./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1036053082 <...> Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. execve("./syz-executor1036053082", ["./syz-executor1036053082"], 0x7ffc3bd0d180 /* 10 vars */) = 0 brk(NULL) = 0x5555570f3000 brk(0x5555570f3d00) = 0x5555570f3d00 arch_prctl(ARCH_SET_FS, 0x5555570f3380) = 0 set_tid_address(0x5555570f3650) = 289 set_robust_list(0x5555570f3660, 24) = 0 rseq(0x5555570f3ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1036053082", 4096) = 28 getrandom("\x8a\xfb\x49\x51\xf8\xcb\x9c\x90", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555570f3d00 brk(0x555557114d00) = 0x555557114d00 brk(0x555557115000) = 0x555557115000 mprotect(0x7ff15bbe2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570f3650) = 290 ./strace-static-x86_64: Process 290 attached [pid 290] set_robust_list(0x5555570f3660, 24) = 0 [pid 290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] setpgid(0, 0) = 0 [pid 290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1000", 4) = 4 [pid 290] close(3) = 0 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 290] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 290] ioctl(5, SIOCGIFINDEX, {ifr_name="lo", ifr_ifindex=1}) = 0 [ 23.431966][ T24] audit: type=1400 audit(1692600452.529:66): avc: denied { execmem } for pid=289 comm="syz-executor103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.430043][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 123.438395][ C1] rcu: 1-....: (1 GPs behind) idle=0be/1/0x4000000000000000 softirq=1436/1437 fqs=4856 last_accelerate: 93a3/bab4 dyntick_enabled: 1 [ 123.456851][ C1] (t=10002 jiffies g=65 q=2147) [ 123.461611][ C1] NMI backtrace for cpu 1 [ 123.467189][ C1] CPU: 1 PID: 290 Comm: syz-executor103 Not tainted 5.10.187-syzkaller-00057-g8a427269c016 #0 [ 123.478921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 123.494819][ C1] Call Trace: [ 123.498368][ C1] [ 123.502309][ C1] dump_stack_lvl+0x1e2/0x24b [ 123.510498][ C1] ? panic+0x80b/0x80b [ 123.514640][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b [ 123.520611][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 123.527785][ C1] ? vprintk_func+0x19d/0x1e0 [ 123.533272][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 123.538040][ C1] ? printk+0xd1/0x111 [ 123.542029][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 123.550105][ C1] dump_stack+0x15/0x17 [ 123.554855][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 123.561017][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 123.567246][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 123.573804][ C1] rcu_dump_cpu_stacks+0x199/0x2b0 [ 123.579266][ C1] rcu_sched_clock_irq+0xf8a/0x1890 [ 123.584739][ C1] ? rcutree_dead_cpu+0x340/0x340 [ 123.590023][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 123.595135][ C1] update_process_times+0x198/0x200 [ 123.600509][ C1] tick_sched_timer+0x188/0x240 [ 123.607144][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 123.614649][ C1] __hrtimer_run_queues+0x3d7/0xa50 [ 123.619738][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 123.624846][ C1] ? clockevents_program_event+0x214/0x2c0 [ 123.630820][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 123.636761][ C1] hrtimer_interrupt+0x39a/0x8b0 [ 123.641554][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 123.647452][ C1] asm_call_irq_on_stack+0xf/0x20 [ 123.652814][ C1] [ 123.655628][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 123.661057][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 123.666906][ C1] RIP: 0010:kvm_wait+0xfc/0x150 [ 123.672280][ C1] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d e5 46 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d d6 46 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 123.692786][ C1] RSP: 0018:ffffc9000095eb00 EFLAGS: 00000246 [ 123.698699][ C1] RAX: 0000000000000003 RBX: 1ffff9200012bd64 RCX: ffffffff8150a984 [ 123.706500][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc9000095eb40 [ 123.714387][ C1] RBP: ffffc9000095ebb0 R08: dffffc0000000000 R09: ffffed1022c58a16 [ 123.722417][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 123.730410][ C1] R13: ffff8881162c50ac R14: 0000000000000003 R15: 0000000000000246 [ 123.738436][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 123.744475][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 123.750478][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 123.755519][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 123.762442][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 123.768783][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 123.775116][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 123.779988][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 123.785025][ C1] ? kvmalloc_node+0x82/0x130 [ 123.789607][ C1] ? __kasan_check_read+0x11/0x20 [ 123.794469][ C1] get_dist_table+0x207/0x2e0 [ 123.799329][ C1] netem_change+0x9d7/0x1fb0 [ 123.804014][ C1] ? __x64_sys_sendmsg+0x7b/0x90 [ 123.808958][ C1] ? do_syscall_64+0x34/0x70 [ 123.813372][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 123.819286][ C1] ? netem_destroy+0xc0/0xc0 [ 123.823700][ C1] ? hrtimer_init+0x33/0x160 [ 123.828233][ C1] netem_init+0x5b/0xb0 [ 123.832222][ C1] ? qdisc_peek_dequeued+0x230/0x230 [ 123.837715][ C1] qdisc_create+0x879/0x12d0 [ 123.842147][ C1] ? qdisc_notify+0x370/0x370 [ 123.846657][ C1] ? __nla_parse+0x43/0x60 [ 123.850884][ C1] tc_modify_qdisc+0x8a4/0x13f0 [ 123.855573][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 123.861435][ C1] ? mutex_trylock+0xa0/0xa0 [ 123.865941][ C1] ? ns_capable+0x89/0xe0 [ 123.870090][ C1] ? netlink_net_capable+0x125/0x160 [ 123.875208][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 123.881095][ C1] rtnetlink_rcv_msg+0x955/0xc50 [ 123.885856][ C1] ? __kasan_check_write+0x14/0x20 [ 123.891603][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 123.896265][ C1] ? rtnetlink_bind+0x80/0x80 [ 123.900780][ C1] ? __kasan_check_write+0x14/0x20 [ 123.905768][ C1] ? avc_node_replace+0x1e0/0x310 [ 123.910713][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 123.916342][ C1] ? avc_update_node+0x2f8/0x710 [ 123.921101][ C1] ? avc_denied+0x13f/0x1b0 [ 123.925600][ C1] ? avc_has_perm+0x275/0x400 [ 123.930148][ C1] ? avc_has_perm_noaudit+0x240/0x240 [ 123.935351][ C1] ? iov_iter_advance+0x258/0xb20 [ 123.940183][ C1] netlink_rcv_skb+0x1cf/0x410 [ 123.944779][ C1] ? rtnetlink_bind+0x80/0x80 [ 123.949353][ C1] ? netlink_ack+0xb30/0xb30 [ 123.953742][ C1] ? __netlink_lookup+0x37b/0x3a0 [ 123.958789][ C1] rtnetlink_rcv+0x1c/0x20 [ 123.962978][ C1] netlink_unicast+0x8df/0xac0 [ 123.967616][ C1] ? netlink_detachskb+0x90/0x90 [ 123.972440][ C1] ? security_netlink_send+0x7b/0xa0 [ 123.977476][ C1] netlink_sendmsg+0xa46/0xd00 [ 123.982074][ C1] ? netlink_getsockopt+0x5c0/0x5c0 [ 123.987511][ C1] ? security_socket_sendmsg+0x82/0xb0 [ 123.992880][ C1] ? netlink_getsockopt+0x5c0/0x5c0 [ 123.997915][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 124.002506][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 124.007527][ C1] ? import_iovec+0xe5/0x120 [ 124.011904][ C1] ___sys_sendmsg+0x252/0x2e0 [ 124.016416][ C1] ? __sys_sendmsg+0x280/0x280 [ 124.021173][ C1] ? finish_task_switch+0x130/0x5a0 [ 124.026288][ C1] ? __schedule+0xbee/0x1330 [ 124.030823][ C1] ? __kasan_check_write+0x14/0x20 [ 124.035907][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 124.041244][ C1] ? __kasan_check_read+0x11/0x20 [ 124.046097][ C1] ? __fdget+0x179/0x240 [ 124.050156][ C1] __se_sys_sendmsg+0x1b1/0x280 [ 124.054871][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 124.059968][ C1] ? __x64_sys_sendmsg+0x90/0x90 [ 124.064751][ C1] ? fpu__clear_all+0x20/0x20 [ 124.069262][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 124.073848][ C1] do_syscall_64+0x34/0x70 [ 124.078192][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 124.084180][ C1] RIP: 0033:0x7ff15bb6ecb9 [ 124.088504][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.108551][ C1] RSP: 002b:00007ffed816d9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.116993][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff15bb6ecb9 [ 124.124869][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 124.132818][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 124.140603][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.148414][ C1] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 264.980498][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor103:290] [ 264.988903][ C1] Modules linked in: [ 264.992645][ C1] CPU: 1 PID: 290 Comm: syz-executor103 Not tainted 5.10.187-syzkaller-00057-g8a427269c016 #0 [ 265.003047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 265.012972][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 265.019899][ C1] Code: 85 ba 01 00 00 c6 03 00 48 8b 44 24 28 42 0f b6 04 30 84 c0 0f 85 bf 01 00 00 48 8b 04 24 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 50 43 0f b6 44 35 00 84 c0 75 32 41 80 3c 24 00 75 e9 4c [ 265.040233][ C1] RSP: 0018:ffffc9000095ebc0 EFLAGS: 00000206 [ 265.046126][ C1] RAX: 0000000000000000 RBX: 00000000ffffe94b RCX: ffffffff8150a984 [ 265.054039][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc9000095eb40 [ 265.061836][ C1] RBP: ffffc9000095ecb0 R08: dffffc0000000000 R09: ffffed1022c58a16 [ 265.069677][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881162c50ac [ 265.077587][ C1] R13: 1ffff11022c58a15 R14: dffffc0000000000 R15: ffff88823ff525c0 [ 265.085391][ C1] FS: 00005555570f3380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.094177][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.100593][ C1] CR2: 0000000000458e30 CR3: 000000011e0ac000 CR4: 00000000003506a0 [ 265.108563][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.116446][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.124262][ C1] Call Trace: [ 265.127381][ C1] [ 265.130079][ C1] ? show_regs+0x58/0x60 [ 265.134151][ C1] ? watchdog_timer_fn+0x471/0x590 [ 265.139093][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.144362][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 265.149677][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 265.154888][ C1] ? clockevents_program_event+0x214/0x2c0 [ 265.160510][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 265.166536][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 265.171644][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.177733][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 265.182816][ C1] [ 265.185543][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 265.191481][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 265.197527][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 265.204204][ C1] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 265.210789][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 265.217204][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.221964][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.227342][ C1] ? kvmalloc_node+0x82/0x130 [ 265.231862][ C1] ? __kasan_check_read+0x11/0x20 [ 265.236714][ C1] get_dist_table+0x207/0x2e0 [ 265.241311][ C1] netem_change+0x9d7/0x1fb0 [ 265.245777][ C1] ? __x64_sys_sendmsg+0x7b/0x90 [ 265.250613][ C1] ? do_syscall_64+0x34/0x70 [ 265.255019][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 265.261023][ C1] ? netem_destroy+0xc0/0xc0 [ 265.265466][ C1] ? hrtimer_init+0x33/0x160 [ 265.269881][ C1] netem_init+0x5b/0xb0 [ 265.273872][ C1] ? qdisc_peek_dequeued+0x230/0x230 [ 265.279766][ C1] qdisc_create+0x879/0x12d0 [ 265.284202][ C1] ? qdisc_notify+0x370/0x370 [ 265.288897][ C1] ? __nla_parse+0x43/0x60 [ 265.293156][ C1] tc_modify_qdisc+0x8a4/0x13f0 [ 265.298339][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 265.304203][ C1] ? mutex_trylock+0xa0/0xa0 [ 265.308646][ C1] ? ns_capable+0x89/0xe0 [ 265.313342][ C1] ? netlink_net_capable+0x125/0x160 [ 265.318570][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 265.324644][ C1] rtnetlink_rcv_msg+0x955/0xc50 [ 265.329789][ C1] ? __kasan_check_write+0x14/0x20 [ 265.334738][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 265.339415][ C1] ? rtnetlink_bind+0x80/0x80 [ 265.344215][ C1] ? __kasan_check_write+0x14/0x20 [ 265.349116][ C1] ? avc_node_replace+0x1e0/0x310 [ 265.353979][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 265.359605][ C1] ? avc_update_node+0x2f8/0x710 [ 265.364570][ C1] ? avc_denied+0x13f/0x1b0 [ 265.368906][ C1] ? avc_has_perm+0x275/0x400 [ 265.373433][ C1] ? avc_has_perm_noaudit+0x240/0x240 [ 265.378612][ C1] ? iov_iter_advance+0x258/0xb20 [ 265.383592][ C1] netlink_rcv_skb+0x1cf/0x410 [ 265.388194][ C1] ? rtnetlink_bind+0x80/0x80 [ 265.392686][ C1] ? netlink_ack+0xb30/0xb30 [ 265.397232][ C1] ? __netlink_lookup+0x37b/0x3a0 [ 265.402587][ C1] rtnetlink_rcv+0x1c/0x20 [ 265.406764][ C1] netlink_unicast+0x8df/0xac0 [ 265.411650][ C1] ? netlink_detachskb+0x90/0x90 [ 265.416393][ C1] ? security_netlink_send+0x7b/0xa0 [ 265.422726][ C1] netlink_sendmsg+0xa46/0xd00 [ 265.427324][ C1] ? netlink_getsockopt+0x5c0/0x5c0 [ 265.432359][ C1] ? security_socket_sendmsg+0x82/0xb0 [ 265.437741][ C1] ? netlink_getsockopt+0x5c0/0x5c0 [ 265.442777][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 265.447441][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 265.452449][ C1] ? import_iovec+0xe5/0x120 [ 265.456943][ C1] ___sys_sendmsg+0x252/0x2e0 [ 265.461567][ C1] ? __sys_sendmsg+0x280/0x280 [ 265.466692][ C1] ? finish_task_switch+0x130/0x5a0 [ 265.471696][ C1] ? __schedule+0xbee/0x1330 [ 265.476145][ C1] ? __kasan_check_write+0x14/0x20 [ 265.481077][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 265.486241][ C1] ? __kasan_check_read+0x11/0x20 [ 265.491288][ C1] ? __fdget+0x179/0x240 [ 265.495372][ C1] __se_sys_sendmsg+0x1b1/0x280 [ 265.500056][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 265.505490][ C1] ? __x64_sys_sendmsg+0x90/0x90 [ 265.510487][ C1] ? fpu__clear_all+0x20/0x20 [ 265.515371][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 265.520380][ C1] do_syscall_64+0x34/0x70 [ 265.524812][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 265.530547][ C1] RIP: 0033:0x7ff15bb6ecb9 [ 265.534885][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 265.555511][ C1] RSP: 002b:00007ffed816d9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.564379][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff15bb6ecb9 [ 265.572694][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 265.580608][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 265.588678][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.596478][ C1] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001