./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2295709259 <...> Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. execve("./syz-executor2295709259", ["./syz-executor2295709259"], 0x7fffae5c7120 /* 10 vars */) = 0 brk(NULL) = 0x555555761000 brk(0x555555761d00) = 0x555555761d00 arch_prctl(ARCH_SET_FS, 0x555555761380) = 0 set_tid_address(0x555555761650) = 5061 set_robust_list(0x555555761660, 24) = 0 rseq(0x555555761ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2295709259", 4096) = 28 getrandom("\xe2\x5e\x9a\x10\x54\xf3\xec\x04", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555761d00 brk(0x555555782d00) = 0x555555782d00 brk(0x555555783000) = 0x555555783000 mprotect(0x7fc3b1f46000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x555555761650) = 5062 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] set_robust_list(0x555555761660, 24) = 0 ./strace-static-x86_64: Process 5063 attached [pid 5062] unshare(CLONE_NEWPID [pid 5061] <... clone resumed>, child_tidptr=0x555555761650) = 5063 [pid 5063] set_robust_list(0x555555761660, 24 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... set_robust_list resumed>) = 0 [pid 5063] unshare(CLONE_NEWPID) = 0 [pid 5062] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5064 attached [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5065 attached [pid 5061] <... clone resumed>, child_tidptr=0x555555761650) = 5064 [pid 5064] set_robust_list(0x555555761660, 24 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] set_robust_list(0x555555761660, 24 [pid 5064] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5066 attached ./strace-static-x86_64: Process 5067 attached [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] unshare(CLONE_NEWPID [pid 5063] <... clone resumed>, child_tidptr=0x555555761650) = 5065 [pid 5061] <... clone resumed>, child_tidptr=0x555555761650) = 5067 [pid 5067] set_robust_list(0x555555761660, 24 [pid 5066] set_robust_list(0x555555761660, 24 [pid 5065] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5064] <... unshare resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x555555761650) = 5066 [pid 5067] unshare(CLONE_NEWPID [pid 5066] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5065] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5067] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5068 attached ./strace-static-x86_64: Process 5069 attached [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... clone resumed>, child_tidptr=0x555555761650) = 5068 [pid 5061] <... clone resumed>, child_tidptr=0x555555761650) = 5069 [pid 5069] set_robust_list(0x555555761660, 24 [pid 5068] set_robust_list(0x555555761660, 24 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5065] <... prctl resumed>) = 0 [pid 5069] unshare(CLONE_NEWPID [pid 5065] setsid(./strace-static-x86_64: Process 5071 attached ./strace-static-x86_64: Process 5070 attached [pid 5068] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... setsid resumed>) = 1 [pid 5061] <... clone resumed>, child_tidptr=0x555555761650) = 5071 [pid 5066] <... prctl resumed>) = 0 [pid 5065] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5071] set_robust_list(0x555555761660, 24 [pid 5066] setsid( [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5070] set_robust_list(0x555555761660, 24 [pid 5066] <... setsid resumed>) = 1 [pid 5065] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5069] <... unshare resumed>) = 0 [pid 5068] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5067] <... clone resumed>, child_tidptr=0x555555761650) = 5070 [pid 5066] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5065] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, ./strace-static-x86_64: Process 5072 attached [pid 5071] unshare(CLONE_NEWPID [pid 5070] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5068] <... prctl resumed>) = 0 [pid 5066] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5072] set_robust_list(0x555555761660, 24 [pid 5071] <... unshare resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555761650) = 5072 [pid 5068] setsid( [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5065] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5072] <... set_robust_list resumed>) = 0 [pid 5070] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5068] <... setsid resumed>) = 1 [pid 5066] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5072] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5065] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5072] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5065] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5068] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5066] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5065] <... prlimit64 resumed>NULL) = 0 [pid 5070] <... prctl resumed>) = 0 [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5072] <... prctl resumed>) = 0 [pid 5070] setsid( [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5066] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5065] unshare(CLONE_NEWNS [pid 5072] setsid( [pid 5070] <... setsid resumed>) = 1 [pid 5068] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5072] <... setsid resumed>) = 1 [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5068] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5072] <... prlimit64 resumed>NULL) = 0 [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5072] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5070] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5068] <... prlimit64 resumed>NULL) = 0 [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5065] <... unshare resumed>) = 0 [pid 5072] <... prlimit64 resumed>NULL) = 0 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5066] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5072] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5068] unshare(CLONE_NEWNS./strace-static-x86_64: Process 5073 attached [pid 5072] <... prlimit64 resumed>NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5068] <... unshare resumed>) = 0 [pid 5066] <... prlimit64 resumed>NULL) = 0 [pid 5065] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5072] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5071] <... clone resumed>, child_tidptr=0x555555761650) = 5073 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5066] unshare(CLONE_NEWNS [pid 5073] set_robust_list(0x555555761660, 24 [pid 5072] <... prlimit64 resumed>NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5068] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5065] <... mount resumed>) = 0 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5066] <... unshare resumed>) = 0 [pid 5065] unshare(CLONE_NEWIPC [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5072] <... prlimit64 resumed>NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5073] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] unshare(CLONE_NEWNS [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5068] unshare(CLONE_NEWIPC [pid 5072] <... unshare resumed>) = 0 [pid 5070] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5065] <... unshare resumed>) = 0 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5066] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5068] <... unshare resumed>) = 0 [pid 5073] <... prctl resumed>) = 0 [pid 5066] <... mount resumed>) = 0 [pid 5073] setsid( [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5066] unshare(CLONE_NEWIPC [pid 5073] <... setsid resumed>) = 1 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5072] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5070] unshare(CLONE_NEWNS [pid 5068] unshare(CLONE_NEWCGROUP [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5072] <... mount resumed>) = 0 [pid 5068] <... unshare resumed>) = 0 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5072] unshare(CLONE_NEWIPC [pid 5068] unshare(CLONE_NEWUTS [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5072] <... unshare resumed>) = 0 [pid 5070] <... unshare resumed>) = 0 [pid 5068] <... unshare resumed>) = 0 [pid 5065] unshare(CLONE_NEWCGROUP [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5068] unshare(CLONE_SYSVSEM [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5068] <... unshare resumed>) = 0 [pid 5066] <... unshare resumed>) = 0 [pid 5065] <... unshare resumed>) = 0 [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5072] unshare(CLONE_NEWCGROUP [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5073] unshare(CLONE_NEWNS [pid 5072] <... unshare resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5070] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5066] unshare(CLONE_NEWCGROUP [pid 5065] unshare(CLONE_NEWUTS [pid 5072] unshare(CLONE_NEWUTS) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5066] <... unshare resumed>) = 0 [pid 5065] <... unshare resumed>) = 0 [pid 5066] unshare(CLONE_NEWUTS [pid 5065] unshare(CLONE_SYSVSEM [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5072] unshare(CLONE_SYSVSEM [pid 5066] <... unshare resumed>) = 0 [pid 5065] <... unshare resumed>) = 0 [pid 5073] <... mount resumed>) = 0 [pid 5072] <... unshare resumed>) = 0 [pid 5070] unshare(CLONE_NEWIPC [pid 5068] <... openat resumed>) = 3 [pid 5066] unshare(CLONE_SYSVSEM [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5068] write(3, "16777216", 8 [pid 5066] <... unshare resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5070] <... unshare resumed>) = 0 [pid 5068] <... write resumed>) = 8 [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5073] unshare(CLONE_NEWIPC [pid 5072] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5065] write(3, "16777216", 8 [pid 5068] <... close resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5066] write(3, "16777216", 8 [pid 5065] <... write resumed>) = 8 [pid 5073] unshare(CLONE_NEWCGROUP [pid 5072] write(3, "16777216", 8 [pid 5070] unshare(CLONE_NEWCGROUP [pid 5068] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5073] <... unshare resumed>) = 0 [pid 5072] <... write resumed>) = 8 [pid 5070] <... unshare resumed>) = 0 [pid 5066] <... write resumed>) = 8 [pid 5073] unshare(CLONE_NEWUTS [pid 5072] close(3 [pid 5068] write(3, "536870912", 9 [pid 5065] <... close resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5070] unshare(CLONE_NEWUTS [pid 5073] unshare(CLONE_SYSVSEM [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5070] <... unshare resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5070] unshare(CLONE_SYSVSEM [pid 5072] write(3, "536870912", 9 [pid 5070] <... unshare resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... write resumed>) = 9 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5072] close(3 [pid 5066] close(3 [pid 5072] <... close resumed>) = 0 [pid 5068] <... write resumed>) = 9 [pid 5066] <... close resumed>) = 0 [pid 5073] write(3, "16777216", 8 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5073] <... write resumed>) = 8 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5073] close(3) = 0 [pid 5072] write(3, "1024", 4 [pid 5070] write(3, "16777216", 8 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5072] <... write resumed>) = 4 [pid 5070] <... write resumed>) = 8 [pid 5068] <... openat resumed>) = 3 [pid 5066] write(3, "536870912", 9 [pid 5065] write(3, "536870912", 9 [pid 5073] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5070] close(3 [pid 5065] <... write resumed>) = 9 [pid 5068] write(3, "1024", 4 [pid 5066] <... write resumed>) = 9 [pid 5065] close(3 [pid 5068] <... write resumed>) = 4 [pid 5066] close(3 [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5073] write(3, "536870912", 9 [pid 5072] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5073] <... write resumed>) = 9 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5065] write(3, "1024", 4 [pid 5070] <... openat resumed>) = 3 [pid 5065] <... write resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5070] write(3, "536870912", 9 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "8192", 4 [pid 5070] <... write resumed>) = 9 [pid 5068] write(3, "8192", 4 [pid 5066] write(3, "1024", 4 [pid 5065] <... close resumed>) = 0 [pid 5073] write(3, "1024", 4 [pid 5072] <... write resumed>) = 4 [pid 5070] close(3 [pid 5068] <... write resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5073] <... write resumed>) = 4 [pid 5072] close(3 [pid 5070] <... close resumed>) = 0 [pid 5068] close(3 [pid 5066] <... write resumed>) = 4 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5070] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5065] write(3, "8192", 4 [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5072] <... openat resumed>) = 3 [pid 5065] <... write resumed>) = 4 [pid 5070] write(3, "1024", 4) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5070] close(3 [pid 5065] close(3 [pid 5072] write(3, "1024", 4 [pid 5070] <... close resumed>) = 0 [pid 5072] <... write resumed>) = 4 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5073] write(3, "8192", 4 [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5073] <... write resumed>) = 4 [pid 5072] close(3 [pid 5070] write(3, "8192", 4 [pid 5072] <... close resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5073] close(3 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5070] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5066] write(3, "8192", 4 [pid 5068] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5068] write(3, "1024", 4 [pid 5066] <... write resumed>) = 4 [pid 5072] write(3, "1024", 4 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5073] <... openat resumed>) = 3 [pid 5072] <... write resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... write resumed>) = 4 [pid 5066] close(3 [pid 5072] close(3 [pid 5070] write(3, "1024", 4 [pid 5073] write(3, "1024", 4 [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 5065] write(3, "1024", 4 [pid 5073] <... write resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5072] <... close resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5065] <... write resumed>) = 4 [pid 5073] close(3 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5070] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5072] write(3, "1024 1048576 500 1024", 21 [pid 5070] <... openat resumed>) = 3 [pid 5073] write(3, "1024", 4 [pid 5072] <... write resumed>) = 21 [pid 5068] <... openat resumed>) = 3 [pid 5066] write(3, "1024", 4 [pid 5065] close(3 [pid 5068] write(3, "1024", 4 [pid 5066] <... write resumed>) = 4 [pid 5068] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5068] close(3 [pid 5066] close(3 [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5073] <... write resumed>) = 4 [pid 5072] close(3 [pid 5070] write(3, "1024", 4 [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5072] getpid( [pid 5065] write(3, "1024", 4 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5072] <... getpid resumed>) = 1 [pid 5070] close(3 [pid 5068] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5072] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5070] <... close resumed>) = 0 [pid 5072] <... capget resumed>{effective=1< [pid 5073] write(3, "1024 1048576 500 1024", 21 [pid 5072] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5070] <... openat resumed>) = 3 [pid 5068] write(3, "1024 1048576 500 1024", 21 [pid 5073] <... write resumed>) = 21 [pid 5072] <... capset resumed>) = 0 [pid 5068] <... write resumed>) = 21 [pid 5073] close(3 [pid 5072] unshare(CLONE_NEWNET [pid 5070] write(3, "1024 1048576 500 1024", 21 [pid 5066] write(3, "1024", 4 [pid 5065] <... write resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5068] close(3 [pid 5065] close(3 [pid 5073] getpid( [pid 5070] <... write resumed>) = 21 [pid 5068] <... close resumed>) = 0 [pid 5066] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5073] <... getpid resumed>) = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5070] close(3 [pid 5068] getpid( [pid 5066] close(3 [pid 5065] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5073] <... capget resumed>{effective=1< [pid 5070] <... close resumed>) = 0 [pid 5068] <... getpid resumed>) = 1 [pid 5066] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5073] <... capset resumed>) = 0 [pid 5070] getpid( [pid 5068] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5066] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5073] unshare(CLONE_NEWNET [pid 5070] <... getpid resumed>) = 1 [pid 5068] <... capget resumed>{effective=1<) = 3 [pid 5065] write(3, "1024 1048576 500 1024", 21 [pid 5070] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5068] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5066] write(3, "1024 1048576 500 1024", 21 [pid 5065] <... write resumed>) = 21 [pid 5070] <... capget resumed>{effective=1<) = 0 [pid 5066] <... write resumed>) = 21 [pid 5065] close(3 [pid 5070] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5068] unshare(CLONE_NEWNET [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5070] <... capset resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5070] unshare(CLONE_NEWNET [pid 5066] getpid() = 1 [pid 5066] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5065] getpid() = 1 [pid 5065] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5066] <... capset resumed>) = 0 [pid 5065] <... capget resumed>{effective=1< [pid 5065] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5068] <... unshare resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5072] <... unshare resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... unshare resumed>) = 0 [pid 5072] write(3, "0 65535", 7) = 7 [pid 5072] close(3) = 0 [pid 5072] mkdir("/dev/binderfs", 0777) = 0 [pid 5072] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5068] write(3, "0 65535", 7) = 7 [pid 5072] <... mount resumed>) = 0 [pid 5068] close(3 [pid 5070] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] <... close resumed>) = 0 [pid 5070] write(3, "0 65535", 7 [pid 5068] mkdir("/dev/binderfs", 0777 [pid 5070] <... write resumed>) = 7 [pid 5068] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5070] close(3 [pid 5068] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5070] <... close resumed>) = 0 [pid 5070] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5070] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5068] <... mount resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... unshare resumed>) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5068] <... symlink resumed>) = 0 [pid 5072] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5073] write(3, "0 65535", 7 [pid 5068] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5073] <... write resumed>) = 7 [pid 5073] close(3./strace-static-x86_64: Process 5080 attached ./strace-static-x86_64: Process 5079 attached ./strace-static-x86_64: Process 5081 attached ) = 0 [pid 5065] <... unshare resumed>) = 0 [pid 5073] mkdir("/dev/binderfs", 0777 [pid 5080] set_robust_list(0x555555761660, 24 [pid 5081] set_robust_list(0x555555761660, 24 [pid 5073] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5072] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5070] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5065] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5079] set_robust_list(0x555555761660, 24 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5073] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5065] <... openat resumed>) = 3 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... mount resumed>) = 0 [pid 5065] write(3, "0 65535", 7) = 7 [pid 5065] close(3) = 0 [pid 5065] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5065] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5073] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... mount resumed>) = 0 [pid 5073] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5083 attached [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5081] <... prctl resumed>) = 0 [pid 5066] <... unshare resumed>) = 0 [pid 5065] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5083] set_robust_list(0x555555761660, 24 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] setpgid(0, 0 [pid 5073] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5080] <... prctl resumed>) = 0 [pid 5079] <... prctl resumed>) = 0 [pid 5081] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] setpgid(0, 0 [pid 5079] setpgid(0, 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5085 attached [pid 5083] <... prctl resumed>) = 0 [pid 5080] <... setpgid resumed>) = 0 [pid 5079] <... setpgid resumed>) = 0 [pid 5066] write(3, "0 65535", 7 [pid 5085] set_robust_list(0x555555761660, 24 [pid 5083] setpgid(0, 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... write resumed>) = 7 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5083] <... setpgid resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5081] write(3, "1000", 4 [pid 5066] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... openat resumed>) = 3 [pid 5079] write(3, "1000", 4 [pid 5081] <... write resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 5079] <... write resumed>) = 4 [pid 5081] close(3 [pid 5066] mkdir("/dev/binderfs", 0777 [pid 5085] <... prctl resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] write(3, "1000", 4 [pid 5079] close(3 [pid 5081] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5085] setpgid(0, 0 [pid 5079] <... close resumed>) = 0 [pid 5081] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5066] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5085] <... setpgid resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5080] <... write resumed>) = 4 [pid 5079] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5081] <... socket resumed>) = 3 [pid 5083] write(3, "1000", 4 [pid 5080] close(3 [pid 5066] <... mount resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... write resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5079] <... socket resumed>) = 3 [pid 5081] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5083] close(3 [pid 5080] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5083] <... close resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5083] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5080] <... socket resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5085] write(3, "1000", 4 [pid 5083] <... socket resumed>) = 3 [pid 5080] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5081] <... openat resumed>) = 4 [pid 5066] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5085] <... write resumed>) = 4 [pid 5083] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5080] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 5081] write(4, "10", 2 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] close(3) = 0 [pid 5081] <... write resumed>) = 2 [pid 5081] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0./strace-static-x86_64: Process 5086 attached [pid 5085] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5083] <... openat resumed>) = 4 [pid 5080] write(4, "10", 2 [pid 5079] write(4, "10", 2 [pid 5086] set_robust_list(0x555555761660, 24 [pid 5085] <... socket resumed>) = 3 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5080] <... write resumed>) = 2 [pid 5079] <... write resumed>) = 2 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... openat resumed>) = 4 [pid 5083] write(4, "10", 2 [pid 5080] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5079] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555761650) = 2 [pid 5086] <... prctl resumed>) = 0 [pid 5083] <... write resumed>) = 2 [pid 5086] setpgid(0, 0) = 0 [pid 5085] write(4, "10", 2 [pid 5083] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... write resumed>) = 2 [pid 5085] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5086] <... openat resumed>) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE) = 3 [pid 5086] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5086] write(4, "10", 2) = 2 [ 72.123930][ T5081] netlink: 'syz-executor229': attribute type 21 has an invalid length. [ 72.132501][ T5081] netlink: 'syz-executor229': attribute type 1 has an invalid length. [ 72.141576][ T5081] FAULT_INJECTION: forcing a failure. [ 72.141576][ T5081] name failslab, interval 1, probability 0, space 0, times 1 [ 72.155306][ T5081] CPU: 1 PID: 5081 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 72.165740][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 72.175781][ T5081] Call Trace: [ 72.179047][ T5081] [ 72.181973][ T5081] dump_stack_lvl+0x125/0x1b0 [ 72.186704][ T5081] should_fail_ex+0x496/0x5b0 [ 72.191402][ T5081] should_failslab+0x9/0x20 [ 72.195901][ T5081] kmem_cache_alloc_node+0x71/0x330 [ 72.201100][ T5081] ? __alloc_skb+0x287/0x330 [ 72.205712][ T5081] __alloc_skb+0x287/0x330 [ 72.210146][ T5081] ? __napi_build_skb+0x50/0x50 [ 72.215006][ T5081] ? lwtunnel_get_encap_size+0x1a9/0x380 [ 72.220644][ T5081] ? fib_nlmsg_size+0x94/0xa90 [ 72.225414][ T5081] rtmsg_fib+0x13f/0x520 [ 72.229674][ T5081] ? fib_dump_info+0x2080/0x2080 [ 72.234625][ T5081] ? atomic_notifier_call_chain+0xa8/0x1b0 [ 72.240441][ T5081] fib_table_insert+0xc40/0x1d70 [ 72.245393][ T5081] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 72.250694][ T5081] ? fib_route_seq_show+0xea0/0xea0 [ 72.255909][ T5081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.261813][ T5081] ? inet_rtm_newroute+0x11f/0x200 [ 72.266922][ T5081] inet_rtm_newroute+0x11f/0x200 [ 72.271861][ T5081] ? inet_rtm_delroute+0x390/0x390 [ 72.276986][ T5081] ? inet_rtm_delroute+0x390/0x390 [ 72.282096][ T5081] rtnetlink_rcv_msg+0x3c7/0xe00 [ 72.287039][ T5081] ? rtnl_fill_vf+0x4a0/0x4a0 [ 72.291715][ T5081] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.297702][ T5081] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.303694][ T5081] netlink_rcv_skb+0x16b/0x440 [ 72.308453][ T5081] ? rtnl_fill_vf+0x4a0/0x4a0 [ 72.313133][ T5081] ? netlink_ack+0x1380/0x1380 [ 72.317888][ T5081] ? lock_sync+0x190/0x190 [ 72.322322][ T5081] ? netlink_deliver_tap+0x1a0/0xd00 [ 72.327612][ T5081] ? _copy_from_iter+0x2c1/0x10f0 [ 72.332649][ T5081] netlink_unicast+0x53b/0x810 [ 72.337436][ T5081] ? netlink_attachskb+0x880/0x880 [ 72.342563][ T5081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.348462][ T5081] ? __phys_addr_symbol+0x30/0x70 [ 72.353494][ T5081] ? __check_object_size+0x323/0x730 [ 72.358786][ T5081] netlink_sendmsg+0x8b7/0xd70 [ 72.363552][ T5081] ? netlink_unicast+0x810/0x810 [ 72.368503][ T5081] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.373792][ T5081] ? netlink_unicast+0x810/0x810 [ 72.378738][ T5081] __sock_sendmsg+0xd5/0x180 [ 72.383330][ T5081] ____sys_sendmsg+0x6ac/0x940 [ 72.388095][ T5081] ? copy_msghdr_from_user+0x10b/0x160 [ 72.393559][ T5081] ? kernel_sendmsg+0x50/0x50 [ 72.398237][ T5081] ? hlock_class+0x4e/0x130 [ 72.402757][ T5081] ___sys_sendmsg+0x135/0x1d0 [ 72.407449][ T5081] ? do_recvmmsg+0x740/0x740 [ 72.412069][ T5081] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.417527][ T5081] ? __fget_light+0x1fc/0x260 [ 72.422211][ T5081] __sys_sendmsg+0x117/0x1e0 [ 72.426820][ T5081] ? __sys_sendmsg_sock+0x30/0x30 [ 72.431874][ T5081] ? ptrace_notify+0xf4/0x130 [ 72.436558][ T5081] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 72.442814][ T5081] do_syscall_64+0x40/0x110 [ 72.447329][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.453220][ T5081] RIP: 0033:0x7fc3b1ed34f9 [ 72.457629][ T5081] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.477233][ T5081] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.485642][ T5081] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 72.493607][ T5081] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 72.501570][ T5081] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00005555557624c0 [ 72.509535][ T5081] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 72.517501][ T5081] R13: 00007ffdaa3d0578 R14: 0000000000000000 R15: 00007ffdaa3d0350 [pid 5086] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5081] <... sendmsg resumed>) = 216 [pid 5081] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5081] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC) = -1 EFAULT (Bad address) [pid 5081] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5081] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [ 72.525483][ T5081] [ 72.531092][ T5079] netlink: 'syz-executor229': attribute type 21 has an invalid length. [ 72.539528][ T5079] netlink: 'syz-executor229': attribute type 1 has an invalid length. [ 72.548491][ T5079] FAULT_INJECTION: forcing a failure. [ 72.548491][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 72.561197][ T5079] CPU: 1 PID: 5079 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 72.571621][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 72.581669][ T5079] Call Trace: [ 72.584944][ T5079] [ 72.587869][ T5079] dump_stack_lvl+0x125/0x1b0 [ 72.592552][ T5079] should_fail_ex+0x496/0x5b0 [ 72.597234][ T5079] should_failslab+0x9/0x20 [ 72.601738][ T5079] kmem_cache_alloc_node+0x71/0x330 [ 72.606956][ T5079] ? __alloc_skb+0x287/0x330 [ 72.611552][ T5079] __alloc_skb+0x287/0x330 [ 72.615975][ T5079] ? __napi_build_skb+0x50/0x50 [ 72.620838][ T5079] ? lwtunnel_get_encap_size+0x1a9/0x380 [ 72.626480][ T5079] ? fib_nlmsg_size+0x94/0xa90 [ 72.631252][ T5079] rtmsg_fib+0x13f/0x520 [ 72.635507][ T5079] ? fib_dump_info+0x2080/0x2080 [ 72.640453][ T5079] ? atomic_notifier_call_chain+0xa8/0x1b0 [ 72.646271][ T5079] fib_table_insert+0xc40/0x1d70 [ 72.651216][ T5079] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 72.656512][ T5079] ? fib_route_seq_show+0xea0/0xea0 [ 72.661720][ T5079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.667619][ T5079] ? inet_rtm_newroute+0x11f/0x200 [ 72.672729][ T5079] inet_rtm_newroute+0x11f/0x200 [ 72.677666][ T5079] ? inet_rtm_delroute+0x390/0x390 [ 72.682790][ T5079] ? inet_rtm_delroute+0x390/0x390 [ 72.687902][ T5079] rtnetlink_rcv_msg+0x3c7/0xe00 [ 72.692847][ T5079] ? rtnl_fill_vf+0x4a0/0x4a0 [ 72.697528][ T5079] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.703517][ T5079] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.709513][ T5079] netlink_rcv_skb+0x16b/0x440 [ 72.714274][ T5079] ? rtnl_fill_vf+0x4a0/0x4a0 [ 72.718961][ T5079] ? netlink_ack+0x1380/0x1380 [ 72.723728][ T5079] ? lock_sync+0x190/0x190 [ 72.728168][ T5079] ? netlink_deliver_tap+0x1a0/0xd00 [ 72.733463][ T5079] ? _copy_from_iter+0x2c1/0x10f0 [ 72.738514][ T5079] netlink_unicast+0x53b/0x810 [ 72.743290][ T5079] ? netlink_attachskb+0x880/0x880 [ 72.748404][ T5079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.754300][ T5079] ? __phys_addr_symbol+0x30/0x70 [ 72.759327][ T5079] ? __check_object_size+0x323/0x730 [ 72.764624][ T5079] netlink_sendmsg+0x8b7/0xd70 [ 72.769392][ T5079] ? netlink_unicast+0x810/0x810 [ 72.774340][ T5079] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.779626][ T5079] ? netlink_unicast+0x810/0x810 [ 72.784570][ T5079] __sock_sendmsg+0xd5/0x180 [ 72.789166][ T5079] ____sys_sendmsg+0x6ac/0x940 [ 72.793932][ T5079] ? copy_msghdr_from_user+0x10b/0x160 [ 72.799393][ T5079] ? kernel_sendmsg+0x50/0x50 [ 72.804069][ T5079] ? hlock_class+0x4e/0x130 [ 72.808587][ T5079] ___sys_sendmsg+0x135/0x1d0 [ 72.813269][ T5079] ? do_recvmmsg+0x740/0x740 [ 72.817884][ T5079] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.823343][ T5079] ? __fget_light+0x1fc/0x260 [ 72.828023][ T5079] __sys_sendmsg+0x117/0x1e0 [ 72.832614][ T5079] ? __sys_sendmsg_sock+0x30/0x30 [ 72.837653][ T5079] ? ptrace_notify+0xf4/0x130 [ 72.842330][ T5079] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 72.848580][ T5079] do_syscall_64+0x40/0x110 [ 72.853087][ T5079] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.858977][ T5079] RIP: 0033:0x7fc3b1ed34f9 [ 72.863389][ T5079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.882989][ T5079] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.891400][ T5079] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 72.899364][ T5079] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 72.907330][ T5079] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00005555557624c0 [ 72.915299][ T5079] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 72.923262][ T5079] R13: 00007ffdaa3d0578 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 72.931242][ T5079] [ 72.935369][ T5080] netlink: 'syz-executor229': attribute type 21 has an invalid length. [ 72.943960][ T5080] netlink: 'syz-executor229': attribute type 1 has an invalid length. [ 72.952748][ T5080] FAULT_INJECTION: forcing a failure. [ 72.952748][ T5080] name failslab, interval 1, probability 0, space 0, times 0 [ 72.965817][ T5080] CPU: 1 PID: 5080 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 72.976248][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 72.986298][ T5080] Call Trace: [ 72.989569][ T5080] [ 72.992491][ T5080] dump_stack_lvl+0x125/0x1b0 [ 72.997174][ T5080] should_fail_ex+0x496/0x5b0 [ 73.001850][ T5080] should_failslab+0x9/0x20 [ 73.006357][ T5080] kmem_cache_alloc_node+0x71/0x330 [ 73.011562][ T5080] ? __alloc_skb+0x287/0x330 [ 73.016160][ T5080] __alloc_skb+0x287/0x330 [ 73.020578][ T5080] ? __napi_build_skb+0x50/0x50 [ 73.025429][ T5080] ? lwtunnel_get_encap_size+0x1a9/0x380 [ 73.031069][ T5080] ? fib_nlmsg_size+0x94/0xa90 [ 73.035839][ T5080] rtmsg_fib+0x13f/0x520 [ 73.040096][ T5080] ? fib_dump_info+0x2080/0x2080 [ 73.045051][ T5080] ? atomic_notifier_call_chain+0xa8/0x1b0 [ 73.050868][ T5080] fib_table_insert+0xc40/0x1d70 [ 73.055817][ T5080] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 73.061108][ T5080] ? fib_route_seq_show+0xea0/0xea0 [ 73.066315][ T5080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.072235][ T5080] ? inet_rtm_newroute+0x11f/0x200 [ 73.077350][ T5080] inet_rtm_newroute+0x11f/0x200 [ 73.082289][ T5080] ? inet_rtm_delroute+0x390/0x390 [ 73.087415][ T5080] ? inet_rtm_delroute+0x390/0x390 [ 73.092530][ T5080] rtnetlink_rcv_msg+0x3c7/0xe00 [ 73.097476][ T5080] ? rtnl_fill_vf+0x4a0/0x4a0 [ 73.102156][ T5080] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 73.108145][ T5080] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 73.114144][ T5080] netlink_rcv_skb+0x16b/0x440 [ 73.118906][ T5080] ? rtnl_fill_vf+0x4a0/0x4a0 [ 73.123591][ T5080] ? netlink_ack+0x1380/0x1380 [ 73.128357][ T5080] ? lock_sync+0x190/0x190 [ 73.132803][ T5080] ? netlink_deliver_tap+0x1a0/0xd00 [ 73.138107][ T5080] ? _copy_from_iter+0x2c1/0x10f0 [ 73.143148][ T5080] netlink_unicast+0x53b/0x810 [ 73.147923][ T5080] ? netlink_attachskb+0x880/0x880 [ 73.153039][ T5080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.158939][ T5080] ? __phys_addr_symbol+0x30/0x70 [ 73.163973][ T5080] ? __check_object_size+0x323/0x730 [ 73.169277][ T5080] netlink_sendmsg+0x8b7/0xd70 [ 73.174049][ T5080] ? netlink_unicast+0x810/0x810 [ 73.178998][ T5080] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.184285][ T5080] ? netlink_unicast+0x810/0x810 [ 73.189231][ T5080] __sock_sendmsg+0xd5/0x180 [ 73.193823][ T5080] ____sys_sendmsg+0x6ac/0x940 [ 73.198588][ T5080] ? copy_msghdr_from_user+0x10b/0x160 [ 73.204057][ T5080] ? kernel_sendmsg+0x50/0x50 [ 73.208735][ T5080] ? hlock_class+0x4e/0x130 [ 73.213252][ T5080] ___sys_sendmsg+0x135/0x1d0 [ 73.217948][ T5080] ? do_recvmmsg+0x740/0x740 [ 73.222571][ T5080] ? recalc_sigpending_tsk+0x187/0x1d0 [ 73.228027][ T5080] ? __fget_light+0x1fc/0x260 [ 73.232718][ T5080] __sys_sendmsg+0x117/0x1e0 [ 73.237326][ T5080] ? __sys_sendmsg_sock+0x30/0x30 [ 73.242380][ T5080] ? ptrace_notify+0xf4/0x130 [ 73.247060][ T5080] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 73.253306][ T5080] do_syscall_64+0x40/0x110 [ 73.257817][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 73.263710][ T5080] RIP: 0033:0x7fc3b1ed34f9 [ 73.268118][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.287727][ T5080] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.296137][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 73.304105][ T5080] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 73.312070][ T5080] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00005555557624c0 [ 73.320035][ T5080] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [pid 5081] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5079] <... sendmsg resumed>) = 216 [pid 5079] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5079] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC) = -1 EFAULT (Bad address) [pid 5079] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5080] <... sendmsg resumed>) = 216 [pid 5079] <... bpf resumed>) = 5 [pid 5079] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5079] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5080] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5080] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC [pid 5081] <... bpf resumed>) = 6 [pid 5079] <... bpf resumed>) = 6 [pid 5080] <... perf_event_open resumed>) = -1 EFAULT (Bad address) [pid 5081] close(3 [pid 5080] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5079] close(3 [pid 5081] <... close resumed>) = 0 [pid 5080] <... bpf resumed>) = 5 [pid 5081] close(4 [pid 5080] bpf(BPF_MAP_CREATE, NULL, 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(5 [pid 5080] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5081] <... close resumed>) = 0 [pid 5080] <... bpf resumed>) = 6 [pid 5079] <... close resumed>) = 0 [pid 5081] close(6 [pid 5080] close(3 [ 73.328001][ T5080] R13: 00007ffdaa3d0578 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 73.335981][ T5080] [ 73.340608][ T5083] netlink: 'syz-executor229': attribute type 21 has an invalid length. [ 73.349279][ T5083] netlink: 'syz-executor229': attribute type 1 has an invalid length. [ 73.358962][ T5083] FAULT_INJECTION: forcing a failure. [ 73.358962][ T5083] name failslab, interval 1, probability 0, space 0, times 0 [pid 5079] close(4 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] close(5 [pid 5081] close(7 [pid 5079] <... close resumed>) = 0 [pid 5081] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(6 [pid 5081] close(8) = -1 EBADF (Bad file descriptor) [pid 5081] close(9) = -1 EBADF (Bad file descriptor) [pid 5081] close(10) = -1 EBADF (Bad file descriptor) [pid 5081] close(11) = -1 EBADF (Bad file descriptor) [pid 5081] close(12) = -1 EBADF (Bad file descriptor) [pid 5081] close(13) = -1 EBADF (Bad file descriptor) [pid 5081] close(14) = -1 EBADF (Bad file descriptor) [pid 5081] close(15) = -1 EBADF (Bad file descriptor) [pid 5081] close(16) = -1 EBADF (Bad file descriptor) [pid 5081] close(17) = -1 EBADF (Bad file descriptor) [pid 5081] close(18) = -1 EBADF (Bad file descriptor) [pid 5081] close(19) = -1 EBADF (Bad file descriptor) [pid 5081] close(20) = -1 EBADF (Bad file descriptor) [pid 5081] close(21) = -1 EBADF (Bad file descriptor) [pid 5081] close(22) = -1 EBADF (Bad file descriptor) [pid 5081] close(23) = -1 EBADF (Bad file descriptor) [pid 5081] close(24) = -1 EBADF (Bad file descriptor) [pid 5081] close(25) = -1 EBADF (Bad file descriptor) [pid 5081] close(26) = -1 EBADF (Bad file descriptor) [pid 5081] close(27) = -1 EBADF (Bad file descriptor) [pid 5081] close(28) = -1 EBADF (Bad file descriptor) [pid 5081] close(29) = -1 EBADF (Bad file descriptor) [pid 5081] exit_group(0) = ? [pid 5081] +++ exited with 0 +++ [pid 5080] close(4) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=43 /* 0.43 s */} --- [pid 5080] close(5 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... close resumed>) = 0 [pid 5080] close(6./strace-static-x86_64: Process 5087 attached [pid 5068] <... clone resumed>, child_tidptr=0x555555761650) = 3 [pid 5087] set_robust_list(0x555555761660, 24) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 73.388491][ T5083] CPU: 0 PID: 5083 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 73.398938][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 73.408997][ T5083] Call Trace: [ 73.412260][ T5083] [ 73.415178][ T5083] dump_stack_lvl+0x125/0x1b0 [ 73.419864][ T5083] should_fail_ex+0x496/0x5b0 [ 73.424561][ T5083] should_failslab+0x9/0x20 [ 73.429081][ T5083] kmem_cache_alloc+0x69/0x2f0 [ 73.433846][ T5083] fib_insert_alias+0x438/0xe30 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE) = 3 [pid 5087] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5087] write(4, "10", 2) = 2 [ 73.438705][ T5083] ? trace_kmem_cache_alloc+0x26/0xa0 [ 73.444105][ T5083] ? kmem_cache_alloc+0x1af/0x2f0 [ 73.449130][ T5083] ? lockdep_rtnl_is_held+0x26/0x30 [ 73.454347][ T5083] fib_table_insert+0xaa7/0x1d70 [ 73.459327][ T5083] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 73.464650][ T5083] ? fib_route_seq_show+0xea0/0xea0 [ 73.469891][ T5083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.475820][ T5083] ? inet_rtm_newroute+0x11f/0x200 [ 73.480961][ T5083] inet_rtm_newroute+0x11f/0x200 [ 73.485932][ T5083] ? inet_rtm_delroute+0x390/0x390 [ 73.491047][ T5083] ? inet_rtm_delroute+0x390/0x390 [ 73.496153][ T5083] rtnetlink_rcv_msg+0x3c7/0xe00 [ 73.501100][ T5083] ? rtnl_fill_vf+0x4a0/0x4a0 [ 73.505778][ T5083] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 73.511765][ T5083] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 73.517754][ T5083] netlink_rcv_skb+0x16b/0x440 [ 73.522513][ T5083] ? rtnl_fill_vf+0x4a0/0x4a0 [ 73.527191][ T5083] ? netlink_ack+0x1380/0x1380 [ 73.531945][ T5083] ? lock_sync+0x190/0x190 [ 73.536379][ T5083] ? netlink_deliver_tap+0x1a0/0xd00 [ 73.541669][ T5083] ? _copy_from_iter+0x2c1/0x10f0 [ 73.546703][ T5083] netlink_unicast+0x53b/0x810 [ 73.551478][ T5083] ? netlink_attachskb+0x880/0x880 [ 73.556592][ T5083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.562485][ T5083] ? __phys_addr_symbol+0x30/0x70 [ 73.567509][ T5083] ? __check_object_size+0x323/0x730 [ 73.572797][ T5083] netlink_sendmsg+0x8b7/0xd70 [ 73.577578][ T5083] ? netlink_unicast+0x810/0x810 [ 73.582535][ T5083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.587837][ T5083] ? netlink_unicast+0x810/0x810 [ 73.592783][ T5083] __sock_sendmsg+0xd5/0x180 [ 73.597377][ T5083] ____sys_sendmsg+0x6ac/0x940 [ 73.602139][ T5083] ? copy_msghdr_from_user+0x10b/0x160 [ 73.607605][ T5083] ? kernel_sendmsg+0x50/0x50 [ 73.612282][ T5083] ? hlock_class+0x4e/0x130 [ 73.616800][ T5083] ___sys_sendmsg+0x135/0x1d0 [ 73.621488][ T5083] ? do_recvmmsg+0x740/0x740 [ 73.626103][ T5083] ? recalc_sigpending_tsk+0x187/0x1d0 [ 73.631559][ T5083] ? __fget_light+0x1fc/0x260 [ 73.636239][ T5083] __sys_sendmsg+0x117/0x1e0 [ 73.640833][ T5083] ? __sys_sendmsg_sock+0x30/0x30 [ 73.645873][ T5083] ? ptrace_notify+0xf4/0x130 [ 73.650550][ T5083] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 73.656796][ T5083] do_syscall_64+0x40/0x110 [ 73.661306][ T5083] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 73.667196][ T5083] RIP: 0033:0x7fc3b1ed34f9 [ 73.671606][ T5083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.691214][ T5083] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.699637][ T5083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 73.707605][ T5083] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 73.715579][ T5083] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00005555557624c0 [ 73.723556][ T5083] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 73.731524][ T5083] R13: 00007ffdaa3d0578 R14: 0000000000000000 R15: 00007ffdaa3d0350 [pid 5087] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5083] <... sendmsg resumed>) = 216 [pid 5079] <... close resumed>) = 0 [pid 5083] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5079] close(7 [pid 5083] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5083] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC [pid 5080] close(7 [pid 5079] close(8 [pid 5083] <... perf_event_open resumed>) = -1 EFAULT (Bad address) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(9 [pid 5083] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5080] close(8 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 73.739507][ T5083] [ 73.748559][ T5085] netlink: 'syz-executor229': attribute type 21 has an invalid length. [ 73.757073][ T5085] netlink: 'syz-executor229': attribute type 1 has an invalid length. [ 73.766042][ T5085] FAULT_INJECTION: forcing a failure. [ 73.766042][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [pid 5083] <... bpf resumed>) = 5 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(10 [pid 5083] bpf(BPF_MAP_CREATE, NULL, 0 [pid 5080] close(9 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5083] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5083] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(11 [pid 5080] close(10 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(12 [pid 5080] close(11 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(13 [pid 5080] close(12 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(14 [pid 5080] close(13 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(15 [pid 5080] close(14 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(16 [pid 5080] close(15) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(16 [pid 5079] close(17 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(17 [pid 5079] close(18 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(18 [pid 5079] close(19 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(19 [pid 5079] close(20 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(20 [pid 5079] close(21 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(21 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(22 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(22 [pid 5079] close(23 [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] close(23) = -1 EBADF (Bad file descriptor) [pid 5079] close(24 [pid 5080] close(24 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(25 [pid 5080] close(25 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(26 [pid 5080] close(26 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(27 [pid 5080] close(27 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(28 [pid 5080] close(28 [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(29 [pid 5080] close(29) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5080] exit_group(0 [pid 5079] exit_group(0 [pid 5080] <... exit_group resumed>) = ? [pid 5079] <... exit_group resumed>) = ? [ 73.781544][ T5085] CPU: 0 PID: 5085 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 73.791974][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 73.802028][ T5085] Call Trace: [ 73.805319][ T5085] [ 73.808263][ T5085] dump_stack_lvl+0x125/0x1b0 [ 73.812973][ T5085] should_fail_ex+0x496/0x5b0 [ 73.817680][ T5085] should_failslab+0x9/0x20 [ 73.822215][ T5085] kmem_cache_alloc_node+0x71/0x330 [ 73.827444][ T5085] ? __alloc_skb+0x287/0x330 [ 73.832067][ T5085] __alloc_skb+0x287/0x330 [pid 5080] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555555761650) = 3 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached ./strace-static-x86_64: Process 5088 attached , child_tidptr=0x555555761650) = 3 [pid 5088] set_robust_list(0x555555761660, 24 [pid 5089] set_robust_list(0x555555761660, 24 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] <... prctl resumed>) = 0 [pid 5089] setpgid(0, 0) = 0 [pid 5088] setpgid(0, 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... setpgid resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... openat resumed>) = 3 [ 73.836508][ T5085] ? __napi_build_skb+0x50/0x50 [ 73.841386][ T5085] ? lwtunnel_get_encap_size+0x1a9/0x380 [ 73.847049][ T5085] ? fib_nlmsg_size+0x94/0xa90 [ 73.851850][ T5085] rtmsg_fib+0x13f/0x520 [ 73.856110][ T5085] ? fib_dump_info+0x2080/0x2080 [ 73.861040][ T5085] ? atomic_notifier_call_chain+0xa8/0x1b0 [ 73.866856][ T5085] fib_table_insert+0xc40/0x1d70 [ 73.871821][ T5085] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 73.877103][ T5085] ? fib_route_seq_show+0xea0/0xea0 [ 73.882314][ T5085] ? __sanitizer_cov_trace_switch+0x54/0x90 [pid 5089] write(3, "1000", 4 [pid 5088] <... openat resumed>) = 3 [pid 5089] <... write resumed>) = 4 [pid 5088] write(3, "1000", 4 [pid 5089] close(3) = 0 [pid 5088] <... write resumed>) = 4 [pid 5089] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE [pid 5088] close(3 [ 74.156346][ T5086] FAULT_INJECTION: forcing a failure. [ 74.156346][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 74.169102][ T5086] CPU: 1 PID: 5086 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 74.179522][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 74.189575][ T5086] Call Trace: [ 74.192860][ T5086] [ 74.195799][ T5086] dump_stack_lvl+0x125/0x1b0 [ 74.200487][ T5086] should_fail_ex+0x496/0x5b0 [ 74.205168][ T5086] should_failslab+0x9/0x20 [ 74.209678][ T5086] kmem_cache_alloc_node+0x71/0x330 [ 74.214881][ T5086] ? __alloc_skb+0x287/0x330 [ 74.219478][ T5086] __alloc_skb+0x287/0x330 [ 74.223906][ T5086] ? __napi_build_skb+0x50/0x50 [ 74.228766][ T5086] ? lwtunnel_get_encap_size+0x1a9/0x380 [ 74.234405][ T5086] ? fib_nlmsg_size+0x94/0xa90 [ 74.239184][ T5086] rtmsg_fib+0x13f/0x520 [ 74.243434][ T5086] ? fib_dump_info+0x2080/0x2080 [ 74.248381][ T5086] ? atomic_notifier_call_chain+0xa8/0x1b0 [ 74.254196][ T5086] fib_table_insert+0xc40/0x1d70 [ 74.259147][ T5086] ? pcpu_init_md_blocks+0x2c0/0x3a0 [ 74.264440][ T5086] ? fib_route_seq_show+0xea0/0xea0 [ 74.269648][ T5086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.275552][ T5086] ? inet_rtm_newroute+0x11f/0x200 [ 74.280662][ T5086] inet_rtm_newroute+0x11f/0x200 [ 74.285599][ T5086] ? inet_rtm_delroute+0x390/0x390 [ 74.290724][ T5086] ? inet_rtm_delroute+0x390/0x390 [ 74.295838][ T5086] rtnetlink_rcv_msg+0x3c7/0xe00 [ 74.300782][ T5086] ? rtnl_fill_vf+0x4a0/0x4a0 [ 74.305461][ T5086] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.311449][ T5086] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.317444][ T5086] netlink_rcv_skb+0x16b/0x440 [ 74.322209][ T5086] ? rtnl_fill_vf+0x4a0/0x4a0 [ 74.326891][ T5086] ? netlink_ack+0x1380/0x1380 [ 74.331649][ T5086] ? lock_sync+0x190/0x190 [ 74.336084][ T5086] ? netlink_deliver_tap+0x1a0/0xd00 [ 74.341373][ T5086] ? _copy_from_iter+0x2c1/0x10f0 [ 74.346408][ T5086] netlink_unicast+0x53b/0x810 [ 74.351183][ T5086] ? netlink_attachskb+0x880/0x880 [ 74.356297][ T5086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.362204][ T5086] ? __phys_addr_symbol+0x30/0x70 [ 74.367244][ T5086] ? __check_object_size+0x323/0x730 [ 74.372547][ T5086] netlink_sendmsg+0x8b7/0xd70 [ 74.377317][ T5086] ? netlink_unicast+0x810/0x810 [ 74.382265][ T5086] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.387552][ T5086] ? netlink_unicast+0x810/0x810 [ 74.392496][ T5086] __sock_sendmsg+0xd5/0x180 [ 74.397090][ T5086] ____sys_sendmsg+0x6ac/0x940 [ 74.401856][ T5086] ? copy_msghdr_from_user+0x10b/0x160 [ 74.407319][ T5086] ? kernel_sendmsg+0x50/0x50 [ 74.411992][ T5086] ? hlock_class+0x4e/0x130 [ 74.416512][ T5086] ___sys_sendmsg+0x135/0x1d0 [ 74.421193][ T5086] ? do_recvmmsg+0x740/0x740 [ 74.425813][ T5086] ? recalc_sigpending_tsk+0x187/0x1d0 [ 74.431267][ T5086] ? __fget_light+0x1fc/0x260 [ 74.435946][ T5086] __sys_sendmsg+0x117/0x1e0 [ 74.440539][ T5086] ? __sys_sendmsg_sock+0x30/0x30 [ 74.445580][ T5086] ? ptrace_notify+0xf4/0x130 [ 74.450258][ T5086] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 74.456506][ T5086] do_syscall_64+0x40/0x110 [ 74.461011][ T5086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 74.466902][ T5086] RIP: 0033:0x7fc3b1ed34f9 [ 74.471312][ T5086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5088] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5085] <... sendmsg resumed>) = 216 [pid 5085] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5085] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC) = -1 EFAULT (Bad address) [pid 5083] <... bpf resumed>) = 6 [pid 5083] close(3) = 0 [pid 5083] close(4) = 0 [pid 5083] close(5) = 0 [pid 5083] close(6) = 0 [pid 5083] close(7 [pid 5085] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5083] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5083] close(8) = -1 EBADF (Bad file descriptor) [pid 5083] close(9) = -1 EBADF (Bad file descriptor) [pid 5083] close(10) = -1 EBADF (Bad file descriptor) [pid 5085] <... bpf resumed>) = 5 [pid 5083] close(11) = -1 EBADF (Bad file descriptor) [pid 5083] close(12) = -1 EBADF (Bad file descriptor) [pid 5083] close(13) = -1 EBADF (Bad file descriptor) [pid 5083] close(14) = -1 EBADF (Bad file descriptor) [pid 5083] close(15) = -1 EBADF (Bad file descriptor) [pid 5083] close(16) = -1 EBADF (Bad file descriptor) [pid 5083] close(17) = -1 EBADF (Bad file descriptor) [pid 5083] close(18) = -1 EBADF (Bad file descriptor) [pid 5083] close(19) = -1 EBADF (Bad file descriptor) [pid 5083] close(20) = -1 EBADF (Bad file descriptor) [pid 5083] close(21) = -1 EBADF (Bad file descriptor) [pid 5083] close(22) = -1 EBADF (Bad file descriptor) [pid 5083] close(23) = -1 EBADF (Bad file descriptor) [pid 5083] close(24) = -1 EBADF (Bad file descriptor) [pid 5083] close(25) = -1 EBADF (Bad file descriptor) [pid 5083] close(26) = -1 EBADF (Bad file descriptor) [pid 5083] close(27) = -1 EBADF (Bad file descriptor) [ 74.490921][ T5086] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.499337][ T5086] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 74.507300][ T5086] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 74.515265][ T5086] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00005555557624c0 [ 74.523230][ T5086] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 74.531194][ T5086] R13: 00007ffdaa3d0578 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 74.539173][ T5086] [pid 5083] close(28) = -1 EBADF (Bad file descriptor) [pid 5083] close(29) = -1 EBADF (Bad file descriptor) [pid 5086] <... sendmsg resumed>) = 216 [pid 5085] bpf(BPF_MAP_CREATE, NULL, 0 [pid 5083] exit_group(0 [pid 5086] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5085] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5086] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5085] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5086] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC) = -1 EFAULT (Bad address) [pid 5086] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000340, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5086] bpf(BPF_MAP_CREATE, NULL, 0 [pid 5083] <... exit_group resumed>) = ? [pid 5085] <... bpf resumed>) = 6 [pid 5085] close(3 [pid 5083] +++ exited with 0 +++ [pid 5086] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- [ 74.561363][ T5087] FAULT_INJECTION: forcing a failure. [ 74.561363][ T5087] name failslab, interval 1, probability 0, space 0, times 0 [ 74.575665][ T5087] CPU: 1 PID: 5087 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 74.586101][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 74.596148][ T5087] Call Trace: [ 74.599425][ T5087] [ 74.602347][ T5087] dump_stack_lvl+0x125/0x1b0 [ 74.607030][ T5087] should_fail_ex+0x496/0x5b0 [ 74.611702][ T5087] ? __lock_acquire+0xc65/0x3b20 [ 74.616647][ T5087] should_failslab+0x9/0x20 [ 74.621155][ T5087] __kmem_cache_alloc_node+0x6b/0x310 [ 74.626531][ T5087] ? ip6_tun_build_state+0x165/0x680 [ 74.631823][ T5087] ? ip6_tun_build_state+0x165/0x680 [ 74.637113][ T5087] __kmalloc+0x49/0x90 [ 74.641187][ T5087] ip6_tun_build_state+0x165/0x680 [ 74.646306][ T5087] ? __mutex_unlock_slowpath+0x165/0x650 [ 74.651936][ T5087] ? ip_tun_parse_opts.part.0+0xfa0/0xfa0 [ 74.657666][ T5087] ? find_held_lock+0x2d/0x110 [ 74.662447][ T5087] ? pcpu_alloc+0x1f1/0x1420 [ 74.667045][ T5087] ? lwtunnel_build_state+0x1d3/0x670 [ 74.672420][ T5087] lwtunnel_build_state+0x1d3/0x670 [ 74.677631][ T5087] fib_nh_common_init+0x149/0x2d0 [ 74.682658][ T5087] ? rt_fibinfo_free_cpus.part.0+0x1d0/0x1d0 [ 74.688640][ T5087] ? gre_gso_segment+0x17b0/0x17b0 [ 74.693761][ T5087] fib_nh_init+0xbd/0x450 [ 74.698095][ T5087] fib_create_info+0x24fb/0x4d50 [ 74.703055][ T5087] ? fib_result_prefsrc+0x4b0/0x4b0 [ 74.708253][ T5087] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.714241][ T5087] ? idr_get_free+0xa30/0xa30 [ 74.718924][ T5087] fib_table_insert+0x1d7/0x1d70 [ 74.723864][ T5087] ? find_held_lock+0x2d/0x110 [ 74.728640][ T5087] ? fib_route_seq_show+0xea0/0xea0 [ 74.733845][ T5087] ? lwtunnel_valid_encap_type+0x113/0x6a0 [ 74.739663][ T5087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.745570][ T5087] ? rtm_to_fib_config+0x71d/0x12c0 [ 74.750772][ T5087] ? inet_rtm_newroute+0x11f/0x200 [ 74.755883][ T5087] inet_rtm_newroute+0x11f/0x200 [ 74.760819][ T5087] ? inet_rtm_delroute+0x390/0x390 [ 74.765948][ T5087] ? inet_rtm_delroute+0x390/0x390 [ 74.771059][ T5087] rtnetlink_rcv_msg+0x3c7/0xe00 [ 74.776002][ T5087] ? rtnl_fill_vf+0x4a0/0x4a0 [ 74.780695][ T5087] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.786693][ T5087] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.792693][ T5087] netlink_rcv_skb+0x16b/0x440 [ 74.797471][ T5087] ? rtnl_fill_vf+0x4a0/0x4a0 [ 74.802156][ T5087] ? netlink_ack+0x1380/0x1380 [ 74.806914][ T5087] ? lock_sync+0x190/0x190 [ 74.811368][ T5087] ? netlink_deliver_tap+0x1a0/0xd00 [ 74.816667][ T5087] ? _copy_from_iter+0x2c1/0x10f0 [ 74.821706][ T5087] netlink_unicast+0x53b/0x810 [ 74.826484][ T5087] ? netlink_attachskb+0x880/0x880 [ 74.831600][ T5087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.837497][ T5087] ? __phys_addr_symbol+0x30/0x70 [ 74.842523][ T5087] ? __check_object_size+0x323/0x730 [ 74.847813][ T5087] netlink_sendmsg+0x8b7/0xd70 [ 74.852586][ T5087] ? netlink_unicast+0x810/0x810 [ 74.857538][ T5087] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.862826][ T5087] ? netlink_unicast+0x810/0x810 [ 74.867771][ T5087] __sock_sendmsg+0xd5/0x180 [ 74.872362][ T5087] ____sys_sendmsg+0x6ac/0x940 [ 74.877126][ T5087] ? copy_msghdr_from_user+0x10b/0x160 [ 74.882596][ T5087] ? kernel_sendmsg+0x50/0x50 [ 74.887276][ T5087] ? hlock_class+0x4e/0x130 [ 74.891794][ T5087] ___sys_sendmsg+0x135/0x1d0 [ 74.896482][ T5087] ? do_recvmmsg+0x740/0x740 [ 74.901100][ T5087] ? recalc_sigpending_tsk+0x187/0x1d0 [ 74.906558][ T5087] ? __fget_light+0x1fc/0x260 [ 74.911238][ T5087] __sys_sendmsg+0x117/0x1e0 [ 74.915836][ T5087] ? __sys_sendmsg_sock+0x30/0x30 [ 74.920873][ T5087] ? ptrace_notify+0xf4/0x130 [ 74.925552][ T5087] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 74.931799][ T5087] do_syscall_64+0x40/0x110 [ 74.936307][ T5087] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 74.942211][ T5087] RIP: 0033:0x7fc3b1ed34f9 [ 74.946627][ T5087] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.966238][ T5087] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.974649][ T5087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 74.982617][ T5087] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 74.990585][ T5087] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00000000557624c0 [ 74.998549][ T5087] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [pid 5086] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5085] close(4) = 0 [pid 5085] close(5) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] close(6 [pid 5073] <... clone resumed>, child_tidptr=0x555555761650) = 3 ./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x555555761660, 24) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] socket(AF_NETLINK, SOCK_DGRAM, NETLINK_ROUTE) = 3 [pid 5090] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5090] write(4, "10", 2) = 2 [ 75.006511][ T5087] R13: 00007ffdaa3d0334 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 75.014490][ T5087] [ 75.052275][ T5090] FAULT_INJECTION: forcing a failure. [ 75.052275][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 75.053227][ T5088] FAULT_INJECTION: forcing a failure. [ 75.053227][ T5088] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.053807][ T5088] [ 75.053812][ T5088] ====================================================== [ 75.053817][ T5088] WARNING: possible circular locking dependency detected [ 75.053822][ T5088] 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 Not tainted [ 75.053834][ T5088] ------------------------------------------------------ [ 75.053839][ T5088] syz-executor229/5088 is trying to acquire lock: [ 75.053848][ T5088] ffffffff8ceb8da0 (console_owner){....}-{0:0}, at: vprintk_emit+0x313/0x5f0 [ 75.053895][ T5088] [ 75.053895][ T5088] but task is already holding lock: [ 75.053899][ T5088] ffff8880b983c718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 75.053946][ T5088] [ 75.053946][ T5088] which lock already depends on the new lock. [ 75.053946][ T5088] [ 75.053951][ T5088] [ 75.053951][ T5088] the existing dependency chain (in reverse order) is: [ 75.053956][ T5088] [ 75.053956][ T5088] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 75.053979][ T5088] _raw_spin_lock_nested+0x31/0x40 [ 75.054002][ T5088] raw_spin_rq_lock_nested+0x29/0x130 [ 75.054026][ T5088] task_fork_fair+0x70/0x240 [ 75.054049][ T5088] sched_cgroup_fork+0x3cf/0x510 [ 75.054075][ T5088] copy_process+0x4c86/0x73f0 [ 75.054098][ T5088] kernel_clone+0xfd/0x930 [ 75.054119][ T5088] user_mode_thread+0xb4/0xf0 [ 75.054141][ T5088] rest_init+0x27/0x2b0 [ 75.054160][ T5088] arch_call_rest_init+0x13/0x30 [ 75.054188][ T5088] start_kernel+0x39f/0x480 [ 75.054215][ T5088] x86_64_start_reservations+0x18/0x30 [ 75.054238][ T5088] x86_64_start_kernel+0xb2/0xc0 [ 75.054259][ T5088] secondary_startup_64_no_verify+0x166/0x16b [ 75.054286][ T5088] [ 75.054286][ T5088] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 75.054310][ T5088] _raw_spin_lock_irqsave+0x3a/0x50 [ 75.054331][ T5088] try_to_wake_up+0xb0/0x13d0 [ 75.054350][ T5088] kick_pool+0x253/0x470 [ 75.054371][ T5088] create_worker+0x46f/0x730 [ 75.054393][ T5088] workqueue_init+0x319/0x830 [ 75.054417][ T5088] kernel_init_freeable+0x332/0xc10 [ 75.054434][ T5088] kernel_init+0x1c/0x2a0 [ 75.054457][ T5088] ret_from_fork+0x45/0x80 [ 75.054479][ T5088] ret_from_fork_asm+0x11/0x20 [ 75.054503][ T5088] [ 75.054503][ T5088] -> #3 (&pool->lock){-.-.}-{2:2}: [ 75.054526][ T5088] _raw_spin_lock+0x2e/0x40 [ 75.054546][ T5088] __queue_work+0x399/0x11f0 [ 75.054570][ T5088] queue_work_on+0xed/0x110 [ 75.054593][ T5088] rpm_suspend+0x121b/0x16f0 [ 75.054622][ T5088] rpm_idle+0x578/0x6e0 [ 75.054646][ T5088] __pm_runtime_idle+0xbe/0x160 [ 75.054680][ T5088] __device_attach+0x382/0x4b0 [ 75.054697][ T5088] bus_probe_device+0x17c/0x1c0 [ 75.054724][ T5088] device_add+0x117e/0x1aa0 [ 75.054747][ T5088] serial_base_port_add+0x353/0x4b0 [ 75.054765][ T5088] serial_core_register_port+0x137/0x1af0 [ 75.054794][ T5088] serial8250_register_8250_port+0x140d/0x2080 [ 75.054815][ T5088] serial_pnp_probe+0x47d/0x880 [ 75.054833][ T5088] pnp_device_probe+0x2a3/0x4c0 [ 75.054850][ T5088] really_probe+0x234/0xc90 [ 75.054866][ T5088] __driver_probe_device+0x1de/0x4b0 [ 75.054884][ T5088] driver_probe_device+0x4c/0x1a0 [ 75.054901][ T5088] __driver_attach+0x274/0x570 [ 75.054918][ T5088] bus_for_each_dev+0x13c/0x1d0 [ 75.054944][ T5088] bus_add_driver+0x2e9/0x630 [ 75.054970][ T5088] driver_register+0x15c/0x4a0 [ 75.054988][ T5088] serial8250_init+0xba/0x4b0 [ 75.055016][ T5088] do_one_initcall+0x11c/0x650 [ 75.055040][ T5088] kernel_init_freeable+0x687/0xc10 [ 75.055057][ T5088] kernel_init+0x1c/0x2a0 [ 75.055076][ T5088] ret_from_fork+0x45/0x80 [ 75.055097][ T5088] ret_from_fork_asm+0x11/0x20 [ 75.055121][ T5088] [ 75.055121][ T5088] -> #2 (&dev->power.lock){-...}-{2:2}: [ 75.055144][ T5088] _raw_spin_lock_irqsave+0x3a/0x50 [ 75.055166][ T5088] __pm_runtime_resume+0xab/0x170 [ 75.055193][ T5088] __uart_start+0x1b2/0x470 [ 75.055217][ T5088] uart_write+0x2ff/0x5b0 [ 75.055243][ T5088] n_tty_write+0x422/0x1130 [ 75.055266][ T5088] file_tty_write.constprop.0+0x519/0x9b0 [ 75.055288][ T5088] redirected_tty_write+0xa6/0xc0 [ 75.055309][ T5088] vfs_write+0x64f/0xdf0 [ 75.055328][ T5088] ksys_write+0x12f/0x250 [ 75.055347][ T5088] do_syscall_64+0x40/0x110 [ 75.055371][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 75.055392][ T5088] [ 75.055392][ T5088] -> #1 (&port_lock_key){-...}-{2:2}: [ 75.055414][ T5088] _raw_spin_lock_irqsave+0x3a/0x50 [ 75.055436][ T5088] serial8250_console_write+0xa7c/0x1060 [ 75.055460][ T5088] console_flush_all+0x4d5/0xd60 [ 75.055478][ T5088] console_unlock+0x10c/0x260 [ 75.055496][ T5088] vprintk_emit+0x17f/0x5f0 [ 75.055513][ T5088] vprintk+0x7b/0x90 [ 75.055530][ T5088] _printk+0xc8/0x100 [ 75.055557][ T5088] register_console+0xa74/0x1060 [ 75.055575][ T5088] univ8250_console_init+0x35/0x50 [ 75.055602][ T5088] console_init+0xba/0x5d0 [ 75.055627][ T5088] start_kernel+0x25a/0x480 [ 75.055654][ T5088] x86_64_start_reservations+0x18/0x30 [ 75.055681][ T5088] x86_64_start_kernel+0xb2/0xc0 [ 75.055703][ T5088] secondary_startup_64_no_verify+0x166/0x16b [ 75.055728][ T5088] [ 75.055728][ T5088] -> #0 (console_owner){....}-{0:0}: [ 75.055751][ T5088] __lock_acquire+0x2433/0x3b20 [ 75.055778][ T5088] lock_acquire+0x1ae/0x520 [ 75.055804][ T5088] vprintk_emit+0x328/0x5f0 [ 75.055821][ T5088] vprintk+0x7b/0x90 [ 75.055839][ T5088] _printk+0xc8/0x100 [ 75.055864][ T5088] should_fail_ex+0x46b/0x5b0 [ 75.055882][ T5088] strncpy_from_user+0x38/0x300 [ 75.055904][ T5088] strncpy_from_user_nofault+0x80/0x180 [ 75.055932][ T5088] bpf_probe_read_user_str+0x26/0x70 [ 75.055960][ T5088] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 75.055981][ T5088] bpf_trace_run4+0x173/0x450 [ 75.055999][ T5088] __bpf_trace_sched_switch+0x13e/0x180 [ 75.056018][ T5088] __traceiter_sched_switch+0x6c/0xc0 [ 75.056042][ T5088] __schedule+0x21f3/0x5af0 [ 75.056068][ T5088] schedule+0xe9/0x270 [ 75.056093][ T5088] ptrace_stop.part.0+0x44d/0x7a0 [ 75.056114][ T5088] ptrace_do_notify+0x22f/0x2e0 [ 75.056135][ T5088] ptrace_notify+0xc8/0x130 [ 75.056155][ T5088] syscall_exit_to_user_mode_prepare+0x126/0x230 [ 75.056180][ T5088] syscall_exit_to_user_mode+0xe/0x60 [ 75.056199][ T5088] do_syscall_64+0x4d/0x110 [ 75.056221][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 75.056241][ T5088] [ 75.056241][ T5088] other info that might help us debug this: [ 75.056241][ T5088] [ 75.056245][ T5088] Chain exists of: [ 75.056245][ T5088] console_owner --> &p->pi_lock --> &rq->__lock [ 75.056245][ T5088] [ 75.056269][ T5088] Possible unsafe locking scenario: [ 75.056269][ T5088] [ 75.056273][ T5088] CPU0 CPU1 [ 75.056277][ T5088] ---- ---- [ 75.056280][ T5088] lock(&rq->__lock); [ 75.056290][ T5088] lock(&p->pi_lock); [ 75.056300][ T5088] lock(&rq->__lock); [ 75.056311][ T5088] lock(console_owner); [ 75.056321][ T5088] [ 75.056321][ T5088] *** DEADLOCK *** [ 75.056321][ T5088] [ 75.056324][ T5088] 2 locks held by syz-executor229/5088: [ 75.056335][ T5088] #0: ffff8880b983c718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 75.056386][ T5088] #1: ffffffff8cfabbe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x107/0x450 [ 75.056431][ T5088] [ 75.056431][ T5088] stack backtrace: [ 75.056435][ T5088] CPU: 0 PID: 5088 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 75.056457][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 75.056468][ T5088] Call Trace: [ 75.056474][ T5088] [ 75.056480][ T5088] dump_stack_lvl+0xd9/0x1b0 [ 75.056507][ T5088] check_noncircular+0x317/0x400 [ 75.056537][ T5088] ? print_circular_bug+0x5c0/0x5c0 [ 75.056575][ T5088] ? lockdep_lock+0xc6/0x200 [ 75.056601][ T5088] ? hlock_class+0x130/0x130 [ 75.056630][ T5088] __lock_acquire+0x2433/0x3b20 [ 75.056666][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 75.056700][ T5088] ? lock_acquire+0x1ae/0x520 [ 75.056729][ T5088] ? find_held_lock+0x2d/0x110 [ 75.056758][ T5088] lock_acquire+0x1ae/0x520 [ 75.056786][ T5088] ? vprintk_emit+0x313/0x5f0 [ 75.056808][ T5088] ? lock_sync+0x190/0x190 [ 75.056836][ T5088] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.056865][ T5088] ? do_raw_spin_lock+0x12e/0x2b0 [ 75.056886][ T5088] ? spin_bug+0x1d0/0x1d0 [ 75.056904][ T5088] ? down_trylock+0x49/0x70 [ 75.056926][ T5088] vprintk_emit+0x328/0x5f0 [ 75.056945][ T5088] ? vprintk_emit+0x313/0x5f0 [ 75.056967][ T5088] vprintk+0x7b/0x90 [ 75.056993][ T5088] _printk+0xc8/0x100 [ 75.057021][ T5088] ? kmsg_dump_get_line+0x350/0x350 [ 75.057050][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 75.057081][ T5088] ? ___ratelimit+0x24c/0x570 [ 75.057107][ T5088] ? idr_get_free+0xa30/0xa30 [ 75.057135][ T5088] should_fail_ex+0x46b/0x5b0 [ 75.057157][ T5088] strncpy_from_user+0x38/0x300 [ 75.057180][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 75.057213][ T5088] strncpy_from_user_nofault+0x80/0x180 [ 75.057243][ T5088] bpf_probe_read_user_str+0x26/0x70 [ 75.057275][ T5088] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 75.057297][ T5088] bpf_trace_run4+0x173/0x450 [ 75.057318][ T5088] ? bpf_trace_run3+0x430/0x430 [ 75.057340][ T5088] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.057373][ T5088] __bpf_trace_sched_switch+0x13e/0x180 [ 75.057395][ T5088] ? __bpf_trace_ipi_raise+0xf0/0xf0 [ 75.057416][ T5088] ? psi_group_change+0x530/0xdc0 [ 75.057443][ T5088] __traceiter_sched_switch+0x6c/0xc0 [ 75.057471][ T5088] __schedule+0x21f3/0x5af0 [ 75.057499][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 75.057531][ T5088] ? mark_held_locks+0x9f/0xe0 [ 75.057563][ T5088] ? __print_lock_name+0x1c2/0x260 [ 75.057590][ T5088] ? io_schedule_timeout+0x150/0x150 [ 75.057620][ T5088] ? schedule+0x1fc/0x270 [ 75.057648][ T5088] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.057689][ T5088] schedule+0xe9/0x270 [ 75.057717][ T5088] ptrace_stop.part.0+0x44d/0x7a0 [ 75.057743][ T5088] ptrace_do_notify+0x22f/0x2e0 [ 75.057766][ T5088] ? lock_sync+0x190/0x190 [ 75.057793][ T5088] ? ptrace_stop.part.0+0x7a0/0x7a0 [ 75.057824][ T5088] ptrace_notify+0xc8/0x130 [ 75.057847][ T5088] syscall_exit_to_user_mode_prepare+0x126/0x230 [ 75.057875][ T5088] syscall_exit_to_user_mode+0xe/0x60 [ 75.057896][ T5088] do_syscall_64+0x4d/0x110 [ 75.057921][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 75.057943][ T5088] RIP: 0033:0x7fc3b1ed34f9 [ 75.057958][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.057977][ T5088] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.057996][ T5088] RAX: 00000000000000d8 RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 75.058009][ T5088] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 75.058021][ T5088] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00000000557624c0 [ 75.058034][ T5088] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 75.058047][ T5088] R13: 00007ffdaa3d0334 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 75.058068][ T5088] [ 76.183945][ T5088] CPU: 0 PID: 5088 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 76.194344][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 76.204378][ T5088] Call Trace: [ 76.207639][ T5088] [ 76.210549][ T5088] dump_stack_lvl+0xd9/0x1b0 [ 76.215130][ T5088] should_fail_ex+0x496/0x5b0 [ 76.219789][ T5088] strncpy_from_user+0x38/0x300 [ 76.224620][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.230591][ T5088] strncpy_from_user_nofault+0x80/0x180 [ 76.236125][ T5088] bpf_probe_read_user_str+0x26/0x70 [ 76.241409][ T5088] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 76.246852][ T5088] bpf_trace_run4+0x173/0x450 [ 76.251511][ T5088] ? bpf_trace_run3+0x430/0x430 [ 76.256339][ T5088] ? reacquire_held_locks+0x4c0/0x4c0 [ 76.261709][ T5088] __bpf_trace_sched_switch+0x13e/0x180 [ 76.267234][ T5088] ? __bpf_trace_ipi_raise+0xf0/0xf0 [ 76.272508][ T5088] ? psi_group_change+0x530/0xdc0 [ 76.277521][ T5088] __traceiter_sched_switch+0x6c/0xc0 [ 76.282887][ T5088] __schedule+0x21f3/0x5af0 [ 76.287381][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.293348][ T5088] ? mark_held_locks+0x9f/0xe0 [ 76.298099][ T5088] ? __print_lock_name+0x1c2/0x260 [ 76.303192][ T5088] ? io_schedule_timeout+0x150/0x150 [ 76.308461][ T5088] ? schedule+0x1fc/0x270 [ 76.312772][ T5088] ? reacquire_held_locks+0x4c0/0x4c0 [ 76.318132][ T5088] schedule+0xe9/0x270 [ 76.322184][ T5088] ptrace_stop.part.0+0x44d/0x7a0 [ 76.327191][ T5088] ptrace_do_notify+0x22f/0x2e0 [ 76.332021][ T5088] ? lock_sync+0x190/0x190 [ 76.336420][ T5088] ? ptrace_stop.part.0+0x7a0/0x7a0 [ 76.341606][ T5088] ptrace_notify+0xc8/0x130 [ 76.346091][ T5088] syscall_exit_to_user_mode_prepare+0x126/0x230 [ 76.352405][ T5088] syscall_exit_to_user_mode+0xe/0x60 [ 76.357812][ T5088] do_syscall_64+0x4d/0x110 [ 76.362310][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.368186][ T5088] RIP: 0033:0x7fc3b1ed34f9 [ 76.372582][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.392172][ T5088] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.400567][ T5088] RAX: 00000000000000d8 RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 76.408516][ T5088] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 76.416478][ T5088] RBP: 0000000000000000 R08: 00007ffdaa3d00c6 R09: 00000000557624c0 [ 76.424433][ T5088] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000200000d8 [ 76.432404][ T5088] R13: 00007ffdaa3d0334 R14: 0000000000000000 R15: 00007ffdaa3d0350 [ 76.440365][ T5088] [ 76.443791][ T5090] CPU: 1 PID: 5090 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 76.454219][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 76.464264][ T5090] Call Trace: [ 76.467530][ T5090] [ 76.470450][ T5090] dump_stack_lvl+0x125/0x1b0 [ 76.475129][ T5090] should_fail_ex+0x496/0x5b0 [ 76.479798][ T5090] ? __lock_acquire+0xc65/0x3b20 [ 76.484740][ T5090] should_failslab+0x9/0x20 [ 76.489255][ T5090] __kmem_cache_alloc_node+0x6b/0x310 [ 76.494639][ T5090] ? ip6_tun_build_state+0x165/0x680 [ 76.499928][ T5090] ? ip6_tun_build_state+0x165/0x680 [ 76.505221][ T5090] __kmalloc+0x49/0x90 [ 76.509301][ T5090] ip6_tun_build_state+0x165/0x680 [ 76.514412][ T5090] ? __mutex_unlock_slowpath+0x165/0x650 [ 76.520043][ T5090] ? ip_tun_parse_opts.part.0+0xfa0/0xfa0 [ 76.525762][ T5090] ? find_held_lock+0x2d/0x110 [ 76.530535][ T5090] ? pcpu_alloc+0x1f1/0x1420 [ 76.535130][ T5090] ? lwtunnel_build_state+0x1d3/0x670 [ 76.540505][ T5090] lwtunnel_build_state+0x1d3/0x670 [ 76.545710][ T5090] fib_nh_common_init+0x149/0x2d0 [ 76.550731][ T5090] ? rt_fibinfo_free_cpus.part.0+0x1d0/0x1d0 [ 76.556707][ T5090] ? gre_gso_segment+0x17b0/0x17b0 [ 76.561820][ T5090] fib_nh_init+0xbd/0x450 [ 76.566145][ T5090] fib_create_info+0x24fb/0x4d50 [ 76.571084][ T5090] ? fib_result_prefsrc+0x4b0/0x4b0 [ 76.576273][ T5090] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.582252][ T5090] ? idr_get_free+0xa30/0xa30 [ 76.586925][ T5090] fib_table_insert+0x1d7/0x1d70 [ 76.591867][ T5090] ? find_held_lock+0x2d/0x110 [ 76.596645][ T5090] ? fib_route_seq_show+0xea0/0xea0 [ 76.601848][ T5090] ? lwtunnel_valid_encap_type+0x113/0x6a0 [ 76.607650][ T5090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.613540][ T5090] ? rtm_to_fib_config+0x71d/0x12c0 [ 76.618732][ T5090] ? inet_rtm_newroute+0x11f/0x200 [ 76.623841][ T5090] inet_rtm_newroute+0x11f/0x200 [ 76.628776][ T5090] ? inet_rtm_delroute+0x390/0x390 [ 76.633885][ T5090] ? inet_rtm_delroute+0x390/0x390 [ 76.638989][ T5090] rtnetlink_rcv_msg+0x3c7/0xe00 [ 76.643932][ T5090] ? rtnl_fill_vf+0x4a0/0x4a0 [ 76.648606][ T5090] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.654609][ T5090] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.660597][ T5090] netlink_rcv_skb+0x16b/0x440 [ 76.665355][ T5090] ? rtnl_fill_vf+0x4a0/0x4a0 [ 76.670026][ T5090] ? netlink_ack+0x1380/0x1380 [ 76.674779][ T5090] ? lock_sync+0x190/0x190 [ 76.679201][ T5090] ? netlink_deliver_tap+0x1a0/0xd00 [ 76.684482][ T5090] ? _copy_from_iter+0x2c1/0x10f0 [ 76.689518][ T5090] netlink_unicast+0x53b/0x810 [ 76.694296][ T5090] ? netlink_attachskb+0x880/0x880 [ 76.699409][ T5090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.705297][ T5090] ? __phys_addr_symbol+0x30/0x70 [ 76.710322][ T5090] ? __check_object_size+0x323/0x730 [ 76.715615][ T5090] netlink_sendmsg+0x8b7/0xd70 [ 76.720372][ T5090] ? netlink_unicast+0x810/0x810 [ 76.725311][ T5090] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.730595][ T5090] ? netlink_unicast+0x810/0x810 [ 76.735532][ T5090] __sock_sendmsg+0xd5/0x180 [ 76.740118][ T5090] ____sys_sendmsg+0x6ac/0x940 [ 76.744876][ T5090] ? copy_msghdr_from_user+0x10b/0x160 [ 76.750339][ T5090] ? kernel_sendmsg+0x50/0x50 [ 76.755016][ T5090] ? hlock_class+0x4e/0x130 [ 76.759535][ T5090] ___sys_sendmsg+0x135/0x1d0 [ 76.764214][ T5090] ? do_recvmmsg+0x740/0x740 [ 76.768814][ T5090] ? recalc_sigpending_tsk+0x187/0x1d0 [ 76.774270][ T5090] ? __fget_light+0x1fc/0x260 [ 76.778946][ T5090] __sys_sendmsg+0x117/0x1e0 [ 76.783537][ T5090] ? __sys_sendmsg_sock+0x30/0x30 [ 76.788570][ T5090] ? ptrace_notify+0xf4/0x130 [ 76.793241][ T5090] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 76.799484][ T5090] do_syscall_64+0x40/0x110 [ 76.803990][ T5090] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.809880][ T5090] RIP: 0033:0x7fc3b1ed34f9 [ 76.814287][ T5090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.833892][ T5090] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.842299][ T5090] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 76.850263][ T5090] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [pid 5090] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xd8\x00\x00\x00\x18\x00\x81\x06\x4e\x81\xf7\x82\xdb\x44\xb9\x04\x02\x1d\x08\x00\x14\x00\x7c\x09\xe8\xfe\x55\xa1\x0a\x00\x15\x00\x04\x00\x14\x26\x03\x60\x0e\x12\x08\x00\x0f\x00\x00\x00\x04\x01\xa8\x00\x16\x00\xa4\x00\x01\x40\x03\x00\x00\x00\x03\x60\x10\xfa\xb9\x4d\xcf\x5c\x04\x61\xc1\xd6\x7f\x6f\x94\x00\x71\x34\xcf\x6e\xe0\x80\x00\xa0\xe4\x08\xe8\xd8\xef\x52\xa9\x85\x16\x27\x7c\xe0\x6b\xba\xce\x80"..., iov_len=216}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 216 [pid 5089] <... sendmsg resumed>) = 216 [pid 5088] <... sendmsg resumed>) = 216 [pid 5087] <... sendmsg resumed>) = 216 [pid 5086] <... bpf resumed>) = 6 [pid 5085] <... close resumed>) = 0 [pid 5088] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5087] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5085] close(7 [pid 5088] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC [pid 5087] perf_event_open(NULL, 0, -1, -1, PERF_FLAG_FD_NO_GROUP|PERF_FLAG_FD_CLOEXEC [ 76.893981][ T5089] FAULT_INJECTION: forcing a failure. [ 76.893981][ T5089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.907024][ T5089] CPU: 0 PID: 5089 Comm: syz-executor229 Not tainted 6.7.0-rc3-syzkaller-00778-g2ebe81c81435 #0 [ 76.917440][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 76.927491][ T5089] Call Trace: [ 76.930770][ T5089] [ 76.933701][ T5089] dump_stack_lvl+0xd9/0x1b0 [ 76.938302][ T5089] should_fail_ex+0x496/0x5b0 [ 76.942993][ T5089] strncpy_from_user+0x38/0x300 [ 76.947855][ T5089] ? bpf_trace_run4+0x1aa/0x450 [ 76.952710][ T5089] strncpy_from_user_nofault+0x80/0x180 [ 76.958274][ T5089] bpf_probe_read_user_str+0x26/0x70 [ 76.963577][ T5089] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 76.969071][ T5089] bpf_trace_run4+0x173/0x450 [ 76.973770][ T5089] ? bpf_trace_run3+0x430/0x430 [ 76.978630][ T5089] ? reacquire_held_locks+0x4c0/0x4c0 [ 76.984013][ T5089] ? rcu_is_watching+0x12/0xb0 [ 76.988770][ T5089] __bpf_trace_sched_switch+0x13e/0x180 [ 76.994301][ T5089] ? __bpf_trace_ipi_raise+0xf0/0xf0 [ 76.999569][ T5089] ? psi_group_change+0x530/0xdc0 [ 77.004577][ T5089] __traceiter_sched_switch+0x6c/0xc0 [ 77.009936][ T5089] __schedule+0x21f3/0x5af0 [ 77.014429][ T5089] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 77.020396][ T5089] ? rcu_is_watching+0x12/0xb0 [ 77.025142][ T5089] ? io_schedule_timeout+0x150/0x150 [ 77.030421][ T5089] ? lock_release+0x4bf/0x690 [ 77.035089][ T5089] ? cgroup_enter_frozen+0x166/0x2f0 [ 77.040367][ T5089] ? schedule+0x1fc/0x270 [ 77.044685][ T5089] ? reacquire_held_locks+0x4c0/0x4c0 [ 77.050058][ T5089] ? spin_bug+0x1d0/0x1d0 [ 77.054370][ T5089] schedule+0xe9/0x270 [ 77.058425][ T5089] ptrace_stop.part.0+0x44d/0x7a0 [ 77.063435][ T5089] ptrace_do_notify+0x22f/0x2e0 [ 77.068280][ T5089] ? lock_sync+0x190/0x190 [ 77.072690][ T5089] ? ptrace_stop.part.0+0x7a0/0x7a0 [ 77.077868][ T5089] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 77.083749][ T5089] ptrace_notify+0xc8/0x130 [ 77.088232][ T5089] syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 77.094283][ T5089] syscall_enter_from_user_mode+0x107/0x120 [ 77.100155][ T5089] do_syscall_64+0x1c/0x110 [ 77.104643][ T5089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 77.110515][ T5089] RIP: 0033:0x7fc3b1ed34f9 [ 77.114907][ T5089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.134500][ T5089] RSP: 002b:00007ffdaa3d0328 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.142891][ T5089] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3b1ed34f9 [ 77.150842][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [pid 5085] close(21 [pid 5090] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5089] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5088] <... bpf resumed>) = 6 [pid 5087] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=5}}, 16 [pid 5086] close(3 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(12 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] setpgid(0, 0 [pid 5091] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5090] <... bpf resumed>) = 5 [pid 5089] close(9 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(9 [pid 5092] <... setpgid resumed>) = 0 [pid 5091] <... openat resumed>) = 4 [pid 5090] bpf(BPF_MAP_CREATE, NULL, 0