./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor542989637 <...> Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. execve("./syz-executor542989637", ["./syz-executor542989637"], 0x7fff1cee9040 /* 10 vars */) = 0 brk(NULL) = 0x5555566ee000 brk(0x5555566eec40) = 0x5555566eec40 arch_prctl(ARCH_SET_FS, 0x5555566ee300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor542989637", 4096) = 27 brk(0x55555670fc40) = 0x55555670fc40 brk(0x555556710000) = 0x555556710000 mprotect(0x7fdbd6eb6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3610 attached , child_tidptr=0x5555566ee5d0) = 3610 [pid 3610] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3610] setsid() = 1 [pid 3610] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3610] unshare(CLONE_NEWNS) = 0 [pid 3610] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3610] unshare(CLONE_NEWIPC) = 0 [pid 3610] unshare(CLONE_NEWCGROUP) = 0 [pid 3610] unshare(CLONE_NEWUTS) = 0 [pid 3610] unshare(CLONE_SYSVSEM) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "16777216", 8) = 8 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "536870912", 9) = 9 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "8192", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3610] close(3) = 0 [pid 3610] getpid() = 1 [pid 3610] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< b8 01 00 00 00 5d 41 5c c3 44 89 c2 e8 03 f0 ff ff 5b 83 f0 01 [ 157.725646][ C1] RSP: 0018:ffffc900003f8cc0 EFLAGS: 00000046 [ 157.725661][ C1] RAX: fffffbfff1b75a53 RBX: fffffbfff1b75a53 RCX: ffffffff815d85e8 [ 157.725674][ C1] RDX: fffffbfff1b75a53 RSI: 0000000000000008 RDI: ffffffff8dbad290 [ 157.725687][ C1] RBP: fffffbfff1b75a52 R08: 0000000000000000 R09: ffffffff8dbad297 [ 157.725699][ C1] R10: fffffbfff1b75a52 R11: 0000000000000001 R12: 0000000000000002 [ 157.725710][ C1] R13: 0000000000000000 R14: ffffffff8bd84020 R15: 0000000000000000 [ 157.725722][ C1] FS: 00005555566ee300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 157.725741][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.725753][ C1] CR2: 0000000020000600 CR3: 0000000017741000 CR4: 00000000003506e0 [ 157.725765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.725776][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.725788][ C1] Call Trace: [ 157.725795][ C1] [ 157.725802][ C1] lock_acquire+0xb8/0x570 [ 157.725826][ C1] ? lock_release+0x780/0x780 [ 157.725847][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 157.725868][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 157.725885][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 157.725902][ C1] advance_sched+0x4a5/0x9a0 [ 157.725933][ C1] ? advance_sched+0x477/0x9a0 [ 157.725955][ C1] ? taprio_dequeue_soft+0xa20/0xa20 [ 157.725976][ C1] __hrtimer_run_queues+0x609/0xe50 [ 157.725997][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 157.726016][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 157.726039][ C1] hrtimer_interrupt+0x31c/0x790 [ 157.726060][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 157.726079][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 157.726102][ C1] [ 157.726106][ C1] [ 157.726111][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.726135][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 157.726158][ C1] Code: 74 24 10 e8 4a cc e3 f7 48 89 ef e8 52 4d e4 f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 b3 56 d7 f7 65 8b 05 ac bd 88 76 85 c0 74 0a 5b 5d c3 e8 50 42 [ 157.726175][ C1] RSP: 0018:ffffc900031271e0 EFLAGS: 00000206 [ 157.726189][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff20d87b6 [ 157.726201][ C1] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000001 [ 157.726212][ C1] RBP: ffff88807d6ceae8 R08: 0000000000000001 R09: ffffffff906799c7 [ 157.726224][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 157.726235][ C1] R13: ffff88807d6ceae8 R14: 0000000000000246 R15: ffff88807d6ce800 [ 157.726250][ C1] taprio_change+0x2eab/0x4050 [ 157.726272][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 157.726293][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 157.726314][ C1] ? taprio_peek_soft+0x640/0x640 [ 157.726335][ C1] ? ref_tracker_free+0x6b0/0x6b0 [ 157.726353][ C1] ? rtnetlink_rcv_msg+0x43a/0xc90 [ 157.726376][ C1] ? netlink_rcv_skb+0x153/0x420 [ 157.726393][ C1] ? netlink_unicast+0x543/0x7f0 [ 157.726410][ C1] ? netlink_sendmsg+0x917/0xe10 [ 157.726427][ C1] ? sock_sendmsg+0xcf/0x120 [ 157.726444][ C1] ? ____sys_sendmsg+0x6eb/0x810 [ 157.726460][ C1] ? ___sys_sendmsg+0xf3/0x170 [ 157.726478][ C1] ? __x64_sys_sendmsg+0x132/0x220 [ 157.726496][ C1] ? do_syscall_64+0x35/0xb0 [ 157.726517][ C1] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 157.726539][ C1] ? fifo_init+0x342/0x6c0 [ 157.726559][ C1] ? lockdep_init_map_type+0x21a/0x7f0 [ 157.726581][ C1] ? fifo_create_dflt+0xe0/0xe0 [ 157.726602][ C1] ? mutex_is_locked+0xe/0x40 [ 157.726620][ C1] ? rtnl_is_locked+0x11/0x20 [ 157.726640][ C1] ? qdisc_hash_add+0x21d/0x330 [ 157.726663][ C1] taprio_init+0x52e/0x670 [ 157.726684][ C1] ? taprio_change+0x4050/0x4050 [ 157.726705][ C1] qdisc_create.constprop.0+0x44a/0x10f0 [ 157.726724][ C1] ? tc_get_qdisc+0xbd0/0xbd0 [ 157.726741][ C1] tc_modify_qdisc+0x4c5/0x1a00 [ 157.726759][ C1] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 157.726777][ C1] ? rtnetlink_rcv_msg+0x3e5/0xc90 [ 157.726802][ C1] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 157.726819][ C1] rtnetlink_rcv_msg+0x43a/0xc90 [ 157.726842][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 157.726863][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 157.726886][ C1] ? ref_tracker_free+0x370/0x6b0 [ 157.726903][ C1] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 157.726921][ C1] netlink_rcv_skb+0x153/0x420 [ 157.726944][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 157.726965][ C1] ? netlink_ack+0xa80/0xa80 [ 157.726981][ C1] ? netlink_deliver_tap+0x1a2/0xc40 [ 157.726999][ C1] ? netlink_deliver_tap+0x1b1/0xc40 [ 157.727018][ C1] netlink_unicast+0x543/0x7f0 [ 157.727036][ C1] ? netlink_attachskb+0x880/0x880 [ 157.727055][ C1] netlink_sendmsg+0x917/0xe10 [ 157.727073][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 157.727092][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 157.727109][ C1] sock_sendmsg+0xcf/0x120 [ 157.727125][ C1] ____sys_sendmsg+0x6eb/0x810 [ 157.727142][ C1] ? kernel_sendmsg+0x50/0x50 [ 157.727158][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 157.727176][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 157.727199][ C1] ? finish_task_switch.isra.0+0x323/0xb80 [ 157.727223][ C1] ___sys_sendmsg+0xf3/0x170 [ 157.727242][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 157.727262][ C1] ? lock_release+0x780/0x780 [ 157.727282][ C1] ? ptrace_stop.part.0+0x5ec/0xa80 [ 157.727300][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 157.727316][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 157.727333][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 157.727353][ C1] ? __fget_light+0x20a/0x270 [ 157.727388][ C1] __x64_sys_sendmsg+0x132/0x220 [ 157.727407][ C1] ? __sys_sendmsg+0x1b0/0x1b0 [ 157.727426][ C1] ? _raw_spin_unlock_irq+0x2a/0x40 [ 157.727446][ C1] ? ptrace_notify+0xfa/0x140 [ 157.727462][ C1] do_syscall_64+0x35/0xb0 [ 157.727484][ C1] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 157.727506][ C1] RIP: 0033:0x7fdbd6e42dc9 [ 157.727528][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 157.727545][ C1] RSP: 002b:00007ffd33df8758 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.727562][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdbd6e42dc9 [ 157.727574][ C1] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 157.727585][ C1] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 157.727596][ C1] R10: 000000000000000d R11: 0000000000000246 R12: 00007ffd33df8770 [ 157.727607][ C1] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 157.727620][ C1] [ 157.727627][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.098 msecs [ 157.728524][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g4893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 157.728549][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1253 [ 157.728559][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g4893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 157.728583][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 157.728592][ C0] rcu: RCU grace-period kthread stack dump: [ 157.728597][ C0] task:rcu_preempt state:I stack:28864 pid: 17 ppid: 2 flags:0x00004000 [ 157.728631][ C0] Call Trace: [ 157.728636][ C0] [ 157.728643][ C0] __schedule+0xa00/0x4b30 [ 157.728664][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 157.728688][ C0] ? io_schedule_timeout+0x140/0x140 [ 157.728709][ C0] ? debug_object_free+0x350/0x350 [ 157.728734][ C0] schedule+0xd2/0x1f0 [ 157.728752][ C0] schedule_timeout+0x14a/0x2a0 [ 157.728774][ C0] ? usleep_range_state+0x1b0/0x1b0 [ 157.728797][ C0] ? destroy_timer_on_stack+0x20/0x20 [ 157.728818][ C0] ? mac802154_llsec_devkey_add+0x290/0x440 [ 157.728843][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 157.728867][ C0] ? prepare_to_swait_event+0xee/0x470 [ 157.728888][ C0] rcu_gp_fqs_loop+0x186/0x810 [ 157.728910][ C0] ? force_qs_rnp+0x800/0x800 [ 157.728930][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 157.728955][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 157.728980][ C0] rcu_gp_kthread+0x1de/0x320 [ 157.729001][ C0] ? rcu_gp_init+0x1420/0x1420 [ 157.729023][ C0] ? __kthread_parkme+0x15f/0x220 [ 157.729049][ C0] ? rcu_gp_init+0x1420/0x1420 [ 157.729070][ C0] kthread+0x2e9/0x3a0 [ 157.729088][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 157.729110][ C0] ret_from_fork+0x1f/0x30 [ 157.729136][ C0] [ 157.729142][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 157.729148][ C0] Sending NMI from CPU 0 to CPUs 1: [ 157.729168][ C1] NMI backtrace for cpu 1 [ 157.729175][ C1] CPU: 1 PID: 3626 Comm: syz-executor542 Not tainted 5.19.0-rc2-syzkaller-00147-gf0ec9c65a8d6 #0 [ 157.729195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.729203][ C1] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 157.729222][ C1] Code: 89 61 00 e9 2c ff ff ff 66 90 48 c7 c7 e0 f0 cd 89 e8 24 72 12 08 65 8a 05 c1 70 9f 7e 0f be c0 c3 66 0f 1f 84 00 00 00 00 00 <55> 53 65 ff 05 e7 2f 9e 7e e8 e2 71 12 08 48 c7 c3 d0 af 03 00 83 [ 157.729239][ C1] RSP: 0018:ffffc900003f8ce0 EFLAGS: 00000002 [ 157.729253][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815d7e51 [ 157.729264][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8dbad290 [ 157.729276][ C1] RBP: 1ffff9200007f1a1 R08: 0000000000000000 R09: ffffffff8dbad297 [ 157.729288][ C1] R10: fffffbfff1b75a52 R11: 0000000000000001 R12: 0000000000000001 [ 157.729299][ C1] R13: 16f996ba68372d20 R14: ffff888078cea9a0 R15: 16f996ba68372d20 [ 157.729312][ C1] FS: 00005555566ee300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 157.729328][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.729341][ C1] CR2: 0000000020000600 CR3: 0000000017741000 CR4: 00000000003506e0 [ 157.729352][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.729363][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.729374][ C1] Call Trace: [ 157.729379][ C1] [ 157.729384][ C1] rcu_read_lock_sched_held+0x1c/0x70 [ 157.729407][ C1] lock_release+0x560/0x780 [ 157.729428][ C1] ? advance_sched+0x435/0x9a0 [ 157.729448][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 157.729470][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 157.729486][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 157.729504][ C1] _raw_spin_unlock+0x12/0x40 [ 157.729523][ C1] advance_sched+0x435/0x9a0 [ 157.729544][ C1] ? taprio_dequeue_soft+0xa20/0xa20 [ 157.729566][ C1] __hrtimer_run_queues+0x609/0xe50 [ 157.729586][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 157.729605][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 157.729628][ C1] hrtimer_interrupt+0x31c/0x790 [ 157.729649][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 157.729668][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 157.729687][ C1] [ 157.729692][ C1] [ 157.729697][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.729720][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 157.729742][ C1] Code: 74 24 10 e8 4a cc e3 f7 48 89 ef e8 52 4d e4 f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 b3 56 d7 f7 65 8b 05 ac bd 88 76 85 c0 74 0a 5b 5d c3 e8 50 42 [ 157.729759][ C1] RSP: 0018:ffffc900031271e0 EFLAGS: 00000206 [ 157.729772][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff20d87b6 [ 157.729784][ C1] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000001 [ 157.729795][ C1] RBP: ffff88807d6ceae8 R08: 0000000000000001 R09: ffffffff906799c7 [ 157.729807][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 157.729817][ C1] R13: ffff88807d6ceae8 R14: 0000000000000246 R15: ffff88807d6ce800 [ 157.729832][ C1] taprio_change+0x2eab/0x4050 [ 157.729855][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 157.729876][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 157.729896][ C1] ? taprio_peek_soft+0x640/0x640 [ 157.729917][ C1] ? ref_tracker_free+0x6b0/0x6b0 [ 157.729940][ C1] ? rtnetlink_rcv_msg+0x43a/0xc90 [ 157.729961][ C1] ? netlink_rcv_skb+0x153/0x420 [ 157.729978][ C1] ? netlink_unicast+0x543/0x7f0 [ 157.729995][ C1] ? netlink_sendmsg+0x917/0xe10 [ 157.730013][ C1] ? sock_sendmsg+0xcf/0x120 [ 157.730028][ C1] ? ____sys_sendmsg+0x6eb/0x810 [ 157.730044][ C1] ? ___sys_sendmsg+0xf3/0x170 [ 157.730062][ C1] ? __x64_sys_sendmsg+0x132/0x220 [ 157.730080][ C1] ? do_syscall_64+0x35/0xb0 [ 157.730101][ C1] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 157.730123][ C1] ? fifo_init+0x342/0x6c0 [ 157.730141][ C1] ? lockdep_init_map_type+0x21a/0x7f0 [ 157.730163][ C1] ? fifo_create_dflt+0xe0/0xe0 [ 157.730184][ C1] ? mutex_is_locked+0xe/0x40 [ 157.730202][ C1] ? rtnl_is_locked+0x11/0x20 [ 157.730222][ C1] ? qdisc_hash_add+0x21d/0x330 [ 157.730243][ C1] taprio_init+0x52e/0x670 [ 157.730264][ C1] ? taprio_change+0x4050/0x4050 [ 157.730285][ C1] qdisc_create.constprop.0+0x44a/0x10f0 [ 157.730304][ C1] ? tc_get_qdisc+0xbd0/0xbd0 [ 157.730321][ C1] tc_modify_qdisc+0x4c5/0x1a00 [ 157.730339][ C1] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 157.730357][ C1] ? rtnetlink_rcv_msg+0x3e5/0xc90 [ 157.730381][ C1] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 157.730399][ C1] rtnetlink_rcv_msg+0x43a/0xc90 [ 157.730421][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 157.730443][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 157.730465][ C1] ? ref_tracker_free+0x370/0x6b0 [ 157.730482][ C1] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 157.730500][ C1] netlink_rcv_skb+0x153/0x420 [ 157.730517][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 157.730539][ C1] ? netlink_ack+0xa80/0xa80 [ 157.730555][ C1] ? netlink_deliver_tap+0x1a2/0xc40 [ 157.730573][ C1] ? netlink_deliver_tap+0x1b1/0xc40 [ 157.730592][ C1] netlink_unicast+0x543/0x7f0 [ 157.730609][ C1] ? netlink_attachskb+0x880/0x880 [ 157.730628][ C1] netlink_sendmsg+0x917/0xe10 [ 157.730646][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 157.730665][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 157.730682][ C1] sock_sendmsg+0xcf/0x120 [ 157.730697][ C1] ____sys_sendmsg+0x6eb/0x810 [ 157.730713][ C1] ? kernel_sendmsg+0x50/0x50 [ 157.730729][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 157.730748][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 157.730770][ C1] ? finish_task_switch.isra.0+0x323/0xb80 [ 157.730793][ C1] ___sys_sendmsg+0xf3/0x170 [ 157.730812][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 157.730832][ C1] ? lock_release+0x780/0x780 [ 157.730852][ C1] ? ptrace_stop.part.0+0x5ec/0xa80 [ 157.730869][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 157.730886][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 157.730902][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 157.730922][ C1] ? __fget_light+0x20a/0x270 [ 157.730945][ C1] __x64_sys_sendmsg+0x132/0x220 [ 157.730964][ C1] ? __sys_sendmsg+0x1b0/0x1b0 [ 157.730983][ C1] ? _raw_spin_unlock_irq+0x2a/0x40 [ 157.731003][ C1] ? ptrace_notify+0xfa/0x140 [ 157.731019][ C1] do_syscall_64+0x35/0xb0 [ 157.731040][ C1] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 157.731062][ C1] RIP: 0033:0x7fdbd6e42dc9 [ 157.731075][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 157.731092][ C1] RSP: 002b:00007ffd33df8758 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.731108][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdbd6e42dc9 [ 157.731120][ C1] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 157.731131][ C1] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 157.731142][ C1] R10: 000000000000000d R11: 0000000000000246 R12: 00007ffd33df8770 [ 157.731153][ C1] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 157.731166][ C1] [ 309.865359][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u4:0:8] [ 311.500614][ C0] Modules linked in: [ 311.504547][ C0] irq event stamp: 157192 [ 311.508892][ C0] hardirqs last enabled at (157191): [] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 311.519992][ C0] hardirqs last disabled at (157192): [] sysvec_apic_timer_interrupt+0xb/0xc0 [ 311.531221][ C0] softirqs last enabled at (106518): [] __irq_exit_rcu+0x123/0x180 [ 311.540849][ C0] softirqs last disabled at (106447): [] __irq_exit_rcu+0x123/0x180 [ 311.550447][ C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.19.0-rc2-syzkaller-00147-gf0ec9c65a8d6 #0 [ 311.560519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.570661][ C0] Workqueue: events_unbound toggle_allocation_gate [ 311.577266][ C0] RIP: 0010:smp_call_function_many_cond+0x499/0x1110 [ 311.584036][ C0] Code: 01 89 ee e8 69 98 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 09 9c 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31 [ 311.603664][ C0] RSP: 0018:ffffc900002ef950 EFLAGS: 00000293 [ 311.609757][ C0] RAX: 0000000000000000 RBX: ffff8880b9b3f760 RCX: 0000000000000000 [ 311.617834][ C0] RDX: ffff888012198200 RSI: ffffffff816f07a7 RDI: 0000000000000005 [ 311.625821][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 311.633803][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017367eed [ 311.641831][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: dffffc0000000000 [ 311.650184][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 311.659152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.665760][ C0] CR2: 00007fdbd6e00c84 CR3: 000000000ba8e000 CR4: 00000000003506f0 [ 311.673757][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.681757][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.689850][ C0] Call Trace: [ 311.693234][ C0] [ 311.696181][ C0] ? optimize_nops+0x2d0/0x2d0 [ 311.701063][ C0] ? smp_call_on_cpu+0x270/0x270 [ 311.706020][ C0] ? text_poke_memset+0x60/0x60 [ 311.710890][ C0] ? optimize_nops+0x2d0/0x2d0 [ 311.715677][ C0] on_each_cpu_cond_mask+0x56/0xa0 [ 311.720811][ C0] text_poke_bp_batch+0x233/0x6c0 [ 311.725860][ C0] ? kmem_cache_alloc_node_trace+0x124/0x5b0 [ 311.731956][ C0] ? do_sync_core+0x20/0x20 [ 311.736481][ C0] ? arch_jump_label_transform_queue+0xa0/0x100 [ 311.742744][ C0] ? __jump_label_update+0x351/0x400 [ 311.748117][ C0] text_poke_finish+0x16/0x30 [ 311.752901][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 311.759022][ C0] jump_label_update+0x32f/0x410 [ 311.764004][ C0] static_key_enable_cpuslocked+0x1b1/0x260 [ 311.769926][ C0] static_key_enable+0x16/0x20 [ 311.774715][ C0] toggle_allocation_gate+0x100/0x390 [ 311.780106][ C0] ? lock_release+0x780/0x780 [ 311.784868][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 311.790171][ C0] ? do_raw_spin_lock+0x120/0x2a0 [ 311.795219][ C0] process_one_work+0x996/0x1610 [ 311.800212][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 311.805603][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 311.810556][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 311.815610][ C0] worker_thread+0x665/0x1080 [ 311.820308][ C0] ? process_one_work+0x1610/0x1610 [ 311.825524][ C0] kthread+0x2e9/0x3a0 [ 311.829653][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 311.835329][ C0] ret_from_fork+0x1f/0x30 [ 311.839833][ C0] [ 311.842872][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 311.849581][ C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G L 5.19.0-rc2-syzkaller-00147-gf0ec9c65a8d6 #0 [ 311.860962][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.871032][ C0] Workqueue: events_unbound toggle_allocation_gate [ 311.877563][ C0] Call Trace: [ 311.880854][ C0] [ 311.883721][ C0] dump_stack_lvl+0xcd/0x134 [ 311.888418][ C0] panic+0x2d7/0x636 [ 311.892350][ C0] ? panic_print_sys_info.part.0+0x10b/0x10b [ 311.898364][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 311.903707][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 311.908945][ C0] ? softlockup_fn+0xa0/0xa0 [ 311.913617][ C0] __hrtimer_run_queues+0x1c0/0xe50 [ 311.918888][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 311.924887][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 311.930985][ C0] hrtimer_interrupt+0x31c/0x790 [ 311.936130][ C0] __sysvec_apic_timer_interrupt+0x146/0x530 [ 311.942203][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 311.947856][ C0] [ 311.950801][ C0] [ 311.953744][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 311.959759][ C0] RIP: 0010:smp_call_function_many_cond+0x499/0x1110 [ 311.966455][ C0] Code: 01 89 ee e8 69 98 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 09 9c 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31 [ 311.986171][ C0] RSP: 0018:ffffc900002ef950 EFLAGS: 00000293 [ 311.992345][ C0] RAX: 0000000000000000 RBX: ffff8880b9b3f760 RCX: 0000000000000000 [ 312.000327][ C0] RDX: ffff888012198200 RSI: ffffffff816f07a7 RDI: 0000000000000005 [ 312.008312][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 312.016295][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017367eed [ 312.024278][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: dffffc0000000000 [ 312.032278][ C0] ? smp_call_function_many_cond+0x497/0x1110 [ 312.038368][ C0] ? optimize_nops+0x2d0/0x2d0 [ 312.043242][ C0] ? smp_call_on_cpu+0x270/0x270 [ 312.048196][ C0] ? text_poke_memset+0x60/0x60 [ 312.053065][ C0] ? optimize_nops+0x2d0/0x2d0 [ 312.058023][ C0] on_each_cpu_cond_mask+0x56/0xa0 [ 312.063155][ C0] text_poke_bp_batch+0x233/0x6c0 [ 312.068198][ C0] ? kmem_cache_alloc_node_trace+0x124/0x5b0 [ 312.074196][ C0] ? do_sync_core+0x20/0x20 [ 312.078731][ C0] ? arch_jump_label_transform_queue+0xa0/0x100 [ 312.085002][ C0] ? __jump_label_update+0x351/0x400 [ 312.090395][ C0] text_poke_finish+0x16/0x30 [ 312.095087][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 312.101085][ C0] jump_label_update+0x32f/0x410 [ 312.106045][ C0] static_key_enable_cpuslocked+0x1b1/0x260 [ 312.111959][ C0] static_key_enable+0x16/0x20 [ 312.116738][ C0] toggle_allocation_gate+0x100/0x390 [ 312.122130][ C0] ? lock_release+0x780/0x780 [ 312.126836][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 312.132048][ C0] ? do_raw_spin_lock+0x120/0x2a0 [ 312.137086][ C0] process_one_work+0x996/0x1610 [ 312.142094][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 312.147568][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 312.152526][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 312.157573][ C0] worker_thread+0x665/0x1080 [ 312.162283][ C0] ? process_one_work+0x1610/0x1610 [ 312.167495][ C0] kthread+0x2e9/0x3a0 [ 312.171577][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 312.177226][ C0] ret_from_fork+0x1f/0x30 [ 312.181664][ C0] [ 313.282618][ C0] Shutting down cpus with NMI [ 313.287558][ C0] Kernel Offset: disabled [ 313.291994][ C0] Rebooting in 86400 seconds..