./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1294986679 <...> Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. execve("./syz-executor1294986679", ["./syz-executor1294986679"], 0x7ffea750a230 /* 10 vars */) = 0 brk(NULL) = 0x555556766000 brk(0x555556766d00) = 0x555556766d00 arch_prctl(ARCH_SET_FS, 0x555556766380) = 0 set_tid_address(0x555556766650) = 297 set_robust_list(0x555556766660, 24) = 0 rseq(0x555556766ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1294986679", 4096) = 28 getrandom("\x5d\xdf\x35\x0a\xdf\x68\x9c\xc6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556766d00 brk(0x555556787d00) = 0x555556787d00 brk(0x555556788000) = 0x555556788000 mprotect(0x7f72c79a9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 298 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 299 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 300 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 301 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 302 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555556766660, 24) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x555556766660, 24) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x555556766650) = 303 [pid 302] <... clone resumed>, child_tidptr=0x555556766650) = 304 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555556766660, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 304] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 304] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 304] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 304] exit_group(0) = ? [pid 304] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 305 ./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x555556766660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 305] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 305] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 305] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 305] exit_group(0) = ? [pid 305] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 306 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x555556766660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 306] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 306] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 306] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 306] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 306] exit_group(0) = ? [pid 306] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 303 attached ./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 300 attached ./strace-static-x86_64: Process 299 attached [pid 303] set_robust_list(0x555556766660, 24 [pid 301] set_robust_list(0x555556766660, 24 [pid 300] set_robust_list(0x555556766660, 24 [pid 299] set_robust_list(0x555556766660, 24 [pid 302] <... restart_syscall resumed>) = 0 [pid 303] <... set_robust_list resumed>) = 0 [pid 301] <... set_robust_list resumed>) = 0 [pid 300] <... set_robust_list resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... prctl resumed>) = 0 [pid 303] setpgid(0, 0 [pid 302] <... clone resumed>, child_tidptr=0x555556766650) = 307 [pid 303] <... setpgid resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3 [pid 301] <... clone resumed>, child_tidptr=0x555556766650) = 308 [pid 300] <... clone resumed>, child_tidptr=0x555556766650) = 309 [pid 299] <... clone resumed>, child_tidptr=0x555556766650) = 310 [pid 303] <... close resumed>) = 0 ./strace-static-x86_64: Process 310 attached ./strace-static-x86_64: Process 307 attached [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY./strace-static-x86_64: Process 308 attached [pid 310] set_robust_list(0x555556766660, 24) = 0 [pid 307] set_robust_list(0x555556766660, 24 [pid 308] set_robust_list(0x555556766660, 24 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... set_robust_list resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 303] <... openat resumed>) = 3 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440) = 0 [pid 303] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 303] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 310] <... prctl resumed>) = 0 [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 303] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 303] exit_group(0) = ? ./strace-static-x86_64: Process 309 attached [pid 310] setpgid(0, 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] +++ exited with 0 +++ [pid 310] <... setpgid resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] set_robust_list(0x555556766660, 24 [pid 308] <... prctl resumed>) = 0 [pid 307] <... prctl resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] <... openat resumed>) = 3 [pid 309] <... set_robust_list resumed>) = 0 [pid 308] setpgid(0, 0 [pid 307] setpgid(0, 0 [pid 310] write(3, "1000", 4 [pid 307] <... setpgid resumed>) = 0 [pid 308] <... setpgid resumed>) = 0 [pid 310] <... write resumed>) = 4 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 298] <... clone resumed>, child_tidptr=0x555556766650) = 311 [pid 310] <... ioctl resumed>) = 0 [pid 310] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 310] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 4 [pid 310] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100) = 0 [pid 310] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 310] exit_group(0) = ? ./strace-static-x86_64: Process 311 attached [pid 309] <... prctl resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] set_robust_list(0x555556766660, 24 [pid 310] +++ exited with 0 +++ [pid 309] setpgid(0, 0 [pid 308] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] write(3, "1000", 4 [pid 307] write(3, "1000", 4 [pid 309] <... setpgid resumed>) = 0 [pid 308] <... write resumed>) = 4 [pid 307] <... write resumed>) = 4 [pid 311] <... set_robust_list resumed>) = 0 [pid 308] close(3 [pid 307] close(3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 ./strace-static-x86_64: Process 312 attached [pid 311] <... prctl resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 312] set_robust_list(0x555556766660, 24 [pid 307] <... openat resumed>) = 3 [pid 299] <... clone resumed>, child_tidptr=0x555556766650) = 312 [pid 308] <... openat resumed>) = 3 [pid 312] <... set_robust_list resumed>) = 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 307] <... ioctl resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 312] <... prctl resumed>) = 0 [pid 311] setpgid(0, 0 [pid 308] <... ioctl resumed>) = 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] <... setpgid resumed>) = 0 [pid 309] write(3, "1000", 4 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 307] <... ioctl resumed>) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... write resumed>) = 4 [pid 308] <... ioctl resumed>) = 0 [pid 307] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 312] <... openat resumed>) = 3 [pid 311] <... openat resumed>) = 3 [pid 309] close(3 [pid 308] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 307] <... ioctl resumed>) = 0 [pid 311] write(3, "1000", 4 [pid 309] <... close resumed>) = 0 [pid 308] <... ioctl resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 311] <... write resumed>) = 4 [pid 309] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 308] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 307] <... openat resumed>) = 4 [pid 311] close(3 [pid 309] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 4 [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 312] write(3, "1000", 4 [pid 311] <... close resumed>) = 0 [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 307] <... ioctl resumed>) = 0 [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 309] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = 0 [pid 307] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 312] <... write resumed>) = 4 [pid 311] <... openat resumed>) = 3 [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 308] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 307] <... ioctl resumed>) = 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 309] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = 0 [pid 307] exit_group(0 [pid 312] close(3 [pid 311] <... ioctl resumed>) = 0 [pid 309] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 308] exit_group(0 [pid 307] <... exit_group resumed>) = ? [pid 312] <... close resumed>) = 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 309] <... ioctl resumed>) = 0 [pid 308] <... exit_group resumed>) = ? [pid 312] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 311] <... ioctl resumed>) = 0 [pid 311] ioctl(3, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 307] +++ exited with 0 +++ [pid 311] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 312] <... ioctl resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 308] +++ exited with 0 +++ [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_PARAMS, 0x20000440 [pid 311] <... openat resumed>) = 4 [pid 309] <... openat resumed>) = 4 [pid 302] <... restart_syscall resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 309] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 312] ioctl(3, SNDRV_TIMER_IOCTL_START, 0 [pid 311] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 312] <... ioctl resumed>) = 0 [pid 311] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 309] ioctl(4, SNDRV_TIMER_IOCTL_START, 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY [pid 311] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... openat resumed>) = 4 [pid 309] exit_group(0 [pid 312] ioctl(4, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 309] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 314 attached ./strace-static-x86_64: Process 313 attached [pid 312] <... ioctl resumed>) = 0 [pid 311] exit_group(0 [pid 309] +++ exited with 0 +++ [pid 301] <... clone resumed>, child_tidptr=0x555556766650) = 313 [pid 314] set_robust_list(0x555556766660, 24 [pid 313] set_robust_list(0x555556766660, 24 [pid 311] <... exit_group resumed>) = ? [pid 302] <... clone resumed>, child_tidptr=0x555556766650) = 314 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] <... set_robust_list resumed>) = 0 [pid 312] ioctl(4, SNDRV_TIMER_IOCTL_START, 0) = 0 [pid 312] exit_group(0) = ? [pid 313] <... set_robust_list resumed>) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] openat(AT_FDCWD, "/dev/snd/timer", O_RDONLY) = 3 [ 24.522142][ T28] audit: type=1400 audit(1713056517.795:66): avc: denied { execmem } for pid=297 comm="syz-executor129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 313] ioctl(3, SNDRV_TIMER_IOCTL_SELECT, 0x20000100 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556766650) = 315 ./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x555556766660, 24) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [ 124.600077][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 124.606875][ C0] rcu: 1-...0: (1 ticks this GP) idle=8224/1/0x4000000000000000 softirq=2100/2100 fqs=2000 [ 124.616759][ C0] (detected by 0, t=10005 jiffies, g=573, q=111 ncpus=2) [ 124.623699][ C0] Sending NMI from CPU 0 to CPUs 1: [ 124.628768][ C1] NMI backtrace for cpu 1 [ 124.628784][ C1] CPU: 1 PID: 311 Comm: syz-executor129 Not tainted 6.1.75-syzkaller-00022-gcfa154389a65 #0 [ 124.628806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 124.628817][ C1] RIP: 0010:snd_hrtimer_callback+0x199/0x330 [ 124.628908][ C1] Code: 35 9c 39 99 03 4c 0f af 75 b8 31 ff 4c 89 f6 e8 2d 8b 90 fd 4d 85 f6 0f 88 24 01 00 00 e8 df 86 90 fd 48 89 d8 48 99 49 f7 fe <48> 01 45 b8 49 be 00 00 00 00 00 fc ff df eb 0f e8 c2 86 90 fd e9 [ 124.628923][ C1] RSP: 0018:ffffc900001b0cd8 EFLAGS: 00000046 [ 124.628939][ C1] RAX: 00000017476392b7 RBX: 00000017476392b7 RCX: ffff8881096e9440 [ 124.628953][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 124.628964][ C1] RBP: ffffc900001b0d50 R08: ffffffff83e4d733 R09: 0000000000000003 [ 124.628977][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff11021af3516 [ 124.628991][ C1] R13: ffff88810d79a8b8 R14: 0000000000000001 R15: 1ffff11022348060 [ 124.629004][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 124.629019][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.629032][ C1] CR2: 00007ffca49c22d8 CR3: 0000000006c0f000 CR4: 00000000003506a0 [ 124.629048][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.629059][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.629070][ C1] Call Trace: [ 124.629076][ C1] [ 124.629083][ C1] ? show_regs+0x58/0x60 [ 124.629103][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 124.629126][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 124.629150][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629167][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629184][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 124.629206][ C1] ? nmi_handle+0xa7/0x280 [ 124.629225][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629243][ C1] ? default_do_nmi+0x69/0x160 [ 124.629262][ C1] ? exc_nmi+0xaf/0x120 [ 124.629279][ C1] ? end_repeat_nmi+0x16/0x31 [ 124.629297][ C1] ? snd_hrtimer_callback+0x183/0x330 [ 124.629315][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629332][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629350][ C1] ? snd_hrtimer_callback+0x199/0x330 [ 124.629374][ C1] [ 124.629379][ C1] [ 124.629386][ C1] ? snd_hrtimer_stop+0xa0/0xa0 [ 124.629403][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 124.629436][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 124.629462][ C1] ? clockevents_program_event+0x236/0x300 [ 124.629480][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 124.629500][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 124.629532][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 124.629562][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 124.629582][ C1] [ 124.629587][ C1] [ 124.629593][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 124.629622][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 124.629648][ C1] Code: ef cd 86 e8 6c f6 bc fc 48 83 3d 54 a7 ce 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 35 0f 50 fc 65 8b 05 16 25 03 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 124.629662][ C1] RSP: 0018:ffffc90000ef79c8 EFLAGS: 00000206 [ 124.629677][ C1] RAX: 0000000000000001 RBX: ffff88810d79a938 RCX: dffffc0000000000 [ 124.629689][ C1] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000001 [ 124.629700][ C1] RBP: ffffc90000ef79d8 R08: ffffffff83e42667 R09: ffffed102130828e [ 124.629714][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810d79a8b0 [ 124.629726][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 124.629740][ C1] ? snd_timer_notify1+0x217/0x350 [ 124.629770][ C1] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 124.629795][ C1] snd_timer_stop1+0x7af/0x8f0 [ 124.629825][ C1] snd_timer_close_locked+0x22e/0x920 [ 124.629854][ C1] snd_timer_user_release+0x121/0x2c0 [ 124.629873][ C1] ? snd_timer_user_open+0x180/0x180 [ 124.629901][ C1] ? percpu_counter_add_batch+0x13d/0x160 [ 124.629928][ C1] ? snd_timer_user_open+0x180/0x180 [ 124.629955][ C1] __fput+0x3ab/0x870 [ 124.629985][ C1] ____fput+0x15/0x20 [ 124.630010][ C1] task_work_run+0x24d/0x2e0 [ 124.630040][ C1] ? task_work_cancel+0x2b0/0x2b0 [ 124.630068][ C1] ? __kasan_check_write+0x14/0x20 [ 124.630095][ C1] ? exit_task_namespaces+0xc2/0xd0 [ 124.630115][ C1] do_exit+0xbd5/0x2b80 [ 124.630137][ C1] ? put_task_struct+0x80/0x80 [ 124.630155][ C1] ? __kasan_check_write+0x14/0x20 [ 124.630182][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 124.630205][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 124.630230][ C1] ? zap_other_threads+0x29c/0x2d0 [ 124.630250][ C1] do_group_exit+0x21a/0x2d0 [ 124.630269][ C1] __x64_sys_exit_group+0x3f/0x40 [ 124.630288][ C1] do_syscall_64+0x3d/0xb0 [ 124.630304][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.630330][ C1] RIP: 0033:0x7f72c7934db9 [ 124.630344][ C1] Code: Unable to access opcode bytes at 0x7f72c7934d8f. [ 124.630352][ C1] RSP: 002b:00007ffca49c2378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 124.630375][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f72c7934db9 [ 124.630388][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 124.630398][ C1] RBP: 00007f72c79af2b0 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 124.630411][ C1] R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f72c79af2b0 [ 124.630422][ C1] R13: 0000000000000000 R14: 00007f72c79afd20 R15: 00007f72c7905f50 [ 124.630439][ C1] [ 124.630445][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.679 msecs