./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1117668354 <...> Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. execve("./syz-executor1117668354", ["./syz-executor1117668354"], 0x7fff0937eef0 /* 10 vars */) = 0 brk(NULL) = 0x555557047000 brk(0x555557047d00) = 0x555557047d00 arch_prctl(ARCH_SET_FS, 0x555557047380) = 0 set_tid_address(0x555557047650) = 5072 set_robust_list(0x555557047660, 24) = 0 rseq(0x555557047ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1117668354", 4096) = 28 getrandom("\x8d\x03\xd5\xe0\x23\xcb\x2d\x17", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557047d00 brk(0x555557068d00) = 0x555557068d00 brk(0x555557069000) = 0x555557069000 mprotect(0x7fcf28c88000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555557047650) = 5073 [pid 5073] set_robust_list(0x555557047660, 24) = 0 [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setsid() = 1 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5073] unshare(CLONE_NEWNS) = 0 [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5073] unshare(CLONE_NEWIPC) = 0 [pid 5073] unshare(CLONE_NEWCGROUP) = 0 [pid 5073] unshare(CLONE_NEWUTS) = 0 [pid 5073] unshare(CLONE_SYSVSEM) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [ 97.160238][ T8] cfg80211: failed to load regulatory.db [pid 5073] write(3, "16777216", 8) = 8 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "536870912", 9) = 9 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "8192", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5073] close(3) = 0 [pid 5073] getpid() = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x555557047650) = 3 [pid 5087] set_robust_list(0x555557047660, 24) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5087] ioctl(3, SIOCGIFINDEX, {ifr_name="team0", ifr_ifindex=15}) = 0 [pid 5087] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5087] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xa4\x00\x00\x00\x24\x00\x0b\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x74\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=164}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 164 [pid 5087] close(3 [pid 5073] kill(-3, SIGKILL) = 0 [pid 5073] kill(3, SIGKILL) = 0 [pid 5073] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570486f0 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, 0x5555570486f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 137.467318][ T27] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2669 jiffies s: 585 root: 0x1/. [ 137.479588][ T27] rcu: blocking rcu_node structures (internal RCU debug): [ 137.487875][ T27] Sending NMI from CPU 1 to CPUs 0: [ 137.493127][ C0] NMI backtrace for cpu 0 [ 137.493139][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc2-syzkaller-00431-g9f1f6111fd5d #0 [ 137.493165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 137.493179][ C0] RIP: 0010:lock_release+0x38f/0x690 [ 137.493239][ C0] Code: 85 42 02 00 00 0b 05 30 a6 18 11 0f 84 5a 01 00 00 48 c7 c7 60 bc cc 8a e8 8e 2f 18 09 b8 ff ff ff ff 65 0f c1 05 f9 79 9a 7e <83> f8 01 0f 85 c8 01 00 00 9c 58 f6 c4 02 0f 85 b3 01 00 00 48 f7 [ 137.493262][ C0] RSP: 0018:ffffc90000007cc8 EFLAGS: 00000057 [ 137.493280][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffc90000007d18 [ 137.493315][ C0] RDX: 1ffffffff1992c76 RSI: ffffffff8accbc60 RDI: ffffffff8b2f13c0 [ 137.493331][ C0] RBP: 1ffff92000000f9b R08: 0000000000000000 R09: fffffbfff1e32b02 [ 137.493348][ C0] R10: ffffffff8f195817 R11: 0000000000000000 R12: 0000000000000000 [ 137.493363][ C0] R13: 0000000000000001 R14: ffffffff8cc963b8 R15: ffffffff8cc95900 [ 137.493379][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 137.493403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.493420][ C0] CR2: 00007fcf28c912d0 CR3: 00000000747d6000 CR4: 00000000003506f0 [ 137.493436][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.493450][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.493465][ C0] Call Trace: [ 137.493473][ C0] [ 137.493481][ C0] ? show_regs+0x8f/0xa0 [ 137.493518][ C0] ? nmi_cpu_backtrace+0x1d4/0x390 [ 137.493554][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 137.493592][ C0] ? nmi_handle+0x1a6/0x570 [ 137.493625][ C0] ? lock_release+0x38f/0x690 [ 137.493663][ C0] ? default_do_nmi+0x6a/0x160 [ 137.493700][ C0] ? exc_nmi+0x186/0x200 [ 137.493734][ C0] ? end_repeat_nmi+0xf/0x2a [ 137.493766][ C0] ? lock_release+0x38f/0x690 [ 137.493805][ C0] ? lock_release+0x38f/0x690 [ 137.493844][ C0] ? lock_release+0x38f/0x690 [ 137.493882][ C0] [ 137.493888][ C0] [ 137.493894][ C0] ? advance_sched+0x6d4/0xc60 [ 137.493929][ C0] ? reacquire_held_locks+0x4c0/0x4c0 [ 137.493967][ C0] ? do_raw_spin_lock+0x12e/0x2b0 [ 137.493999][ C0] advance_sched+0x6d9/0xc60 [ 137.494042][ C0] ? taprio_dequeue+0x5e0/0x5e0 [ 137.494075][ C0] __hrtimer_run_queues+0x203/0xc20 [ 137.494123][ C0] ? enqueue_hrtimer+0x310/0x310 [ 137.494161][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 137.494195][ C0] hrtimer_interrupt+0x31b/0x800 [ 137.494228][ C0] __sysvec_apic_timer_interrupt+0x105/0x400 [ 137.494264][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 137.494305][ C0] [ 137.494311][ C0] [ 137.494318][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.494346][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 137.494373][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 07 eb b9 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 137.494396][ C0] RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246 [ 137.494414][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a803787 [ 137.494429][ C0] RDX: 0000000000000001 RSI: ffff888141262800 RDI: ffff888141262864 [ 137.494445][ C0] RBP: ffff888141262864 R08: 0000000000000001 R09: ffffed1017306dbd [ 137.494461][ C0] R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff888142ef3000 [ 137.494477][ C0] R13: ffffffff8db1d6e0 R14: 0000000000000000 R15: 0000000000000000 [ 137.494497][ C0] ? ct_kernel_exit+0x137/0x190 [ 137.494530][ C0] acpi_idle_enter+0xc5/0x160 [ 137.494558][ C0] cpuidle_enter_state+0x83/0x500 [ 137.494584][ C0] ? tick_nohz_idle_stop_tick+0x10d/0xb80 [ 137.494621][ C0] cpuidle_enter+0x4e/0xa0 [ 137.494653][ C0] do_idle+0x319/0x400 [ 137.494679][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 137.494709][ C0] cpu_startup_entry+0x50/0x60 [ 137.494734][ C0] rest_init+0x16f/0x2b0 [ 137.494758][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 137.494798][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 137.494826][ C0] arch_call_rest_init+0x13/0x30 [ 137.494859][ C0] start_kernel+0x39f/0x480 [ 137.494892][ C0] x86_64_start_reservations+0x18/0x30 [ 137.494918][ C0] x86_64_start_kernel+0xb2/0xc0 [ 137.494942][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 137.494988][ C0] [ 137.494996][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.869 msecs