./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2099836421 <...> Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. execve("./syz-executor2099836421", ["./syz-executor2099836421"], 0x7ffd390e12f0 /* 10 vars */) = 0 brk(NULL) = 0x55555715a000 brk(0x55555715ad00) = 0x55555715ad00 arch_prctl(ARCH_SET_FS, 0x55555715a380) = 0 set_tid_address(0x55555715a650) = 295 set_robust_list(0x55555715a660, 24) = 0 rseq(0x55555715aca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2099836421", 4096) = 28 getrandom("\xd6\xcd\xf6\x3f\x53\x20\x06\x6c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555715ad00 brk(0x55555717bd00) = 0x55555717bd00 brk(0x55555717c000) = 0x55555717c000 mprotect(0x7fd75b8ce000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 296 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 297 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 298 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 299 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 300 ./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x55555715a660, 24) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 301 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x55555715a660, 24) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555715a650) = 302 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55555715a660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 [pid 301] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 301] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 ./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 302 attached ./strace-static-x86_64: Process 300 attached ./strace-static-x86_64: Process 298 attached [pid 301] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 300] set_robust_list(0x55555715a660, 24 [pid 302] set_robust_list(0x55555715a660, 24 [pid 299] set_robust_list(0x55555715a660, 24 [pid 298] set_robust_list(0x55555715a660, 24 [pid 301] <... openat resumed>) = 4 [pid 300] <... set_robust_list resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 298] <... set_robust_list resumed>) = 0 [pid 302] <... set_robust_list resumed>) = 0 [pid 301] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... ioctl resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x55555715a660, 24 [pid 302] <... prctl resumed>) = 0 [pid 301] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 300] <... clone resumed>, child_tidptr=0x55555715a650) = 303 [pid 298] <... clone resumed>, child_tidptr=0x55555715a650) = 304 [pid 299] <... clone resumed>, child_tidptr=0x55555715a650) = 305 [pid 302] setpgid(0, 0./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x55555715a660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0 [pid 302] <... setpgid resumed>) = 0 [pid 305] <... setpgid resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 302] <... openat resumed>) = 3 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 302] write(3, "1000", 4 [pid 305] <... ioctl resumed>) = 0 [pid 302] <... write resumed>) = 4 [pid 302] close(3 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 302] <... close resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY./strace-static-x86_64: Process 304 attached [pid 303] <... set_robust_list resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 305] <... openat resumed>) = 4 [pid 302] <... openat resumed>) = 3 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 305] <... ioctl resumed>) = 0 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 305] exit_group(0) = ? [pid 302] <... ioctl resumed>) = 0 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 301] <... ioctl resumed>) = 0 [pid 302] <... ioctl resumed>) = 0 [pid 302] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 302] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 301] exit_group(0 [pid 302] <... openat resumed>) = 4 [pid 302] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 301] <... exit_group resumed>) = ? [pid 304] set_robust_list(0x55555715a660, 24 [pid 302] <... ioctl resumed>) = 0 [pid 302] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 304] <... set_robust_list resumed>) = 0 [pid 302] exit_group(0) = ? [pid 305] +++ exited with 0 +++ [pid 302] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... clone resumed>, child_tidptr=0x55555715a650) = 306 [pid 304] <... prctl resumed>) = 0 [pid 303] <... prctl resumed>) = 0 [pid 296] <... restart_syscall resumed>) = 0 [pid 303] setpgid(0, 0 [pid 304] setpgid(0, 0 [pid 303] <... setpgid resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55555715a660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... setpgid resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55555715a650) = 307 [pid 306] <... prctl resumed>) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] setpgid(0, 0) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55555715a650) = 308 [pid 304] <... openat resumed>) = 3 [pid 304] write(3, "1000", 4 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... write resumed>) = 4 [pid 303] <... openat resumed>) = 3 [pid 304] close(3 [pid 303] write(3, "1000", 4 [pid 304] <... close resumed>) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY./strace-static-x86_64: Process 307 attached [pid 303] <... write resumed>) = 4 [pid 304] <... openat resumed>) = 3 [pid 303] close(3./strace-static-x86_64: Process 308 attached [pid 307] set_robust_list(0x55555715a660, 24 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] <... close resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... ioctl resumed>) = 0 [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 308] set_robust_list(0x55555715a660, 24 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 308] <... set_robust_list resumed>) = 0 [pid 307] <... prctl resumed>) = 0 [pid 304] <... ioctl resumed>) = 0 [pid 303] <... ioctl resumed>) = 0 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 307] setpgid(0, 0 [pid 304] <... ioctl resumed>) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 303] <... ioctl resumed>) = 0 [pid 307] <... setpgid resumed>) = 0 [pid 304] <... openat resumed>) = 4 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 304] <... ioctl resumed>) = 0 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 303] <... ioctl resumed>) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... ioctl resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 308] <... prctl resumed>) = 0 [pid 308] setpgid(0, 0) = 0 [pid 304] exit_group(0 [pid 303] <... openat resumed>) = 4 [pid 304] <... exit_group resumed>) = ? [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 308] <... openat resumed>) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 304] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 303] <... ioctl resumed>) = 0 [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... ioctl resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] write(3, "1000", 4 [pid 303] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 309 attached [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 307] write(3, "1000", 4 [pid 306] <... write resumed>) = 4 [pid 303] exit_group(0) = ? [pid 307] <... write resumed>) = 4 [pid 298] <... clone resumed>, child_tidptr=0x55555715a650) = 309 [pid 309] set_robust_list(0x55555715a660, 24 [pid 308] <... ioctl resumed>) = 0 [pid 307] close(3 [pid 306] close(3 [pid 307] <... close resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 303] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... ioctl resumed>) = 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 306] <... close resumed>) = 0 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 300] <... restart_syscall resumed>) = 0 [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 309] <... set_robust_list resumed>) = 0 [pid 308] <... openat resumed>) = 4 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... ioctl resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... openat resumed>) = 3 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 309] <... prctl resumed>) = 0 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 300] <... clone resumed>, child_tidptr=0x55555715a650) = 310 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 307] exit_group(0 [pid 308] <... ioctl resumed>) = 0 [pid 307] <... exit_group resumed>) = ? [pid 308] exit_group(0 [pid 306] <... ioctl resumed>) = 0 [pid 309] setpgid(0, 0) = 0 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 308] <... exit_group resumed>) = ? [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 306] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 309] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = 0 [pid 306] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 307] +++ exited with 0 +++ [pid 306] exit_group(0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] write(3, "1000", 4 [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] <... write resumed>) = 4 [pid 306] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 310 attached [pid 309] close(3 [pid 308] +++ exited with 0 +++ [pid 306] +++ exited with 0 +++ [pid 309] <... close resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] set_robust_list(0x55555715a660, 24 [pid 309] <... openat resumed>) = 3 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 309] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 297] <... restart_syscall resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55555715a650) = 311 [pid 309] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 309] exit_group(0) = ? [pid 309] +++ exited with 0 +++ [pid 299] <... clone resumed>, child_tidptr=0x55555715a650) = 312 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] <... clone resumed>, child_tidptr=0x55555715a650) = 313 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 311 attached [pid 310] <... set_robust_list resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55555715a650) = 314 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55555715a660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 313] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 313] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 313] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 310] <... prctl resumed>) = 0 [pid 313] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 310] setpgid(0, 0 [pid 313] <... ioctl resumed>) = 0 [pid 313] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 310] <... setpgid resumed>) = 0 [pid 311] set_robust_list(0x55555715a660, 24 [pid 313] <... ioctl resumed>) = 0 [pid 313] exit_group(0) = ? ./strace-static-x86_64: Process 314 attached [pid 313] +++ exited with 0 +++ [pid 311] <... set_robust_list resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x55555715a660, 24) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] <... openat resumed>) = 3 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 312] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 310] write(3, "1000", 4 [pid 297] <... clone resumed>, child_tidptr=0x55555715a650) = 315 [pid 312] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 312] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 312] exit_group(0) = ? [pid 310] <... write resumed>) = 4 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] close(3./strace-static-x86_64: Process 315 attached [pid 314] set_robust_list(0x55555715a660, 24 [pid 311] <... prctl resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 312] +++ exited with 0 +++ [pid 315] set_robust_list(0x55555715a660, 24) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 311] setpgid(0, 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 311] <... setpgid resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... restart_syscall resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 315] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 315] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 315] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 315] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 315] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 315] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... ioctl resumed>) = 0 [pid 315] <... ioctl resumed>) = 0 [pid 315] exit_group(0 [pid 311] <... openat resumed>) = 3 [pid 315] <... exit_group resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 314] <... set_robust_list resumed>) = 0 [pid 311] write(3, "1000", 4 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55555715a650) = 316 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 311] <... write resumed>) = 4 ./strace-static-x86_64: Process 316 attached [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 311] close(3 [pid 310] <... ioctl resumed>) = 0 [pid 316] set_robust_list(0x55555715a660, 24 [pid 310] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 311] <... close resumed>) = 0 [pid 316] <... set_robust_list resumed>) = 0 [pid 310] <... openat resumed>) = 4 [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 310] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 311] <... openat resumed>) = 3 [pid 310] <... ioctl resumed>) = 0 [pid 316] <... prctl resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 310] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 316] setpgid(0, 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 310] <... ioctl resumed>) = 0 [pid 316] <... setpgid resumed>) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] exit_group(0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... ioctl resumed>) = 0 [pid 310] <... exit_group resumed>) = ? [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] +++ exited with 0 +++ [pid 297] <... clone resumed>, child_tidptr=0x55555715a650) = 317 ./strace-static-x86_64: Process 317 attached [pid 316] <... openat resumed>) = 3 [pid 314] write(3, "1000", 4 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 317] set_robust_list(0x55555715a660, 24 [pid 316] write(3, "1000", 4 [pid 314] <... write resumed>) = 4 [pid 311] <... ioctl resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 317] <... set_robust_list resumed>) = 0 [pid 316] <... write resumed>) = 4 [pid 314] close(3 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 316] close(3 [pid 311] <... ioctl resumed>) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... close resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 300] <... clone resumed>, child_tidptr=0x55555715a650) = 318 [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 317] <... prctl resumed>) = 0 [pid 317] setpgid(0, 0) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = 3 [pid 311] exit_group(0 [pid 317] <... openat resumed>) = 3 [pid 316] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 314] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 311] <... exit_group resumed>) = ? [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 317] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 317] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 317] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 311] +++ exited with 0 +++ [pid 317] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [ 22.164813][ T28] audit: type=1400 audit(1713741744.447:66): avc: denied { execmem } for pid=295 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] <... openat resumed>) = 3 [pid 314] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 314] <... ioctl resumed>) = 0 [pid 317] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 296] <... restart_syscall resumed>) = 0 [pid 314] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 316] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 317] <... openat resumed>) = 4 [pid 314] <... ioctl resumed>) = 0 [pid 316] <... ioctl resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 317] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100./strace-static-x86_64: Process 318 attached ) = 0 [pid 317] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 316] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 314] <... openat resumed>) = 4 [pid 296] <... clone resumed>, child_tidptr=0x55555715a650) = 319 [pid 314] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 317] <... ioctl resumed>) = 0 [pid 316] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 316] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 314] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 316] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 317] exit_group(0 [pid 316] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 317] <... exit_group resumed>) = ? [pid 314] exit_group(0 [pid 318] set_robust_list(0x55555715a660, 24 [pid 316] <... openat resumed>) = 4 [pid 314] <... exit_group resumed>) = ? [pid 318] <... set_robust_list resumed>) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 318] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x55555715a660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 319] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 316] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 298] kill(-314, SIGKILL) = 0 [pid 298] kill(314, SIGKILL) = 0 [pid 299] kill(-316, SIGKILL) = 0 [pid 299] kill(316, SIGKILL) = 0 [ 122.320788][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 122.328011][ C0] rcu: 1-...0: (1 GPs behind) idle=8934/1/0x4000000000000000 softirq=1790/1790 fqs=2000 [ 122.338067][ C0] (detected by 0, t=10005 jiffies, g=437, q=2364 ncpus=2) [ 122.345099][ C0] Sending NMI from CPU 0 to CPUs 1: [ 122.350149][ C1] NMI backtrace for cpu 1 [ 122.350157][ C1] CPU: 1 PID: 317 Comm: syz-executor209 Not tainted 6.1.75-syzkaller-00037-gdcb09569bbff #0 [ 122.350174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 122.350182][ C1] RIP: 0010:__kasan_check_write+0x14/0x20 [ 122.350221][ C1] Code: 31 d2 e8 7f eb ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 5c eb ff ff <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 49 [ 122.350233][ C1] RSP: 0018:ffffc900001b0af0 EFLAGS: 00000097 [ 122.350247][ C1] RAX: 0000000000000001 RBX: 1ffff92000036160 RCX: ffffffff84ff5164 [ 122.350258][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900001b0b20 [ 122.350268][ C1] RBP: ffffc900001b0af0 R08: dffffc0000000000 R09: 0000000000000003 [ 122.350278][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 122.350289][ C1] R13: ffff88810d8dbd38 R14: 1ffff92000036164 R15: ffffc900001b0b20 [ 122.350301][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 122.350314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.350324][ C1] CR2: 00007fd75b8d5130 CR3: 0000000006c0f000 CR4: 00000000003506a0 [ 122.350337][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.350346][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.350355][ C1] Call Trace: [ 122.350360][ C1] [ 122.350366][ C1] ? show_regs+0x58/0x60 [ 122.350382][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 122.350400][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 122.350418][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350438][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350458][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 122.350475][ C1] ? nmi_handle+0xa7/0x280 [ 122.350490][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350510][ C1] ? default_do_nmi+0x69/0x160 [ 122.350525][ C1] ? exc_nmi+0xaf/0x120 [ 122.350538][ C1] ? end_repeat_nmi+0x16/0x31 [ 122.350553][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 122.350571][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350591][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350612][ C1] ? __kasan_check_write+0x14/0x20 [ 122.350632][ C1] [ 122.350636][ C1] [ 122.350641][ C1] _raw_spin_lock+0xa4/0x1b0 [ 122.350658][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 122.350678][ C1] ? snd_timer_user_tinterrupt+0x1170/0x1170 [ 122.350693][ C1] snd_timer_process_callbacks+0x26a/0x310 [ 122.350716][ C1] snd_timer_interrupt+0xe94/0x1050 [ 122.350739][ C1] snd_hrtimer_callback+0x1db/0x330 [ 122.350754][ C1] ? snd_hrtimer_stop+0xa0/0xa0 [ 122.350767][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 122.350791][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 122.350810][ C1] ? clockevents_program_event+0x236/0x300 [ 122.350825][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 122.350841][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 122.350865][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 122.350887][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 122.350903][ C1] [ 122.350907][ C1] [ 122.350912][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 122.350933][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 122.350953][ C1] Code: ef cd 86 e8 6c e6 bc fc 48 83 3d 54 97 ce 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 35 ff 4f fc 65 8b 05 16 15 03 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 122.350965][ C1] RSP: 0018:ffffc90000f579c8 EFLAGS: 00000206 [ 122.350977][ C1] RAX: 0000000000000001 RBX: ffff88810d8dbd38 RCX: dffffc0000000000 [ 122.350987][ C1] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000001 [ 122.350996][ C1] RBP: ffffc90000f579d8 R08: ffffffff83e43267 R09: ffffed10212d72ce [ 122.351007][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810d8dbcb0 [ 122.351017][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 122.351028][ C1] ? snd_timer_notify1+0x217/0x350 [ 122.351050][ C1] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 122.351068][ C1] snd_timer_stop1+0x7af/0x8f0 [ 122.351096][ C1] snd_timer_close_locked+0x22e/0x920 [ 122.351118][ C1] snd_timer_user_release+0x121/0x2c0 [ 122.351132][ C1] ? snd_timer_user_open+0x180/0x180 [ 122.351152][ C1] ? percpu_counter_add_batch+0x13d/0x160 [ 122.351172][ C1] ? snd_timer_user_open+0x180/0x180 [ 122.351193][ C1] __fput+0x3ab/0x870 [ 122.351215][ C1] ____fput+0x15/0x20 [ 122.351234][ C1] task_work_run+0x24d/0x2e0 [ 122.351255][ C1] ? task_work_cancel+0x2b0/0x2b0 [ 122.351276][ C1] ? __kasan_check_write+0x14/0x20 [ 122.351296][ C1] ? exit_task_namespaces+0xc2/0xd0 [ 122.351312][ C1] do_exit+0xbd5/0x2b80 [ 122.351329][ C1] ? put_task_struct+0x80/0x80 [ 122.351343][ C1] ? __kasan_check_write+0x14/0x20 [ 122.351363][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 122.351381][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 122.351400][ C1] ? zap_other_threads+0x29c/0x2d0 [ 122.351416][ C1] do_group_exit+0x21a/0x2d0 [ 122.351431][ C1] __x64_sys_exit_group+0x3f/0x40 [ 122.351446][ C1] do_syscall_64+0x3d/0xb0 [ 122.351459][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.351479][ C1] RIP: 0033:0x7fd75b859db9 [ 122.351490][ C1] Code: Unable to access opcode bytes at 0x7fd75b859d8f. [ 122.351497][ C1] RSP: 002b:00007ffc29471a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 122.351511][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd75b859db9 [ 122.351522][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 122.351531][ C1] RBP: 00007fd75b8d42b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 122.351541][ C1] R10: 00000000000000a0 R11: 0000000000000246 R12: 00007fd75b8d42b0 [ 122.351550][ C1] R13: 0000000000000000 R14: 00007fd75b8d4d20 R15: 00007fd75b82af50 [ 122.351563][ C1] [ 122.351569][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.421 msecs