./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1325257806 <...> Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. execve("./syz-executor1325257806", ["./syz-executor1325257806"], 0x7ffd4a69e500 /* 10 vars */) = 0 brk(NULL) = 0x55555615a000 brk(0x55555615ad00) = 0x55555615ad00 arch_prctl(ARCH_SET_FS, 0x55555615a380) = 0 set_tid_address(0x55555615a650) = 291 set_robust_list(0x55555615a660, 24) = 0 rseq(0x55555615aca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1325257806", 4096) = 28 getrandom("\x75\x6e\x0c\xe6\x03\x1f\x64\x3d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555615ad00 brk(0x55555617bd00) = 0x55555617bd00 brk(0x55555617c000) = 0x55555617c000 mprotect(0x7f41ae71f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555615a650) = 292 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555615a650) = 293 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 293 attached ./strace-static-x86_64: Process 292 attached [pid 293] set_robust_list(0x55555615a660, 24 [pid 292] set_robust_list(0x55555615a660, 24 [pid 291] <... clone resumed>, child_tidptr=0x55555615a650) = 294 [pid 293] <... set_robust_list resumed>) = 0 [pid 292] <... set_robust_list resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x55555615a660, 24) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555615a650) = 295 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x55555615a660, 24) = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... clone resumed>, child_tidptr=0x55555615a650) = 296 [pid 292] <... clone resumed>, child_tidptr=0x55555615a650) = 297 ./strace-static-x86_64: Process 298 attached ./strace-static-x86_64: Process 297 attached [pid 291] <... clone resumed>, child_tidptr=0x55555615a650) = 298 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] set_robust_list(0x55555615a660, 24 [pid 297] set_robust_list(0x55555615a660, 24 [pid 296] <... openat resumed>) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 298] <... set_robust_list resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x55555615a650) = 299 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] <... openat resumed>) = 3 [pid 296] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 296] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 296] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 296] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 297] <... prctl resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55555615a650) = 300 [pid 296] <... openat resumed>) = 4 [pid 296] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 296] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 296] exit_group(0 [pid 297] setpgid(0, 0 [pid 296] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 300 attached [pid 297] <... setpgid resumed>) = 0 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] set_robust_list(0x55555615a660, 24) = 0 [pid 297] <... openat resumed>) = 3 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] write(3, "1000", 4 [pid 296] +++ exited with 0 +++ ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x55555615a660, 24) = 0 [pid 300] <... prctl resumed>) = 0 [pid 297] <... write resumed>) = 4 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] setpgid(0, 0) = 0 [pid 300] setpgid(0, 0 [pid 297] close(3 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] <... setpgid resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x55555615a660, 24) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... openat resumed>) = 3 [pid 293] <... clone resumed>, child_tidptr=0x55555615a650) = 301 [pid 297] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 297] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 297] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 295] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 299] <... clone resumed>, child_tidptr=0x55555615a650) = 302 [pid 297] <... ioctl resumed>) = 0 [pid 300] write(3, "1000", 4 [pid 295] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 297] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 300] <... write resumed>) = 4 [pid 297] <... openat resumed>) = 4 [pid 295] <... ioctl resumed>) = 0 [pid 297] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100./strace-static-x86_64: Process 302 attached ./strace-static-x86_64: Process 301 attached [pid 300] close(3 [pid 297] <... ioctl resumed>) = 0 [pid 295] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 297] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 301] set_robust_list(0x55555615a660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] set_robust_list(0x55555615a660, 24 [pid 301] <... prctl resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 297] <... ioctl resumed>) = 0 [pid 295] <... ioctl resumed>) = 0 [pid 302] <... set_robust_list resumed>) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] setpgid(0, 0 [pid 300] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 297] exit_group(0 [pid 295] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 301] <... setpgid resumed>) = 0 [pid 302] <... prctl resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] setpgid(0, 0 [pid 297] <... exit_group resumed>) = ? [pid 302] <... setpgid resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 295] <... ioctl resumed>) = 0 [pid 301] write(3, "1000", 4) = 4 [pid 297] +++ exited with 0 +++ [pid 301] close(3 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] <... close resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 292] <... clone resumed>, child_tidptr=0x55555615a650) = 303 [pid 301] <... ioctl resumed>) = 0 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 301] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY./strace-static-x86_64: Process 303 attached [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 301] <... openat resumed>) = 4 [pid 301] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 301] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 301] exit_group(0) = ? [pid 303] set_robust_list(0x55555615a660, 24 [pid 302] <... openat resumed>) = 3 [pid 300] <... ioctl resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 301] +++ exited with 0 +++ [pid 303] <... set_robust_list resumed>) = 0 [pid 302] write(3, "1000", 4 [pid 300] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] <... write resumed>) = 4 [pid 300] <... ioctl resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 303] <... prctl resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 303] setpgid(0, 0) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] close(3 [pid 300] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 302] <... close resumed>) = 0 [pid 300] <... ioctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x55555615a650) = 304 [pid 300] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 302] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 295] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 300] <... openat resumed>) = 4 [pid 295] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x55555615a660, 24 [pid 302] <... openat resumed>) = 3 [pid 300] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] <... openat resumed>) = 3 [pid 295] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 295] exit_group(0) = ? [pid 304] <... set_robust_list resumed>) = 0 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] write(3, "1000", 4 [pid 300] <... ioctl resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] <... ioctl resumed>) = 0 [pid 300] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 304] <... prctl resumed>) = 0 [pid 303] <... write resumed>) = 4 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 300] <... ioctl resumed>) = 0 [pid 295] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 300] exit_group(0 [pid 302] <... ioctl resumed>) = 0 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 303] close(3 [pid 302] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 294] <... restart_syscall resumed>) = 0 [pid 304] setpgid(0, 0 [pid 300] <... exit_group resumed>) = ? [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... close resumed>) = 0 [pid 304] <... setpgid resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x55555615a650) = 305 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] <... openat resumed>) = 4 [pid 302] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 302] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 302] exit_group(0) = ? [pid 304] <... openat resumed>) = 3 [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 304] write(3, "1000", 4 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 302] +++ exited with 0 +++ [pid 300] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 299] <... restart_syscall resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 306 attached ./strace-static-x86_64: Process 305 attached ./strace-static-x86_64: Process 307 attached [pid 304] <... write resumed>) = 4 [pid 303] <... ioctl resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55555615a650) = 306 [pid 298] <... clone resumed>, child_tidptr=0x55555615a650) = 307 [pid 304] close(3 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 305] set_robust_list(0x55555615a660, 24 [pid 307] set_robust_list(0x55555615a660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 304] <... close resumed>) = 0 [pid 303] <... ioctl resumed>) = 0 [ 19.545266][ T30] audit: type=1400 audit(1714547858.496:66): avc: denied { execmem } for pid=291 comm="syz-executor132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 306] set_robust_list(0x55555615a660, 24 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 304] <... openat resumed>) = 3 [pid 303] <... ioctl resumed>) = 0 [pid 307] <... ioctl resumed>) = 0 [pid 306] <... set_robust_list resumed>) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... prctl resumed>) = 0 [pid 304] <... ioctl resumed>) = 0 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 303] <... openat resumed>) = 4 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 304] <... ioctl resumed>) = 0 [pid 303] <... ioctl resumed>) = 0 [pid 304] exit_group(0 [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 304] <... exit_group resumed>) = ? [pid 307] <... ioctl resumed>) = 0 [pid 306] <... prctl resumed>) = 0 [pid 305] setpgid(0, 0 [pid 303] <... ioctl resumed>) = 0 [pid 304] +++ exited with 0 +++ [pid 303] exit_group(0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 303] <... exit_group resumed>) = ? [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 293] <... restart_syscall resumed>) = 0 [pid 307] <... openat resumed>) = 4 [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] +++ exited with 0 +++ [pid 307] <... ioctl resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 305] <... setpgid resumed>) = 0 [pid 307] <... ioctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x55555615a650) = 308 [pid 307] exit_group(0) = ? ./strace-static-x86_64: Process 308 attached [pid 307] +++ exited with 0 +++ [pid 306] setpgid(0, 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 308] set_robust_list(0x55555615a660, 24) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0 [pid 305] <... openat resumed>) = 3 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached [pid 308] <... setpgid resumed>) = 0 [pid 306] <... setpgid resumed>) = 0 [pid 305] write(3, "1000", 4./strace-static-x86_64: Process 310 attached [pid 309] set_robust_list(0x55555615a660, 24 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... clone resumed>, child_tidptr=0x55555615a650) = 309 [pid 292] <... clone resumed>, child_tidptr=0x55555615a650) = 310 [pid 309] <... set_robust_list resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] write(3, "1000", 4 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... write resumed>) = 4 [pid 310] set_robust_list(0x55555615a660, 24 [pid 308] <... write resumed>) = 4 [pid 308] close(3) = 0 [pid 305] close(3 [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 306] <... openat resumed>) = 3 [pid 305] <... close resumed>) = 0 [pid 308] <... ioctl resumed>) = 0 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 308] exit_group(0) = ? [pid 310] <... set_robust_list resumed>) = 0 [pid 309] <... prctl resumed>) = 0 [pid 308] +++ exited with 0 +++ [pid 306] write(3, "1000", 4 [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 306] <... write resumed>) = 4 [pid 305] <... openat resumed>) = 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] setpgid(0, 0 [pid 306] close(3 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... setpgid resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] <... ioctl resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x55555615a650) = 311 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x55555615a660, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 305] <... ioctl resumed>) = 0 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 306] <... openat resumed>) = 3 [pid 305] <... ioctl resumed>) = 0 [pid 311] <... openat resumed>) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140) = 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 305] <... openat resumed>) = 4 [pid 306] <... ioctl resumed>) = 0 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000140 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 306] <... ioctl resumed>) = 0 [pid 305] <... ioctl resumed>) = 0 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 306] <... ioctl resumed>) = 0 [pid 305] <... ioctl resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 305] exit_group(0 [pid 311] <... openat resumed>) = 4 [pid 306] <... openat resumed>) = 4 [pid 305] <... exit_group resumed>) = ? [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 306] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 311] <... ioctl resumed>) = 0 [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 311] exit_group(0) = ? [pid 310] <... prctl resumed>) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [ 119.656371][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 119.663182][ C1] rcu: 0-...!: (1 ticks this GP) idle=88f/1/0x4000000000000000 softirq=1911/1911 fqs=0 last_accelerate: 922a/b941 dyntick_enabled: 1 [ 119.676703][ C1] (detected by 1, t=10006 jiffies, g=441, q=229) [ 119.682952][ C1] Sending NMI from CPU 1 to CPUs 0: [ 119.688001][ C0] NMI backtrace for cpu 0 [ 119.688021][ C0] CPU: 0 PID: 305 Comm: syz-executor132 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 119.688037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 119.688054][ C0] RIP: 0010:_raw_spin_lock+0xa9/0x1b0 [ 119.688090][ C0] Code: 00 00 00 c7 44 24 20 00 00 00 00 4c 89 ef be 04 00 00 00 e8 e9 75 e9 fc 4c 89 ff be 04 00 00 00 e8 dc 75 e9 fc 43 0f b6 04 26 <84> c0 0f 85 aa 00 00 00 8b 44 24 20 b9 01 00 00 00 f0 41 0f b1 4d [ 119.688101][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000097 [ 119.688114][ C0] RAX: 0000000000000004 RBX: 1ffff92000000f54 RCX: ffffffff84c8d514 [ 119.688125][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007ac0 [ 119.688134][ C0] RBP: ffffc90000007b38 R08: dffffc0000000000 R09: 0000000000000003 [ 119.688144][ C0] R10: fffff52000000f58 R11: dffffc0000000001 R12: dffffc0000000000 [ 119.688155][ C0] R13: ffff888120512448 R14: 1ffff92000000f58 R15: ffffc90000007ac0 [ 119.688166][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 119.688179][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.688189][ C0] CR2: 00007f41ae726130 CR3: 000000000680f000 CR4: 00000000003506b0 [ 119.688203][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.688211][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.688220][ C0] Call Trace: [ 119.688226][ C0] [ 119.688233][ C0] ? show_regs+0x58/0x60 [ 119.688251][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 119.688268][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 119.688285][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688299][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688314][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 119.688329][ C0] ? nmi_handle+0xa8/0x280 [ 119.688344][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688358][ C0] ? default_do_nmi+0x69/0x160 [ 119.688373][ C0] ? exc_nmi+0xaf/0x120 [ 119.688386][ C0] ? end_repeat_nmi+0x16/0x31 [ 119.688400][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 119.688415][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688430][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688445][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 119.688459][ C0] [ 119.688464][ C0] [ 119.688468][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 119.688483][ C0] ? __kasan_check_write+0x14/0x20 [ 119.688498][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 119.688514][ C0] snd_timer_user_interrupt+0x55/0x470 [ 119.688529][ C0] ? snd_timer_user_tinterrupt+0xc90/0xc90 [ 119.688544][ C0] snd_timer_process_callbacks+0x24b/0x310 [ 119.688559][ C0] snd_timer_interrupt+0xe94/0x1050 [ 119.688575][ C0] snd_hrtimer_callback+0x1db/0x330 [ 119.688589][ C0] ? snd_hrtimer_stop+0xa0/0xa0 [ 119.688603][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 119.688619][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 119.688632][ C0] ? clockevents_program_event+0x236/0x300 [ 119.688648][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 119.688663][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 119.688680][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 119.688694][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 119.688709][ C0] [ 119.688713][ C0] [ 119.688718][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 119.688731][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x57/0x80 [ 119.688748][ C0] Code: 8d 86 e8 bc 6c e9 fc 48 83 3d 9c 78 c4 01 00 74 35 48 89 df e8 0e 0a 8c fc 66 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 84 4d 83 fc 65 8b 05 25 91 39 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 119.688759][ C0] RSP: 0018:ffffc90000a57a68 EFLAGS: 00000206 [ 119.688770][ C0] RAX: 0000000000000001 RBX: ffff88810aa31d38 RCX: dffffc0000000000 [ 119.688786][ C0] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000001 [ 119.688794][ C0] RBP: ffffc90000a57a78 R08: ffffffff83c297e7 R09: ffffed1023e603ee [ 119.688805][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810aa31cb0 [ 119.688815][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 119.688825][ C0] ? snd_timer_notify1+0x217/0x350 [ 119.688840][ C0] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 119.688855][ C0] snd_timer_stop1+0x7af/0x8f0 [ 119.688870][ C0] snd_timer_close_locked+0x22e/0x920 [ 119.688885][ C0] snd_timer_user_release+0x121/0x2c0 [ 119.688899][ C0] ? snd_timer_user_open+0x180/0x180 [ 119.688912][ C0] ? percpu_counter_add_batch+0x13d/0x160 [ 119.688927][ C0] ? snd_timer_user_open+0x180/0x180 [ 119.688940][ C0] __fput+0x3fe/0x910 [ 119.688956][ C0] ____fput+0x15/0x20 [ 119.688968][ C0] task_work_run+0x129/0x190 [ 119.688983][ C0] do_exit+0xc48/0x2ca0 [ 119.688998][ C0] ? put_task_struct+0x80/0x80 [ 119.689011][ C0] ? ptrace_notify+0x24c/0x350 [ 119.689026][ C0] ? do_notify_parent+0xa30/0xa30 [ 119.689042][ C0] do_group_exit+0x141/0x310 [ 119.689056][ C0] __x64_sys_exit_group+0x3f/0x40 [ 119.689070][ C0] do_syscall_64+0x3d/0xb0 [ 119.689084][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 119.689100][ C0] RIP: 0033:0x7f41ae6aadb9 [ 119.689116][ C0] Code: Unable to access opcode bytes at RIP 0x7f41ae6aad8f. [ 119.689122][ C0] RSP: 002b:00007ffd6184f438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 119.689136][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41ae6aadb9 [ 119.689146][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 119.689155][ C0] RBP: 00007f41ae7252b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 119.689165][ C0] R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f41ae7252b0 [ 119.689174][ C0] R13: 0000000000000000 R14: 00007f41ae725d20 R15: 00007f41ae67bf50 [ 119.689186][ C0] [ 119.689191][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.191 msecs [ 119.689995][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10005 jiffies! g441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 120.242669][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=354 [ 120.250217][ C1] rcu: rcu_preempt kthread starved for 10006 jiffies! g441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 120.261243][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 120.271046][ C1] rcu: RCU grace-period kthread stack dump: [ 120.276786][ C1] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 120.285803][ C1] Call Trace: [ 120.288927][ C1] [ 120.291706][ C1] __schedule+0xccc/0x1590 [ 120.295956][ C1] ? __sched_text_start+0x8/0x8 [ 120.300642][ C1] ? __kasan_check_write+0x14/0x20 [ 120.305591][ C1] schedule+0x11f/0x1e0 [ 120.309600][ C1] schedule_timeout+0x18c/0x370 [ 120.314273][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 120.319307][ C1] ? console_conditional_schedule+0x30/0x30 [ 120.325033][ C1] ? update_process_times+0x200/0x200 [ 120.330240][ C1] ? prepare_to_swait_event+0x308/0x320 [ 120.335625][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 120.340223][ C1] ? debug_smp_processor_id+0x17/0x20 [ 120.345431][ C1] ? __note_gp_changes+0x4ab/0x920 [ 120.350378][ C1] ? rcu_gp_init+0xc30/0xc30 [ 120.354804][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 120.359836][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 120.364274][ C1] rcu_gp_kthread+0xa4/0x350 [ 120.368690][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 120.373377][ C1] ? rcu_barrier_callback+0x50/0x50 [ 120.378410][ C1] ? __kasan_check_read+0x11/0x20 [ 120.383270][ C1] ? __kthread_parkme+0xb2/0x200 [ 120.388047][ C1] kthread+0x421/0x510 [ 120.391953][ C1] ? rcu_barrier_callback+0x50/0x50 [ 120.396993][ C1] ? kthread_blkcg+0xd0/0xd0 [ 120.401411][ C1] ret_from_fork+0x1f/0x30 [ 120.405670][ C1] [ 120.408536][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 120.414694][ C1] Sending NMI from CPU 1 to CPUs 0: [ 120.419736][ C0] NMI backtrace for cpu 0 [ 120.419743][ C0] CPU: 0 PID: 305 Comm: syz-executor132 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 120.419759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 120.419767][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x1/0x210 [ 120.419786][ C0] Code: 03 38 c1 0f 8c 71 ff ff ff 48 8d 7c 24 20 e8 66 73 e9 fc e9 62 ff ff ff e8 8c 0e fa ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 [ 120.419797][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00000806 [ 120.419810][ C0] RAX: 1ffff92000000f54 RBX: ffff888120522070 RCX: dffffc0000000000 [ 120.419821][ C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff888120522070 [ 120.419831][ C0] RBP: ffffc90000007b38 R08: dffffc0000000000 R09: ffffc90000007a80 [ 120.419842][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000007a98 [ 120.419852][ C0] R13: 0000000000000001 R14: 1ffff92000000f50 R15: 0000000000000003 [ 120.419861][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 120.419874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.419884][ C0] CR2: 00007f41ae726130 CR3: 000000000680f000 CR4: 00000000003506b0 [ 120.419898][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.419906][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.419915][ C0] Call Trace: [ 120.419919][ C0] [ 120.419924][ C0] ? show_regs+0x58/0x60 [ 120.419939][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 120.419956][ C0] ? ___ratelimit+0x3c0/0x5a0 [ 120.419971][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 120.419988][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420003][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420018][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 120.420033][ C0] ? nmi_handle+0xa8/0x280 [ 120.420048][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420062][ C0] ? _raw_spin_lock+0xa9/0x1b0 [ 120.420077][ C0] ? default_do_nmi+0x69/0x160 [ 120.420092][ C0] ? exc_nmi+0xaf/0x120 [ 120.420105][ C0] ? end_repeat_nmi+0x16/0x31 [ 120.420120][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420135][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420151][ C0] ? _raw_spin_lock_irqsave+0x1/0x210 [ 120.420166][ C0] [ 120.420170][ C0] [ 120.420174][ C0] ? __wake_up+0xf5/0x1c0 [ 120.420188][ C0] ? remove_wait_queue+0x140/0x140 [ 120.420202][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 120.420218][ C0] ? snd_kill_fasync+0x152/0x2a0 [ 120.420235][ C0] snd_timer_user_interrupt+0x2e5/0x470 [ 120.420250][ C0] ? snd_timer_user_tinterrupt+0xc90/0xc90 [ 120.420264][ C0] snd_timer_process_callbacks+0x24b/0x310 [ 120.420279][ C0] snd_timer_interrupt+0xe94/0x1050 [ 120.420295][ C0] snd_hrtimer_callback+0x1db/0x330 [ 120.420309][ C0] ? snd_hrtimer_stop+0xa0/0xa0 [ 120.420323][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 120.420339][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 120.420352][ C0] ? clockevents_program_event+0x236/0x300 [ 120.420367][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 120.420383][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 120.420399][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 120.420413][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 120.420428][ C0] [ 120.420432][ C0] [ 120.420437][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 120.420451][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x57/0x80 [ 120.420467][ C0] Code: 8d 86 e8 bc 6c e9 fc 48 83 3d 9c 78 c4 01 00 74 35 48 89 df e8 0e 0a 8c fc 66 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 84 4d 83 fc 65 8b 05 25 91 39 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 120.420478][ C0] RSP: 0018:ffffc90000a57a68 EFLAGS: 00000206 [ 120.420490][ C0] RAX: 0000000000000001 RBX: ffff88810aa31d38 RCX: dffffc0000000000 [ 120.420500][ C0] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000001 [ 120.420508][ C0] RBP: ffffc90000a57a78 R08: ffffffff83c297e7 R09: ffffed1023e603ee [ 120.420519][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810aa31cb0 [ 120.420529][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 120.420539][ C0] ? snd_timer_notify1+0x217/0x350 [ 120.420554][ C0] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 120.420569][ C0] snd_timer_stop1+0x7af/0x8f0 [ 120.420584][ C0] snd_timer_close_locked+0x22e/0x920 [ 120.420598][ C0] snd_timer_user_release+0x121/0x2c0 [ 120.420613][ C0] ? snd_timer_user_open+0x180/0x180 [ 120.420626][ C0] ? percpu_counter_add_batch+0x13d/0x160 [ 120.420640][ C0] ? snd_timer_user_open+0x180/0x180 [ 120.420654][ C0] __fput+0x3fe/0x910 [ 120.420669][ C0] ____fput+0x15/0x20 [ 120.420681][ C0] task_work_run+0x129/0x190 [ 120.420695][ C0] do_exit+0xc48/0x2ca0 [ 120.420710][ C0] ? put_task_struct+0x80/0x80 [ 120.420729][ C0] ? ptrace_notify+0x24c/0x350 [ 120.420743][ C0] ? do_notify_parent+0xa30/0xa30 [ 120.420759][ C0] do_group_exit+0x141/0x310 [ 120.420773][ C0] __x64_sys_exit_group+0x3f/0x40 [ 120.420787][ C0] do_syscall_64+0x3d/0xb0 [ 120.420801][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 120.420817][ C0] RIP: 0033:0x7f41ae6aadb9 [ 120.420827][ C0] Code: Unable to access opcode bytes at RIP 0x7f41ae6aad8f. [ 120.420834][ C0] RSP: 002b:00007ffd6184f438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 120.420848][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41ae6aadb9 [ 120.420857][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 120.420866][ C0] RBP: 00007f41ae7252b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 120.420876][ C0] R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f41ae7252b0 [ 120.420885][ C0] R13: 0000000000000000 R14: 00007f41ae725d20 R15: 00007f41ae67bf50 [ 120.420897][ C0] [ 265.029300][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/u4:2:45] [ 265.037413][ C1] Modules linked in: [ 265.041159][ C1] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 265.050859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.060764][ C1] Workqueue: events_unbound toggle_allocation_gate [ 265.067096][ C1] RIP: 0010:smp_call_function_many_cond+0x848/0x9b0 [ 265.073514][ C1] Code: 89 fe 83 e6 01 31 ff e8 76 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 b1 a4 0a 00 eb 38 f3 90 42 0f b6 04 3b <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 95 a4 0a 00 eb e4 44 [ 265.093390][ C1] RSP: 0018:ffffc900002ef880 EFLAGS: 00000293 [ 265.099291][ C1] RAX: 0000000000000000 RBX: 1ffff1103ee07971 RCX: ffff8881055b2780 [ 265.107103][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 265.114913][ C1] RBP: ffffc900002ef998 R08: ffffffff8165816a R09: ffffed103ee27053 [ 265.122725][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 265.130544][ C1] R13: ffff8881f703cb88 R14: ffff8881f7138280 R15: dffffc0000000000 [ 265.138346][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.147111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.153536][ C1] CR2: 000055a4bc1572e8 CR3: 000000000680f000 CR4: 00000000003506a0 [ 265.161360][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.169158][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.177057][ C1] Call Trace: [ 265.180202][ C1] [ 265.182904][ C1] ? show_regs+0x58/0x60 [ 265.186951][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.191900][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.197018][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.202232][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.207176][ C1] ? clockevents_program_event+0x22f/0x300 [ 265.212818][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.218718][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.223668][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.229568][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.235208][ C1] [ 265.237984][ C1] [ 265.240762][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.246760][ C1] ? smp_call_function_many_cond+0x82a/0x9b0 [ 265.252568][ C1] ? smp_call_function_many_cond+0x848/0x9b0 [ 265.258384][ C1] ? text_poke_sync+0x30/0x30 [ 265.262896][ C1] ? smp_call_function_many+0x40/0x40 [ 265.268106][ C1] ? __kmalloc_track_caller+0x74/0x260 [ 265.273397][ C1] ? text_poke_loc_init+0xc5/0x540 [ 265.278345][ C1] ? text_poke_sync+0x30/0x30 [ 265.282859][ C1] on_each_cpu_cond_mask+0x40/0x80 [ 265.287810][ C1] ? __kmalloc_track_caller+0x74/0x260 [ 265.293098][ C1] text_poke_bp_batch+0x1c4/0x5d0 [ 265.297964][ C1] ? text_poke_loc_init+0x540/0x540 [ 265.302997][ C1] ? mutex_lock+0xb6/0x1e0 [ 265.307249][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 265.312369][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.318789][ C1] ? text_poke_queue+0xe4/0x1a0 [ 265.323478][ C1] text_poke_finish+0x1a/0x30 [ 265.327993][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 265.333808][ C1] __jump_label_update+0x36a/0x380 [ 265.338755][ C1] jump_label_update+0x3af/0x450 [ 265.343527][ C1] static_key_enable_cpuslocked+0x12f/0x250 [ 265.349257][ C1] static_key_enable+0x1a/0x30 [ 265.353854][ C1] toggle_allocation_gate+0xbf/0x460 [ 265.358977][ C1] ? kfence_protect+0x270/0x270 [ 265.363663][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 265.368351][ C1] ? finish_task_switch+0x167/0x7b0 [ 265.373385][ C1] ? __kasan_check_read+0x11/0x20 [ 265.378242][ C1] ? read_word_at_a_time+0x12/0x20 [ 265.383191][ C1] ? strscpy+0x9c/0x260 [ 265.387185][ C1] process_one_work+0x6bb/0xc10 [ 265.391873][ C1] worker_thread+0xad5/0x12a0 [ 265.396387][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 265.401072][ C1] kthread+0x421/0x510 [ 265.404975][ C1] ? worker_clr_flags+0x180/0x180 [ 265.409839][ C1] ? kthread_blkcg+0xd0/0xd0 [ 265.414262][ C1] ret_from_fork+0x1f/0x30 [ 265.418518][ C1]