EBADF (Bad file descriptor) [pid 3930] close(11) = -1 EBADF (Bad file descriptor) [pid 3930] close(12) = -1 EBADF (Bad file descriptor) [pid 3930] close(13) = -1 EBADF (Bad file descriptor) [pid 3930] close(14) = -1 EBADF (Bad file descriptor) [pid 3930] close(15) = -1 EBADF (Bad file descriptor) [pid 3930] close(16) = -1 EBADF (Bad file descriptor) [pid 3930] close(17) = -1 EBADF (Bad file descriptor) [pid 3930] close(18) = -1 EBADF (Bad file descriptor) [pid 3930] close(19) = -1 EBADF (Bad file descriptor) [pid 3930] close(20) = -1 EBADF (Bad file descriptor) [pid 3930] close(21) = -1 EBADF (Bad file descriptor) [pid 3930] close(22) = -1 EBADF (Bad file descriptor) [pid 3930] close(23) = -1 EBADF (Bad file descriptor) [pid 3930] close(24) = -1 EBADF (Bad file descriptor) [pid 3930] close(25) = -1 EBADF (Bad file descriptor) [pid 3930] close(26) = -1 EBADF (Bad file descriptor) [pid 3930] close(27) = -1 EBADF (Bad file descriptor) [pid 3930] close(28) = -1 EBADF (Bad file descriptor) [pid 3930] close(29) = -1 EBADF (Bad file descriptor) [pid 3930] exit_group(0) = ? [pid 3930] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3931 attached [pid 3931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... clone resumed>, child_tidptr=0x5555570bd5d0) = 296 [pid 3931] <... prctl resumed>) = 0 [pid 3931] setpgid(0, 0) = 0 [pid 3931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3931] write(3, "1000", 4) = 4 [pid 3931] close(3) = 0 [pid 3931] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3931] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3931] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3931] write(4, "5", 1) = 1 [pid 3931] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 132.821333][ T3931] FAULT_INJECTION: forcing a failure. [ 132.821333][ T3931] name failslab, interval 1, probability 0, space 0, times 0 [ 132.833974][ T3931] CPU: 1 PID: 3931 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 132.844145][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.854198][ T3931] Call Trace: [ 132.857475][ T3931] [ 132.860395][ T3931] dump_stack_lvl+0xcd/0x134 [ 132.864981][ T3931] should_fail.cold+0x5/0xa [ 132.869482][ T3931] should_failslab+0x5/0x10 [ 132.873981][ T3931] kmem_cache_alloc_trace+0x60/0x3f0 [ 132.879261][ T3931] ? ref_tracker_alloc+0x14c/0x550 [ 132.884369][ T3931] ref_tracker_alloc+0x14c/0x550 [ 132.889307][ T3931] ? ref_tracker_free+0x6b0/0x6b0 [ 132.894504][ T3931] ? lock_release+0x720/0x720 [ 132.899172][ T3931] ? do_raw_spin_lock+0x120/0x2a0 [ 132.904187][ T3931] ? rwlock_bug.part.0+0x90/0x90 [ 132.909115][ T3931] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 132.914484][ T3931] linkwatch_fire_event+0x202/0x260 [ 132.919705][ T3931] netif_carrier_off+0x96/0xb0 [ 132.924466][ T3931] __tun_detach+0xfe7/0x13e0 [ 132.929059][ T3931] tun_chr_close+0xc4/0x180 [ 132.933555][ T3931] __fput+0x277/0x9d0 [ 132.937727][ T3931] ? __tun_detach+0x13e0/0x13e0 [ 132.942590][ T3931] task_work_run+0xdd/0x1a0 [ 132.947089][ T3931] ptrace_notify+0x114/0x140 [ 132.951692][ T3931] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 132.957928][ T3931] syscall_exit_to_user_mode+0x9/0x60 [ 132.963293][ T3931] do_syscall_64+0x42/0xb0 [ 132.967703][ T3931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.973677][ T3931] RIP: 0033:0x7fc6cd2767a3 [ 132.978081][ T3931] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 132.997687][ T3931] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.006098][ T3931] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3931] close(3) = 0 [pid 3931] close(4) = 0 [pid 3931] close(5) = -1 EBADF (Bad file descriptor) [pid 3931] close(6) = -1 EBADF (Bad file descriptor) [pid 3931] close(7) = -1 EBADF (Bad file descriptor) [pid 3931] close(8) = -1 EBADF (Bad file descriptor) [pid 3931] close(9) = -1 EBADF (Bad file descriptor) [pid 3931] close(10) = -1 EBADF (Bad file descriptor) [pid 3931] close(11) = -1 EBADF (Bad file descriptor) [pid 3931] close(12) = -1 EBADF (Bad file descriptor) [pid 3931] close(13) = -1 EBADF (Bad file descriptor) [pid 3931] close(14) = -1 EBADF (Bad file descriptor) [pid 3931] close(15) = -1 EBADF (Bad file descriptor) [pid 3931] close(16) = -1 EBADF (Bad file descriptor) [pid 3931] close(17) = -1 EBADF (Bad file descriptor) [pid 3931] close(18) = -1 EBADF (Bad file descriptor) [pid 3931] close(19) = -1 EBADF (Bad file descriptor) [pid 3931] close(20) = -1 EBADF (Bad file descriptor) [pid 3931] close(21) = -1 EBADF (Bad file descriptor) [pid 3931] close(22) = -1 EBADF (Bad file descriptor) [pid 3931] close(23) = -1 EBADF (Bad file descriptor) [pid 3931] close(24) = -1 EBADF (Bad file descriptor) [ 133.014597][ T3931] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 133.022742][ T3931] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 133.030705][ T3931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 133.038662][ T3931] R13: 00000000000f4240 R14: 0000000000020585 R15: 00007ffdc49a5924 [ 133.046633][ T3931] [pid 3931] close(25) = -1 EBADF (Bad file descriptor) [pid 3931] close(26) = -1 EBADF (Bad file descriptor) [pid 3931] close(27) = -1 EBADF (Bad file descriptor) [pid 3931] close(28) = -1 EBADF (Bad file descriptor) [pid 3931] close(29) = -1 EBADF (Bad file descriptor) [pid 3931] exit_group(0) = ? [pid 3931] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 297 ./strace-static-x86_64: Process 3932 attached [pid 3932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3932] setpgid(0, 0) = 0 [pid 3932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3932] write(3, "1000", 4) = 4 [pid 3932] close(3) = 0 [pid 3932] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3932] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3932] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3932] write(4, "5", 1) = 1 [pid 3932] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 133.118168][ T3932] FAULT_INJECTION: forcing a failure. [ 133.118168][ T3932] name failslab, interval 1, probability 0, space 0, times 0 [ 133.131143][ T3932] CPU: 0 PID: 3932 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 133.141721][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.152024][ T3932] Call Trace: [ 133.155305][ T3932] [ 133.158220][ T3932] dump_stack_lvl+0xcd/0x134 [ 133.162806][ T3932] should_fail.cold+0x5/0xa [ 133.167318][ T3932] should_failslab+0x5/0x10 [ 133.171812][ T3932] kmem_cache_alloc_trace+0x60/0x3f0 [ 133.177089][ T3932] ? ref_tracker_alloc+0x14c/0x550 [ 133.182204][ T3932] ref_tracker_alloc+0x14c/0x550 [ 133.187154][ T3932] ? ref_tracker_free+0x6b0/0x6b0 [ 133.192174][ T3932] ? lock_release+0x720/0x720 [ 133.196848][ T3932] ? do_raw_spin_lock+0x120/0x2a0 [ 133.201886][ T3932] ? rwlock_bug.part.0+0x90/0x90 [ 133.206835][ T3932] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 133.212236][ T3932] linkwatch_fire_event+0x202/0x260 [ 133.217448][ T3932] netif_carrier_off+0x96/0xb0 [ 133.222213][ T3932] __tun_detach+0xfe7/0x13e0 [ 133.226882][ T3932] tun_chr_close+0xc4/0x180 [ 133.231375][ T3932] __fput+0x277/0x9d0 [ 133.235342][ T3932] ? __tun_detach+0x13e0/0x13e0 [ 133.240517][ T3932] task_work_run+0xdd/0x1a0 [ 133.245098][ T3932] ptrace_notify+0x114/0x140 [ 133.249679][ T3932] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 133.256044][ T3932] syscall_exit_to_user_mode+0x9/0x60 [ 133.261404][ T3932] do_syscall_64+0x42/0xb0 [ 133.265810][ T3932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.271688][ T3932] RIP: 0033:0x7fc6cd2767a3 [ 133.276088][ T3932] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 133.295769][ T3932] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.304166][ T3932] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3932] close(3) = 0 [pid 3932] close(4) = 0 [pid 3932] close(5) = -1 EBADF (Bad file descriptor) [pid 3932] close(6) = -1 EBADF (Bad file descriptor) [pid 3932] close(7) = -1 EBADF (Bad file descriptor) [pid 3932] close(8) = -1 EBADF (Bad file descriptor) [pid 3932] close(9) = -1 EBADF (Bad file descriptor) [pid 3932] close(10) = -1 EBADF (Bad file descriptor) [pid 3932] close(11) = -1 EBADF (Bad file descriptor) [pid 3932] close(12) = -1 EBADF (Bad file descriptor) [pid 3932] close(13) = -1 EBADF (Bad file descriptor) [pid 3932] close(14) = -1 EBADF (Bad file descriptor) [pid 3932] close(15) = -1 EBADF (Bad file descriptor) [pid 3932] close(16) = -1 EBADF (Bad file descriptor) [pid 3932] close(17) = -1 EBADF (Bad file descriptor) [pid 3932] close(18) = -1 EBADF (Bad file descriptor) [pid 3932] close(19) = -1 EBADF (Bad file descriptor) [pid 3932] close(20) = -1 EBADF (Bad file descriptor) [pid 3932] close(21) = -1 EBADF (Bad file descriptor) [pid 3932] close(22) = -1 EBADF (Bad file descriptor) [pid 3932] close(23) = -1 EBADF (Bad file descriptor) [pid 3932] close(24) = -1 EBADF (Bad file descriptor) [pid 3932] close(25) = -1 EBADF (Bad file descriptor) [pid 3932] close(26) = -1 EBADF (Bad file descriptor) [pid 3932] close(27) = -1 EBADF (Bad file descriptor) [pid 3932] close(28) = -1 EBADF (Bad file descriptor) [pid 3932] close(29) = -1 EBADF (Bad file descriptor) [pid 3932] exit_group(0) = ? [pid 3932] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570bd5d0) = 298 ./strace-static-x86_64: Process 3933 attached [pid 3933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3933] setpgid(0, 0) = 0 [pid 3933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3933] write(3, "1000", 4) = 4 [pid 3933] close(3) = 0 [pid 3933] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3933] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3933] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3933] write(4, "5", 1) = 1 [pid 3933] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 133.312118][ T3932] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 133.320079][ T3932] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 133.328076][ T3932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 133.336028][ T3932] R13: 00000000000f4240 R14: 00000000000206b6 R15: 00007ffdc49a5924 [ 133.343990][ T3932] [ 133.392338][ T3933] FAULT_INJECTION: forcing a failure. [ 133.392338][ T3933] name failslab, interval 1, probability 0, space 0, times 0 [ 133.405078][ T3933] CPU: 0 PID: 3933 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 133.415218][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.425277][ T3933] Call Trace: [ 133.428549][ T3933] [ 133.431476][ T3933] dump_stack_lvl+0xcd/0x134 [ 133.436147][ T3933] should_fail.cold+0x5/0xa [ 133.440636][ T3933] should_failslab+0x5/0x10 [ 133.445121][ T3933] kmem_cache_alloc_trace+0x60/0x3f0 [ 133.450397][ T3933] ? ref_tracker_alloc+0x14c/0x550 [ 133.455501][ T3933] ref_tracker_alloc+0x14c/0x550 [ 133.460429][ T3933] ? ref_tracker_free+0x6b0/0x6b0 [ 133.465440][ T3933] ? lock_release+0x720/0x720 [ 133.470120][ T3933] ? do_raw_spin_lock+0x120/0x2a0 [ 133.475133][ T3933] ? rwlock_bug.part.0+0x90/0x90 [ 133.480061][ T3933] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 133.485426][ T3933] linkwatch_fire_event+0x202/0x260 [ 133.490639][ T3933] netif_carrier_off+0x96/0xb0 [ 133.495399][ T3933] __tun_detach+0xfe7/0x13e0 [ 133.499991][ T3933] tun_chr_close+0xc4/0x180 [ 133.504489][ T3933] __fput+0x277/0x9d0 [ 133.508456][ T3933] ? __tun_detach+0x13e0/0x13e0 [ 133.513296][ T3933] task_work_run+0xdd/0x1a0 [ 133.517789][ T3933] ptrace_notify+0x114/0x140 [ 133.522368][ T3933] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 133.528598][ T3933] syscall_exit_to_user_mode+0x9/0x60 [ 133.533957][ T3933] do_syscall_64+0x42/0xb0 [ 133.538360][ T3933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.544246][ T3933] RIP: 0033:0x7fc6cd2767a3 [ 133.548647][ T3933] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 133.568242][ T3933] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.576648][ T3933] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 133.584605][ T3933] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3933] close(3) = 0 [pid 3933] close(4) = 0 [pid 3933] close(5) = -1 EBADF (Bad file descriptor) [pid 3933] close(6) = -1 EBADF (Bad file descriptor) [pid 3933] close(7) = -1 EBADF (Bad file descriptor) [pid 3933] close(8) = -1 EBADF (Bad file descriptor) [pid 3933] close(9) = -1 EBADF (Bad file descriptor) [pid 3933] close(10) = -1 EBADF (Bad file descriptor) [pid 3933] close(11) = -1 EBADF (Bad file descriptor) [pid 3933] close(12) = -1 EBADF (Bad file descriptor) [pid 3933] close(13) = -1 EBADF (Bad file descriptor) [pid 3933] close(14) = -1 EBADF (Bad file descriptor) [pid 3933] close(15) = -1 EBADF (Bad file descriptor) [pid 3933] close(16) = -1 EBADF (Bad file descriptor) [pid 3933] close(17) = -1 EBADF (Bad file descriptor) [ 133.592562][ T3933] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 133.600523][ T3933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 133.608481][ T3933] R13: 00000000000f4240 R14: 00000000000207df R15: 00007ffdc49a5924 [ 133.616453][ T3933] [pid 3933] close(18) = -1 EBADF (Bad file descriptor) [pid 3933] close(19) = -1 EBADF (Bad file descriptor) [pid 3933] close(20) = -1 EBADF (Bad file descriptor) [pid 3933] close(21) = -1 EBADF (Bad file descriptor) [pid 3933] close(22) = -1 EBADF (Bad file descriptor) [pid 3933] close(23) = -1 EBADF (Bad file descriptor) [pid 3933] close(24) = -1 EBADF (Bad file descriptor) [pid 3933] close(25) = -1 EBADF (Bad file descriptor) [pid 3933] close(26) = -1 EBADF (Bad file descriptor) [pid 3933] close(27) = -1 EBADF (Bad file descriptor) [pid 3933] close(28) = -1 EBADF (Bad file descriptor) [pid 3933] close(29) = -1 EBADF (Bad file descriptor) [pid 3933] exit_group(0) = ? [pid 3933] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3934 attached , child_tidptr=0x5555570bd5d0) = 299 [pid 3934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3934] setpgid(0, 0) = 0 [pid 3934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3934] write(3, "1000", 4) = 4 [pid 3934] close(3) = 0 [pid 3934] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3934] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3934] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3934] write(4, "5", 1) = 1 [pid 3934] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 133.690817][ T3934] FAULT_INJECTION: forcing a failure. [ 133.690817][ T3934] name failslab, interval 1, probability 0, space 0, times 0 [ 133.703538][ T3934] CPU: 0 PID: 3934 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 133.713684][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.723740][ T3934] Call Trace: [ 133.727030][ T3934] [ 133.729950][ T3934] dump_stack_lvl+0xcd/0x134 [ 133.734540][ T3934] should_fail.cold+0x5/0xa [ 133.739045][ T3934] should_failslab+0x5/0x10 [ 133.743545][ T3934] kmem_cache_alloc_trace+0x60/0x3f0 [ 133.748826][ T3934] ? ref_tracker_alloc+0x14c/0x550 [ 133.753940][ T3934] ref_tracker_alloc+0x14c/0x550 [ 133.758870][ T3934] ? ref_tracker_free+0x6b0/0x6b0 [ 133.763882][ T3934] ? lock_release+0x720/0x720 [ 133.768551][ T3934] ? do_raw_spin_lock+0x120/0x2a0 [ 133.773574][ T3934] ? rwlock_bug.part.0+0x90/0x90 [ 133.778503][ T3934] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 133.783871][ T3934] linkwatch_fire_event+0x202/0x260 [ 133.789066][ T3934] netif_carrier_off+0x96/0xb0 [ 133.793825][ T3934] __tun_detach+0xfe7/0x13e0 [ 133.798415][ T3934] tun_chr_close+0xc4/0x180 [ 133.802914][ T3934] __fput+0x277/0x9d0 [ 133.806887][ T3934] ? __tun_detach+0x13e0/0x13e0 [ 133.811728][ T3934] task_work_run+0xdd/0x1a0 [ 133.816227][ T3934] ptrace_notify+0x114/0x140 [ 133.820817][ T3934] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 133.827056][ T3934] syscall_exit_to_user_mode+0x9/0x60 [ 133.832597][ T3934] do_syscall_64+0x42/0xb0 [ 133.837016][ T3934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.842905][ T3934] RIP: 0033:0x7fc6cd2767a3 [ 133.847317][ T3934] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 133.867149][ T3934] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.875564][ T3934] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 133.883542][ T3934] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3934] close(3) = 0 [pid 3934] close(4) = 0 [pid 3934] close(5) = -1 EBADF (Bad file descriptor) [pid 3934] close(6) = -1 EBADF (Bad file descriptor) [pid 3934] close(7) = -1 EBADF (Bad file descriptor) [pid 3934] close(8) = -1 EBADF (Bad file descriptor) [pid 3934] close(9) = -1 EBADF (Bad file descriptor) [pid 3934] close(10) = -1 EBADF (Bad file descriptor) [pid 3934] close(11) = -1 EBADF (Bad file descriptor) [pid 3934] close(12) = -1 EBADF (Bad file descriptor) [pid 3934] close(13) = -1 EBADF (Bad file descriptor) [pid 3934] close(14) = -1 EBADF (Bad file descriptor) [pid 3934] close(15) = -1 EBADF (Bad file descriptor) [pid 3934] close(16) = -1 EBADF (Bad file descriptor) [pid 3934] close(17) = -1 EBADF (Bad file descriptor) [pid 3934] close(18) = -1 EBADF (Bad file descriptor) [pid 3934] close(19) = -1 EBADF (Bad file descriptor) [pid 3934] close(20) = -1 EBADF (Bad file descriptor) [pid 3934] close(21) = -1 EBADF (Bad file descriptor) [pid 3934] close(22) = -1 EBADF (Bad file descriptor) [pid 3934] close(23) = -1 EBADF (Bad file descriptor) [pid 3934] close(24) = -1 EBADF (Bad file descriptor) [pid 3934] close(25) = -1 EBADF (Bad file descriptor) [pid 3934] close(26) = -1 EBADF (Bad file descriptor) [pid 3934] close(27) = -1 EBADF (Bad file descriptor) [pid 3934] close(28) = -1 EBADF (Bad file descriptor) [pid 3934] close(29) = -1 EBADF (Bad file descriptor) [pid 3934] exit_group(0) = ? [pid 3934] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3935 attached , child_tidptr=0x5555570bd5d0) = 300 [pid 3935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3935] setpgid(0, 0) = 0 [pid 3935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3935] write(3, "1000", 4) = 4 [pid 3935] close(3) = 0 [pid 3935] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3935] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3935] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3935] write(4, "5", 1) = 1 [pid 3935] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 133.891591][ T3934] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 133.899556][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 133.907518][ T3934] R13: 00000000000f4240 R14: 00000000000208f3 R15: 00007ffdc49a5924 [ 133.915493][ T3934] [ 133.967163][ T3935] FAULT_INJECTION: forcing a failure. [ 133.967163][ T3935] name failslab, interval 1, probability 0, space 0, times 0 [ 133.979885][ T3935] CPU: 0 PID: 3935 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 133.990044][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.000356][ T3935] Call Trace: [ 134.003653][ T3935] [ 134.006576][ T3935] dump_stack_lvl+0xcd/0x134 [ 134.011176][ T3935] should_fail.cold+0x5/0xa [ 134.015703][ T3935] should_failslab+0x5/0x10 [ 134.020229][ T3935] kmem_cache_alloc_trace+0x60/0x3f0 [ 134.025532][ T3935] ? ref_tracker_alloc+0x14c/0x550 [ 134.030675][ T3935] ref_tracker_alloc+0x14c/0x550 [ 134.035724][ T3935] ? ref_tracker_free+0x6b0/0x6b0 [ 134.040755][ T3935] ? lock_release+0x720/0x720 [ 134.045614][ T3935] ? do_raw_spin_lock+0x120/0x2a0 [ 134.050645][ T3935] ? rwlock_bug.part.0+0x90/0x90 [ 134.055595][ T3935] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 134.061079][ T3935] linkwatch_fire_event+0x202/0x260 [ 134.066290][ T3935] netif_carrier_off+0x96/0xb0 [ 134.071057][ T3935] __tun_detach+0xfe7/0x13e0 [ 134.075645][ T3935] tun_chr_close+0xc4/0x180 [ 134.080138][ T3935] __fput+0x277/0x9d0 [ 134.084110][ T3935] ? __tun_detach+0x13e0/0x13e0 [ 134.088956][ T3935] task_work_run+0xdd/0x1a0 [ 134.093461][ T3935] ptrace_notify+0x114/0x140 [ 134.098067][ T3935] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 134.104329][ T3935] syscall_exit_to_user_mode+0x9/0x60 [ 134.109719][ T3935] do_syscall_64+0x42/0xb0 [ 134.114244][ T3935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.120258][ T3935] RIP: 0033:0x7fc6cd2767a3 [ 134.124674][ T3935] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 134.144278][ T3935] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 134.152695][ T3935] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [pid 3935] close(3) = 0 [pid 3935] close(4) = 0 [pid 3935] close(5) = -1 EBADF (Bad file descriptor) [pid 3935] close(6) = -1 EBADF (Bad file descriptor) [pid 3935] close(7) = -1 EBADF (Bad file descriptor) [pid 3935] close(8) = -1 EBADF (Bad file descriptor) [pid 3935] close(9) = -1 EBADF (Bad file descriptor) [pid 3935] close(10) = -1 EBADF (Bad file descriptor) [pid 3935] close(11) = -1 EBADF (Bad file descriptor) [pid 3935] close(12) = -1 EBADF (Bad file descriptor) [pid 3935] close(13) = -1 EBADF (Bad file descriptor) [ 134.160668][ T3935] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 134.168639][ T3935] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 134.176689][ T3935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 134.184653][ T3935] R13: 00000000000f4240 R14: 0000000000020a1a R15: 00007ffdc49a5924 [ 134.192637][ T3935] [pid 3935] close(14) = -1 EBADF (Bad file descriptor) [pid 3935] close(15) = -1 EBADF (Bad file descriptor) [pid 3935] close(16) = -1 EBADF (Bad file descriptor) [pid 3935] close(17) = -1 EBADF (Bad file descriptor) [pid 3935] close(18) = -1 EBADF (Bad file descriptor) [pid 3935] close(19) = -1 EBADF (Bad file descriptor) [pid 3935] close(20) = -1 EBADF (Bad file descriptor) [pid 3935] close(21) = -1 EBADF (Bad file descriptor) [pid 3935] close(22) = -1 EBADF (Bad file descriptor) [pid 3935] close(23) = -1 EBADF (Bad file descriptor) [pid 3935] close(24) = -1 EBADF (Bad file descriptor) [pid 3935] close(25) = -1 EBADF (Bad file descriptor) [pid 3935] close(26) = -1 EBADF (Bad file descriptor) [pid 3935] close(27) = -1 EBADF (Bad file descriptor) [pid 3935] close(28) = -1 EBADF (Bad file descriptor) [pid 3935] close(29) = -1 EBADF (Bad file descriptor) [pid 3935] exit_group(0) = ? [pid 3935] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3936 attached , child_tidptr=0x5555570bd5d0) = 301 [pid 3936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3936] setpgid(0, 0) = 0 [pid 3936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3936] write(3, "1000", 4) = 4 [pid 3936] close(3) = 0 [pid 3936] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3936] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3936] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3936] write(4, "5", 1) = 1 [pid 3936] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 134.264435][ T3936] FAULT_INJECTION: forcing a failure. [ 134.264435][ T3936] name failslab, interval 1, probability 0, space 0, times 0 [ 134.277076][ T3936] CPU: 0 PID: 3936 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 134.287304][ T3936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.297444][ T3936] Call Trace: [ 134.300719][ T3936] [ 134.303655][ T3936] dump_stack_lvl+0xcd/0x134 [ 134.308274][ T3936] should_fail.cold+0x5/0xa [ 134.312792][ T3936] should_failslab+0x5/0x10 [ 134.317317][ T3936] kmem_cache_alloc_trace+0x60/0x3f0 [ 134.322606][ T3936] ? ref_tracker_alloc+0x14c/0x550 [ 134.327719][ T3936] ref_tracker_alloc+0x14c/0x550 [ 134.332654][ T3936] ? ref_tracker_free+0x6b0/0x6b0 [ 134.337670][ T3936] ? lock_release+0x720/0x720 [ 134.342343][ T3936] ? do_raw_spin_lock+0x120/0x2a0 [ 134.347361][ T3936] ? rwlock_bug.part.0+0x90/0x90 [ 134.352294][ T3936] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 134.357666][ T3936] linkwatch_fire_event+0x202/0x260 [ 134.362869][ T3936] netif_carrier_off+0x96/0xb0 [ 134.367635][ T3936] __tun_detach+0xfe7/0x13e0 [ 134.372234][ T3936] tun_chr_close+0xc4/0x180 [ 134.376728][ T3936] __fput+0x277/0x9d0 [ 134.380704][ T3936] ? __tun_detach+0x13e0/0x13e0 [ 134.385551][ T3936] task_work_run+0xdd/0x1a0 [ 134.390052][ T3936] ptrace_notify+0x114/0x140 [ 134.394634][ T3936] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 134.400874][ T3936] syscall_exit_to_user_mode+0x9/0x60 [ 134.406243][ T3936] do_syscall_64+0x42/0xb0 [ 134.410655][ T3936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.416553][ T3936] RIP: 0033:0x7fc6cd2767a3 [ 134.420971][ T3936] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 134.440575][ T3936] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 134.448989][ T3936] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 134.456953][ T3936] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3936] close(3) = 0 [pid 3936] close(4) = 0 [pid 3936] close(5) = -1 EBADF (Bad file descriptor) [pid 3936] close(6) = -1 EBADF (Bad file descriptor) [pid 3936] close(7) = -1 EBADF (Bad file descriptor) [pid 3936] close(8) = -1 EBADF (Bad file descriptor) [pid 3936] close(9) = -1 EBADF (Bad file descriptor) [pid 3936] close(10) = -1 EBADF (Bad file descriptor) [pid 3936] close(11) = -1 EBADF (Bad file descriptor) [pid 3936] close(12) = -1 EBADF (Bad file descriptor) [pid 3936] close(13) = -1 EBADF (Bad file descriptor) [pid 3936] close(14) = -1 EBADF (Bad file descriptor) [pid 3936] close(15) = -1 EBADF (Bad file descriptor) [pid 3936] close(16) = -1 EBADF (Bad file descriptor) [pid 3936] close(17) = -1 EBADF (Bad file descriptor) [pid 3936] close(18) = -1 EBADF (Bad file descriptor) [pid 3936] close(19) = -1 EBADF (Bad file descriptor) [pid 3936] close(20) = -1 EBADF (Bad file descriptor) [pid 3936] close(21) = -1 EBADF (Bad file descriptor) [pid 3936] close(22) = -1 EBADF (Bad file descriptor) [pid 3936] close(23) = -1 EBADF (Bad file descriptor) [pid 3936] close(24) = -1 EBADF (Bad file descriptor) [pid 3936] close(25) = -1 EBADF (Bad file descriptor) [pid 3936] close(26) = -1 EBADF (Bad file descriptor) [pid 3936] close(27) = -1 EBADF (Bad file descriptor) [pid 3936] close(28) = -1 EBADF (Bad file descriptor) [pid 3936] close(29) = -1 EBADF (Bad file descriptor) [ 134.464916][ T3936] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 134.472876][ T3936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 134.480842][ T3936] R13: 00000000000f4240 R14: 0000000000020b34 R15: 00007ffdc49a5924 [ 134.488822][ T3936] [pid 3936] exit_group(0) = ? [pid 3936] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=24} --- [pid 3603] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3937 attached , child_tidptr=0x5555570bd5d0) = 302 [pid 3937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3937] setpgid(0, 0) = 0 [pid 3937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3937] write(3, "1000", 4) = 4 [pid 3937] close(3) = 0 [pid 3937] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3937] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3937] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3937] write(4, "5", 1) = 1 [pid 3937] writev(3, [{iov_base="\x3a\xa3\xb4\x10\xa6\x64\x8e\x00\x68\xc8\xb8\x58\x48\x22\xb8\xce\x5d\x9b\x1f\xcc\x1e\x9a\x06\x98\x04\xed\x37\x99\x9d\xdd\x7b\x56\x84\xc9\x37\xa3\xfa\xfd\xdf\x1f\x02\xb4\x13\x1f\x53\xd4\xf2\x27\xaa\xf3\xaa\x54\x0c\x46\xa9\xdf\x88\x67\xb9\xcc\x99\xac\x2f\xfc\x8d\x19\xa1\x28\xd3\xd4\x4e\xc4\x41\x24\x6c\x11\x5f\xb5\x2b\xe8\x26\xc3\x56\x50\x00\x75\xb3\xc8\x1d\xdd\x00\x46\xbc\xb6\xbb\x9b\x3c\xe1\xfa\xe7"..., iov_len=2147479552}, {iov_base="\xa8\xe6\x05\x21\x97\x3b\x23\xac\x64\xd9\x77\x6a\x4e\x3f\x95\x1c\x80\x59\xce\xff\x67\x23\x10\x9e\x72\x3d\x1d\xf1\xf1\x66\x4b\x4c\x39\xcb\x00\x4a\x04\x40\x6c\xe5\xd0\x2a\x50\x53\xfd\x3a\x82\x55\xfc\x13\xe7\xdb\x21\x14\xe5\xf9\x4e\xcd\x14\xfc\xaf\x6d\x23\x45\x63\xea\x0c\x6a\x59\xf3\x92\x2b\xab\xe3\xb1\x13\xa6\xf1\x3f\xb4\x06\x0f\x87\xb6\x07\x39\x7f\x3b\x7a\xd5\x7b\x57\xf9\x67\x04\x25\xf9\x57\x9e\xf0"..., iov_len=104}, {iov_base="\x69\x2f\xb2\x65\x5d\x75\x66\xe5\x1f\xb4\xc7\xa8\xd3\x42\x1c\x97\x57\xde\x9d\x4e\x3b\xe6\xfc\xbd\x28\x65\x25\x73\xbd\xf5\xe8\x99\x14\x3a\x7f\x03\x23\xf2\xa3\x0f\xd9\x23\xac\x79\x2b\xa0\x9e\x41\xcc\x36\xe3\xfd\x35\x7e\xa6\xe1\x34\xf2\x48\xb0\xc6\xd6\xa9\x10\xc5\x30\xa0\xb1\x0b\x47\x7f\x8c\x79\x4b\x8b\x32\xae\xb4\xfe\x29\x87\xb4\x07\xa9\x2b\x4e\xad\xb6\x88\xb5\x89\xa1\x24\x25\xe2\x06\xab\x2d\xd7\xd1"..., iov_len=116}, {iov_base="\x65\xe7\x26\x8f\x39\xcd\x10\x42\x07\x16\xfa\xce\x5e\xe3\x09\x35\xa1\xc6\xa9\xac\x1f\x9e\x7e\xf6\x4d\x73\xac\x32\xdf\x42\xcf\x94\x93\x9d\x10\xce\xa7\xd4\x72\x2e\x14\xb9\x25\xb4\x6d\xb6\x5b\x58", iov_len=48}, {iov_base="\xf2\xc5\xd1\x88\x00\x1a\x91\xdf\x08\x4f\xf0\xb9\x7e\xc9\x7f\xbd\x58\x85\x64\x5e\xa6\x25\x6f\x9b\x5b\xcc\x47\xc7\x73\xae\x99\x68\x0a\xfc\x70\xae\x9f\xe9\x10\x67\x08\xb8\xc8\xae\xde\x43\xe6\x3d\xcb\x98\x06\xc6\x22\x93\x8b\x4f\x25\xe6\x8b\x86\xce\x99\xe2\x29\x13\x38\x9a\x51\x45\x4b\x07\xba\x6d\x49\x2b\x48\x2a\xe7\xfa\xf9\x05\xaf\x94\xb4\xe6\x3a\xfe\x2a\x68\x63\x6a\xda\xf6\x56\x46\xba\x1b\x35\xcc\xd1"..., iov_len=117}, {iov_base="\x78\x87\x2b\x96\x4c\x8b\x9e\x62\x96\xe2\x80\xca\x5a\x3b\x86\x68\xb5\x41\xdc\x13\xb1\xbc\xb7\x87\xc7\x6c\x97\x0d\xe6\xb5\x48\x1b\xe6\x4e\x13\xd1\x8f\xe2\x4e\xd7\x81\xed\xeb\x6a\x8b\xba\xb7\x29\xbe\xa1\x9b\x6a\x00\xb5\xd4\x9b\x03\x5a\x8f\x4a\xd4\xca\x48\x22\xba\xa0", iov_len=66}, {iov_base="\x46\x54\x65\x30\xdf\x26\xed\x5c\x86\x01\xa8\x0d\xf6\xd4\x3e\x0e\xb3\x77\x35\x91\x90\xee\xa6\xe3\x1a\xe1\x95\x55\x6c\x79\x95\x30\xfd\xff\x94\x56\x8b\xc7\xe6\xb1\x6a\xda\xeb\x48\x92\xa0\x07\x76\x46\x01\x7c\xd5\x94\x45\x62\xd4\x46\x4e\xe8\x5f\xfb\xfc\x20\xcf\xdb\x50\x54\xcb\x4d\xe4\xb5\x6c\x15\x29\x94\x3e\x3c\x09\xc2\x12\x32\x2f\x8c\xbd\x47\x06\xcd\xef\x66\xcb\xa0\xaf\x7d\x63\x62\x23\x9c\xc7\xca\xae"..., iov_len=322}, {iov_base="\x13\xa4\xd1\xac\x8e\x8f\x72\x8b\xf0\x31\x1d\x4d\x8a\xb1\x1a\x6e\xea\x2d\xe2\xbf\x9d\xbf\xa6\x92\xe0\x47\x4f\x89\xca\x85\x16\x2a\x4f\x1e\x09\xa4\x21\xd1\xd1\xd7\x2c\x64\x76\xb4\x9d\x35\xda\x40\x5b\x87\x27\x01\x05\xf7\x22\x43\x0e\x2b\x51\xf7\x8e\x6f\x45\xc2\x97\xec\x24\xe5\xa9\x2a\xd2\x17\x6a\xd5\x66\xbe\xeb\x16\xa3\xb6\xe5\x91\xf5\xc2\x8e\x64\x7b\x6e\xe2\x77\xa7\x6a\x48\xec\x9a\x67\xc3\xf0\x06\x02"..., iov_len=168}, {iov_base="\x8a\xea\x20\x76\x65\xef\x47\x44\x1c\x62\x71\xf7\x76\x9b\x7b\x9d\x53\xda\xfd\x94\xef\x92\x8d\xae\x83\x49\x43\x8b\x5c\xfb\x56\x92\x8b\x49\xa9\xd6\x58\x90\xd9\xf5\xf0\x72\xc7\xbc\x18\x43\x00\x66\xc8\x37\x9d\xe7\x74\xd2\x98\xd1\x6f\x80\xcc\xa2\x3e\x12\x58\x91\xdc\xf5\x94\xc7\x0a\xc2\x56\x04\x7b\x84\xb7\x88\x3b\xc7\xfa\x75\x88\xd9\x11\x9c\x9f\xdb\x52\xa4\x5e\x7d\xe9\xe9\xfd\xec\x6e\xeb\xef\x5a\x2f\x9e"..., iov_len=3180}], 9) = -1 ENOMEM (Cannot allocate memory) [ 134.559832][ T3937] FAULT_INJECTION: forcing a failure. [ 134.559832][ T3937] name failslab, interval 1, probability 0, space 0, times 0 [ 134.572468][ T3937] CPU: 1 PID: 3937 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 134.582617][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.592668][ T3937] Call Trace: [ 134.595947][ T3937] [ 134.598875][ T3937] dump_stack_lvl+0xcd/0x134 [ 134.603480][ T3937] should_fail.cold+0x5/0xa [ 134.608018][ T3937] should_failslab+0x5/0x10 [ 134.612522][ T3937] kmem_cache_alloc_trace+0x60/0x3f0 [ 134.617801][ T3937] ? ref_tracker_alloc+0x14c/0x550 [ 134.622910][ T3937] ref_tracker_alloc+0x14c/0x550 [ 134.627847][ T3937] ? ref_tracker_free+0x6b0/0x6b0 [ 134.632867][ T3937] ? lock_release+0x720/0x720 [ 134.637541][ T3937] ? do_raw_spin_lock+0x120/0x2a0 [ 134.642562][ T3937] ? rwlock_bug.part.0+0x90/0x90 [ 134.647493][ T3937] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 134.652870][ T3937] linkwatch_fire_event+0x202/0x260 [ 134.658072][ T3937] netif_carrier_off+0x96/0xb0 [ 134.662838][ T3937] __tun_detach+0xfe7/0x13e0 [ 134.667434][ T3937] tun_chr_close+0xc4/0x180 [ 134.671934][ T3937] __fput+0x277/0x9d0 [ 134.675903][ T3937] ? __tun_detach+0x13e0/0x13e0 [ 134.680748][ T3937] task_work_run+0xdd/0x1a0 [ 134.685245][ T3937] ptrace_notify+0x114/0x140 [ 134.689836][ T3937] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 134.696079][ T3937] syscall_exit_to_user_mode+0x9/0x60 [ 134.701443][ T3937] do_syscall_64+0x42/0xb0 [ 134.705853][ T3937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.711739][ T3937] RIP: 0033:0x7fc6cd2767a3 [ 134.716140][ T3937] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 134.735741][ T3937] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 134.744147][ T3937] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fc6cd2767a3 [ 134.752109][ T3937] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [pid 3937] close(3) = 0 [pid 3937] close(4) = 0 [pid 3937] close(5) = -1 EBADF (Bad file descriptor) [pid 3937] close(6) = -1 EBADF (Bad file descriptor) [pid 3937] close(7) = -1 EBADF (Bad file descriptor) [pid 3937] close(8) = -1 EBADF (Bad file descriptor) [pid 3937] close(9) = -1 EBADF (Bad file descriptor) [pid 3937] close(10) = -1 EBADF (Bad file descriptor) [pid 3937] close(11) = -1 EBADF (Bad file descriptor) [pid 3937] close(12) = -1 EBADF (Bad file descriptor) [pid 3937] close(13) = -1 EBADF (Bad file descriptor) [pid 3937] close(14) = -1 EBADF (Bad file descriptor) [pid 3937] close(15) = -1 EBADF (Bad file descriptor) [pid 3937] close(16) = -1 EBADF (Bad file descriptor) [pid 3937] close(17) = -1 EBADF (Bad file descriptor) [pid 3937] close(18) = -1 EBADF (Bad file descriptor) [pid 3937] close(19) = -1 EBADF (Bad file descriptor) [pid 3937] close(20) = -1 EBADF (Bad file descriptor) [pid 3937] close(21) = -1 EBADF (Bad file descriptor) [pid 3937] close(22) = -1 EBADF (Bad file descriptor) [pid 3937] close(23) = -1 EBADF (Bad file descriptor) [pid 3937] close(24) = -1 EBADF (Bad file descriptor) [pid 3937] close(25) = -1 EBADF (Bad file descriptor) [pid 3937] close(26) = -1 EBADF (Bad file descriptor) [pid 3937] close(27) = -1 EBADF (Bad file descriptor) [pid 3937] close(28) = -1 EBADF (Bad file descriptor) [pid 3937] close(29) = -1 EBADF (Bad file descriptor) [pid 3937] exit_group(0) = ? [pid 3937] +++ exited with 0 +++ [pid 3603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 3603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3938 attached , child_tidptr=0x5555570bd5d0) = 303 [pid 3938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3938] setpgid(0, 0) = 0 [pid 3938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3938] write(3, "1000", 4) = 4 [pid 3938] close(3) = 0 [pid 3938] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|0x4) = 3 [pid 3938] ioctl(3, TUNSETIFF, 0x20000000) = 0 [pid 3938] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3938] write(4, "5", 1) = 1 [ 134.760081][ T3937] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 134.768044][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 134.776004][ T3937] R13: 00000000000f4240 R14: 0000000000020c5a R15: 00007ffdc49a5924 [ 134.783975][ T3937] [ 134.834363][ T3938] FAULT_INJECTION: forcing a failure. [ 134.834363][ T3938] name failslab, interval 1, probability 0, space 0, times 0 [ 134.847123][ T3938] CPU: 0 PID: 3938 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 134.857269][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.867320][ T3938] Call Trace: [ 134.870602][ T3938] [ 134.873521][ T3938] dump_stack_lvl+0xcd/0x134 [ 134.878113][ T3938] should_fail.cold+0x5/0xa [ 134.882714][ T3938] should_failslab+0x5/0x10 [ 134.887249][ T3938] __kmalloc_node_track_caller+0x7d/0x360 [ 134.892972][ T3938] ? __napi_alloc_skb+0x70/0x310 [ 134.897910][ T3938] __alloc_skb+0xde/0x340 [ 134.902238][ T3938] ? __lock_acquire+0xbca/0x56c0 [ 134.907195][ T3938] __napi_alloc_skb+0x70/0x310 [ 134.911975][ T3938] napi_get_frags+0x5e/0x140 [ 134.916556][ T3938] tun_get_user+0xa07/0x3b00 [ 134.921155][ T3938] ? tun_build_skb+0x1170/0x1170 [ 134.926264][ T3938] ? lock_downgrade+0x6e0/0x6e0 [ 134.931115][ T3938] ? find_held_lock+0x2d/0x110 [ 134.935966][ T3938] tun_chr_write_iter+0xdb/0x200 [ 134.940901][ T3938] do_iter_readv_writev+0x3d1/0x640 [ 134.946094][ T3938] ? new_sync_write+0x560/0x560 [ 134.951023][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 134.957257][ T3938] ? security_file_permission+0xab/0xd0 [ 134.962891][ T3938] do_iter_write+0x182/0x700 [ 134.967475][ T3938] ? import_iovec+0x10c/0x150 [ 134.972147][ T3938] vfs_writev+0x1aa/0x630 [ 134.976466][ T3938] ? vfs_iter_write+0xa0/0xa0 [ 134.981129][ T3938] ? do_raw_spin_lock+0x120/0x2a0 [ 134.986143][ T3938] ? rwlock_bug.part.0+0x90/0x90 [ 134.991071][ T3938] ? _raw_spin_lock_irq+0x41/0x50 [ 134.996191][ T3938] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 135.002439][ T3938] ? find_held_lock+0x2d/0x110 [ 135.007191][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.011859][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.018082][ T3938] ? __fget_light+0x20f/0x270 [ 135.022764][ T3938] do_writev+0x133/0x2f0 [ 135.026993][ T3938] ? vfs_writev+0x630/0x630 [ 135.031480][ T3938] ? lockdep_hardirqs_on+0x79/0x100 [ 135.036670][ T3938] ? _raw_spin_unlock_irq+0x2a/0x40 [ 135.041853][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.046526][ T3938] do_syscall_64+0x35/0xb0 [ 135.050936][ T3938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.056823][ T3938] RIP: 0033:0x7fc6cd2b4c39 [ 135.061225][ T3938] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.080840][ T3938] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.089244][ T3938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 135.097200][ T3938] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 135.105152][ T3938] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 135.113111][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 135.121170][ T3938] R13: 00000000000f4240 R14: 0000000000020d81 R15: 00007ffdc49a5924 [ 135.129141][ T3938] [ 135.132966][ T3938] ------------[ cut here ]------------ [ 135.138583][ T3938] WARNING: CPU: 1 PID: 3938 at mm/page_alloc.c:5383 __alloc_pages+0x45d/0x500 [ 135.147580][ T3938] Modules linked in: [ 135.151464][ T3938] CPU: 1 PID: 3938 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 135.161656][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.171757][ T3938] RIP: 0010:__alloc_pages+0x45d/0x500 [ 135.177252][ T3938] Code: be c9 00 00 00 48 c7 c7 c0 31 d8 89 c6 05 f1 8e e9 0b 01 e8 ca 26 6e 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 5f ff ff e9 [ 135.197196][ T3938] RSP: 0018:ffffc9000344f740 EFLAGS: 00010246 [ 135.203269][ T3938] RAX: 0000000000000000 RBX: 1ffff92000689ee9 RCX: dffffc0000000000 [ 135.211267][ T3938] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000060a20 [ 135.219333][ T3938] RBP: 0000000000000000 R08: 00000000000a2a20 R09: 0000000000000001 [ 135.227332][ T3938] R10: ffffffff874594ed R11: 0000000000000000 R12: 000000007ffff180 [ 135.235299][ T3938] R13: 0000000000060a20 R14: 0000000000000000 R15: 0000000000000000 [ 135.243530][ T3938] FS: 00005555570bd300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 135.252965][ T3938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.259985][ T3938] CR2: 00007fc6cd2ea540 CR3: 0000000077c10000 CR4: 0000000000350ef0 [ 135.268338][ T3938] Call Trace: [ 135.271724][ T3938] [ 135.274658][ T3938] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 135.281472][ T3938] ? asm_exc_int3+0x31/0x40 [ 135.286222][ T3938] ? __alloc_skb+0x2f8/0x340 [ 135.290866][ T3938] kmalloc_large_node+0x62/0x130 [ 135.295855][ T3938] __kmalloc_node_track_caller+0x2ec/0x360 [ 135.301665][ T3938] ? tun_get_user+0x1ef9/0x3b00 [ 135.306571][ T3938] pskb_expand_head+0xf23/0x1070 [ 135.311535][ T3938] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 135.317812][ T3938] tun_get_user+0x1ef9/0x3b00 [ 135.322499][ T3938] ? tun_build_skb+0x1170/0x1170 [ 135.327461][ T3938] ? lock_downgrade+0x6e0/0x6e0 [ 135.332333][ T3938] ? find_held_lock+0x2d/0x110 [ 135.337141][ T3938] tun_chr_write_iter+0xdb/0x200 [ 135.342079][ T3938] do_iter_readv_writev+0x3d1/0x640 [ 135.347829][ T3938] ? new_sync_write+0x560/0x560 [ 135.352726][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.359027][ T3938] ? security_file_permission+0xab/0xd0 [ 135.364576][ T3938] do_iter_write+0x182/0x700 [ 135.369443][ T3938] ? import_iovec+0x10c/0x150 [ 135.374175][ T3938] vfs_writev+0x1aa/0x630 [ 135.379197][ T3938] ? vfs_iter_write+0xa0/0xa0 [ 135.383895][ T3938] ? do_raw_spin_lock+0x120/0x2a0 [ 135.389250][ T3938] ? rwlock_bug.part.0+0x90/0x90 [ 135.394290][ T3938] ? _raw_spin_lock_irq+0x41/0x50 [ 135.399400][ T3938] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 135.405759][ T3938] ? find_held_lock+0x2d/0x110 [ 135.410566][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.415273][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.421651][ T3938] ? __fget_light+0x20f/0x270 [ 135.426403][ T3938] do_writev+0x133/0x2f0 [ 135.430653][ T3938] ? vfs_writev+0x630/0x630 [ 135.435158][ T3938] ? lockdep_hardirqs_on+0x79/0x100 [ 135.440446][ T3938] ? _raw_spin_unlock_irq+0x2a/0x40 [ 135.445726][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.450412][ T3938] do_syscall_64+0x35/0xb0 [ 135.454832][ T3938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.460798][ T3938] RIP: 0033:0x7fc6cd2b4c39 [ 135.465218][ T3938] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.485125][ T3938] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.493631][ T3938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 135.502136][ T3938] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 135.511225][ T3938] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 135.519577][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 135.527618][ T3938] R13: 00000000000f4240 R14: 0000000000020d81 R15: 00007ffdc49a5924 [ 135.535641][ T3938] [ 135.538667][ T3938] Kernel panic - not syncing: panic_on_warn set ... [ 135.545259][ T3938] CPU: 1 PID: 3938 Comm: syz-executor839 Not tainted 5.18.0-syzkaller-00161-g1e57930e9f40 #0 [ 135.555426][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.565497][ T3938] Call Trace: [ 135.568793][ T3938] [ 135.571818][ T3938] dump_stack_lvl+0xcd/0x134 [ 135.576419][ T3938] panic+0x2d7/0x636 [ 135.580738][ T3938] ? panic_print_sys_info.part.0+0x10b/0x10b [ 135.587005][ T3938] ? __warn.cold+0x1d1/0x2c5 [ 135.591606][ T3938] ? __alloc_pages+0x45d/0x500 [ 135.596377][ T3938] __warn.cold+0x1e2/0x2c5 [ 135.600799][ T3938] ? __alloc_pages+0x45d/0x500 [ 135.605565][ T3938] report_bug+0x1bd/0x210 [ 135.609921][ T3938] handle_bug+0x3c/0x60 [ 135.614084][ T3938] exc_invalid_op+0x14/0x40 [ 135.618600][ T3938] asm_exc_invalid_op+0x12/0x20 [ 135.623454][ T3938] RIP: 0010:__alloc_pages+0x45d/0x500 [ 135.628829][ T3938] Code: be c9 00 00 00 48 c7 c7 c0 31 d8 89 c6 05 f1 8e e9 0b 01 e8 ca 26 6e 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 5f ff ff e9 [ 135.648433][ T3938] RSP: 0018:ffffc9000344f740 EFLAGS: 00010246 [ 135.654499][ T3938] RAX: 0000000000000000 RBX: 1ffff92000689ee9 RCX: dffffc0000000000 [ 135.662490][ T3938] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000060a20 [ 135.670752][ T3938] RBP: 0000000000000000 R08: 00000000000a2a20 R09: 0000000000000001 [ 135.679064][ T3938] R10: ffffffff874594ed R11: 0000000000000000 R12: 000000007ffff180 [ 135.687030][ T3938] R13: 0000000000060a20 R14: 0000000000000000 R15: 0000000000000000 [ 135.695072][ T3938] ? pskb_expand_head+0xefd/0x1070 [ 135.700188][ T3938] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 135.706945][ T3938] ? asm_exc_int3+0x31/0x40 [ 135.711445][ T3938] ? __alloc_skb+0x2f8/0x340 [ 135.716040][ T3938] kmalloc_large_node+0x62/0x130 [ 135.720986][ T3938] __kmalloc_node_track_caller+0x2ec/0x360 [ 135.726812][ T3938] ? tun_get_user+0x1ef9/0x3b00 [ 135.731683][ T3938] pskb_expand_head+0xf23/0x1070 [ 135.736648][ T3938] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 135.742897][ T3938] tun_get_user+0x1ef9/0x3b00 [ 135.747587][ T3938] ? tun_build_skb+0x1170/0x1170 [ 135.752548][ T3938] ? lock_downgrade+0x6e0/0x6e0 [ 135.757405][ T3938] ? find_held_lock+0x2d/0x110 [ 135.762277][ T3938] tun_chr_write_iter+0xdb/0x200 [ 135.767213][ T3938] do_iter_readv_writev+0x3d1/0x640 [ 135.772410][ T3938] ? new_sync_write+0x560/0x560 [ 135.777255][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.783485][ T3938] ? security_file_permission+0xab/0xd0 [ 135.789040][ T3938] do_iter_write+0x182/0x700 [ 135.793642][ T3938] ? import_iovec+0x10c/0x150 [ 135.798315][ T3938] vfs_writev+0x1aa/0x630 [ 135.802633][ T3938] ? vfs_iter_write+0xa0/0xa0 [ 135.807294][ T3938] ? do_raw_spin_lock+0x120/0x2a0 [ 135.812312][ T3938] ? rwlock_bug.part.0+0x90/0x90 [ 135.817249][ T3938] ? _raw_spin_lock_irq+0x41/0x50 [ 135.822312][ T3938] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 135.828544][ T3938] ? find_held_lock+0x2d/0x110 [ 135.833309][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.837987][ T3938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.844266][ T3938] ? __fget_light+0x20f/0x270 [ 135.848951][ T3938] do_writev+0x133/0x2f0 [ 135.853203][ T3938] ? vfs_writev+0x630/0x630 [ 135.857697][ T3938] ? lockdep_hardirqs_on+0x79/0x100 [ 135.862892][ T3938] ? _raw_spin_unlock_irq+0x2a/0x40 [ 135.868090][ T3938] ? ptrace_notify+0xfa/0x140 [ 135.872793][ T3938] do_syscall_64+0x35/0xb0 [ 135.877232][ T3938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.883129][ T3938] RIP: 0033:0x7fc6cd2b4c39 [ 135.887536][ T3938] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.907145][ T3938] RSP: 002b:00007ffdc49a5918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.915561][ T3938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc6cd2b4c39 [ 135.923543][ T3938] RDX: 0000000000000009 RSI: 0000000020001600 RDI: 0000000000000003 [ 135.931515][ T3938] RBP: 00007ffdc49a5930 R08: 0000000000000001 R09: 0000000000000000 [ 135.939510][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 135.947479][ T3938] R13: 00000000000f4240 R14: 0000000000020d81 R15: 00007ffdc49a5924 [ 135.955469][ T3938] [ 135.959362][ T3938] Kernel Offset: disabled [ 135.963760][ T3938] Rebooting in 86400 seconds..