./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor989505973 <...> Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. execve("./syz-executor989505973", ["./syz-executor989505973"], 0x7ffe6a65e700 /* 10 vars */) = 0 brk(NULL) = 0x55555f36a000 brk(0x55555f36ad00) = 0x55555f36ad00 arch_prctl(ARCH_SET_FS, 0x55555f36a380) = 0 set_tid_address(0x55555f36a650) = 5086 set_robust_list(0x55555f36a660, 24) = 0 rseq(0x55555f36aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor989505973", 4096) = 27 getrandom("\x85\xd9\x15\xcf\x16\xfd\xf5\x0f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555f36ad00 brk(0x55555f38bd00) = 0x55555f38bd00 brk(0x55555f38c000) = 0x55555f38c000 mprotect(0x7f0d18a2c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 chmod("/dev/raw-gadget", 0666) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x55555f36a650) = 5087 [pid 5087] set_robust_list(0x55555f36a660, 24) = 0 [pid 5087] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setsid() = 1 [pid 5087] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5087] unshare(CLONE_NEWNS) = 0 [pid 5087] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5087] unshare(CLONE_NEWIPC) = 0 [pid 5087] unshare(CLONE_NEWCGROUP) = 0 [pid 5087] unshare(CLONE_NEWUTS) = 0 [pid 5087] unshare(CLONE_SYSVSEM) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "16777216", 8) = 8 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "536870912", 9) = 9 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "8192", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5087] close(3) = 0 [pid 5087] getpid() = 1 [pid 5087] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5087] kill(-2, SIGKILL) = 0 [pid 5087] kill(2, SIGKILL) = 0 [ 156.162809][ T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2685 jiffies s: 549 root: 0x1/. [ 156.175347][ T18] rcu: blocking rcu_node structures (internal RCU debug): [ 156.182506][ T18] Sending NMI from CPU 1 to CPUs 0: [ 156.187796][ C0] NMI backtrace for cpu 0 [ 156.187810][ C0] CPU: 0 PID: 5096 Comm: syz-executor989 Not tainted 6.9.0-rc6-syzkaller-01518-g7824463aaea9 #0 [ 156.187833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 156.187844][ C0] RIP: 0010:lock_is_held_type+0x82/0x190 [ 156.187897][ C0] Code: 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 4c 8b 24 24 fa 48 c7 c7 e0 c5 ca 8b e8 55 1b 00 00 65 ff 05 2e c9 7f 74 <41> 83 bd d0 0a 00 00 00 7e 47 4c 89 eb 48 81 c3 d8 0a 00 00 31 ed [ 156.187911][ C0] RSP: 0018:ffffc90000007c48 EFLAGS: 00000002 [ 156.187926][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888026f3bc00 [ 156.187938][ C0] RDX: ffff888026f3bc00 RSI: ffffffff8bcac5e0 RDI: ffffffff8c1f8600 [ 156.187951][ C0] RBP: dffffc0000000000 R08: ffffffff898bd98b R09: fffff52000000f80 [ 156.187964][ C0] R10: dffffc0000000000 R11: fffff52000000f80 R12: 0000000000000046 [ 156.187976][ C0] R13: ffff888026f3bc00 R14: 00000000ffffffff R15: ffff88802a206300 [ 156.187989][ C0] FS: 000055555f36a380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 156.188004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.188016][ C0] CR2: 00007f0d1896f080 CR3: 000000002d456000 CR4: 00000000003506f0 [ 156.188031][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.188041][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.188052][ C0] Call Trace: [ 156.188060][ C0] [ 156.188067][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 156.188088][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 156.188109][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 156.188136][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 156.188158][ C0] ? nmi_handle+0x14f/0x5a0 [ 156.188175][ C0] ? nmi_handle+0x2a/0x5a0 [ 156.188194][ C0] ? lock_is_held_type+0x82/0x190 [ 156.188217][ C0] ? default_do_nmi+0x63/0x160 [ 156.188236][ C0] ? exc_nmi+0x123/0x1f0 [ 156.188254][ C0] ? end_repeat_nmi+0xf/0x53 [ 156.188279][ C0] ? advance_sched+0xbb/0xca0 [ 156.188303][ C0] ? lock_is_held_type+0x82/0x190 [ 156.188326][ C0] ? lock_is_held_type+0x82/0x190 [ 156.188350][ C0] ? lock_is_held_type+0x82/0x190 [ 156.188373][ C0] [ 156.188378][ C0] [ 156.188385][ C0] ? __pfx_advance_sched+0x10/0x10 [ 156.188402][ C0] advance_sched+0xcd/0xca0 [ 156.188420][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.188447][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.188478][ C0] ? __pfx_advance_sched+0x10/0x10 [ 156.188494][ C0] __hrtimer_run_queues+0x5a5/0xd50 [ 156.188527][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 156.188551][ C0] ? ktime_get_update_offsets_now+0x411/0x430 [ 156.188573][ C0] hrtimer_interrupt+0x396/0x990 [ 156.188612][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 156.188631][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 156.188655][ C0] [ 156.188660][ C0] [ 156.188666][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.188689][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 156.188716][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 97 6d f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 53 45 d8 f5 65 8b 05 f4 46 76 74 85 c0 74 43 48 c7 04 24 0e 36 [ 156.188729][ C0] RSP: 0018:ffffc900036a6b40 EFLAGS: 00000206 [ 156.188749][ C0] RAX: 9545a3c155264000 RBX: 1ffff920006d4d6c RCX: ffffffff8173197a [ 156.188762][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcab900 RDI: 0000000000000001 [ 156.188774][ C0] RBP: ffffc900036a6bd0 R08: ffffffff92f425e7 R09: 1ffffffff25e84bc [ 156.188791][ C0] R10: dffffc0000000000 R11: fffffbfff25e84bd R12: dffffc0000000000 [ 156.188804][ C0] R13: 1ffff920006d4d68 R14: ffffc900036a6b60 R15: 0000000000000246 [ 156.188820][ C0] ? mark_lock+0x9a/0x350 [ 156.188844][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.188876][ C0] taprio_change+0x339b/0x42d0 [ 156.188912][ C0] ? __pfx_taprio_change+0x10/0x10 [ 156.188937][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 156.188959][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 156.188979][ C0] ? on_each_cpu_cond_mask+0x62/0x80 [ 156.189016][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 156.189044][ C0] taprio_init+0x9da/0xc80 [ 156.189069][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 156.189092][ C0] ? __sys_sendmsg+0x2b0/0x3a0 [ 156.189115][ C0] ? do_syscall_64+0xf5/0x240 [ 156.189146][ C0] ? __pfx_taprio_init+0x10/0x10 [ 156.189174][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 156.189194][ C0] ? qdisc_lookup+0x350/0x6b0 [ 156.189214][ C0] ? __pfx_taprio_init+0x10/0x10 [ 156.189240][ C0] qdisc_create+0x9d4/0x11a0 [ 156.189267][ C0] ? __pfx_qdisc_create+0x10/0x10 [ 156.189294][ C0] tc_modify_qdisc+0xa26/0x1e40 [ 156.189324][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 156.189359][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 156.189380][ C0] rtnetlink_rcv_msg+0x89b/0x10d0 [ 156.189400][ C0] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 156.189419][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.189439][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.189459][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.189480][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 156.189498][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 156.189522][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 156.189539][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 156.189562][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 156.189586][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 156.189608][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 156.189633][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 156.189664][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 156.189693][ C0] ? ref_tracker_free+0x643/0x7e0 [ 156.189715][ C0] netlink_rcv_skb+0x1e3/0x430 [ 156.189749][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.189768][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.189804][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.189832][ C0] netlink_unicast+0x7ea/0x980 [ 156.189859][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 156.189881][ C0] ? __virt_addr_valid+0x44e/0x520 [ 156.189908][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 156.189934][ C0] ? __check_object_size+0x4bc/0xa00 [ 156.189955][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 156.189978][ C0] netlink_sendmsg+0x8e1/0xcb0 [ 156.190011][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.190038][ C0] ? __import_iovec+0x536/0x820 [ 156.190061][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 156.190081][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.190104][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 156.190130][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.190155][ C0] __sock_sendmsg+0x221/0x270 [ 156.190174][ C0] ____sys_sendmsg+0x525/0x7d0 [ 156.190203][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.190229][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 156.190260][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 156.190285][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.190316][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.190340][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.190366][ C0] ? ptrace_notify+0x279/0x380 [ 156.190388][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.190407][ C0] ? do_syscall_64+0x102/0x240 [ 156.190436][ C0] do_syscall_64+0xf5/0x240 [ 156.190462][ C0] ? clear_bhb_loop+0x35/0x90 [ 156.190485][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.190506][ C0] RIP: 0033:0x7f0d189b4419 [ 156.190522][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 156.190535][ C0] RSP: 002b:00007ffd65d9cb48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.190551][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d189b4419 [ 156.190563][ C0] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 156.190573][ C0] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000100000000 [ 156.190584][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd65d9cba0 [ 156.190595][ C0] R13: 0000000000000001 R14: 00007ffd65d9cba0 R15: 0000000000000003 [ 156.190614][ C0] [ 156.190622][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.825 msecs