./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1302875078 <...> Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. execve("./syz-executor1302875078", ["./syz-executor1302875078"], 0x7fff1dd049e0 /* 10 vars */) = 0 brk(NULL) = 0x55555fcc6000 brk(0x55555fcc6d00) = 0x55555fcc6d00 arch_prctl(ARCH_SET_FS, 0x55555fcc6380) = 0 set_tid_address(0x55555fcc6650) = 5838 set_robust_list(0x55555fcc6660, 24) = 0 rseq(0x55555fcc6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1302875078", 4096) = 28 getrandom("\x79\x35\x3a\xb8\x82\xd6\xd3\x5e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555fcc6d00 brk(0x55555fce7d00) = 0x55555fce7d00 brk(0x55555fce8000) = 0x55555fce8000 mprotect(0x7fd1d469d000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 chmod("/dev/raw-gadget", 0666) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555fcc6650) = 5839 ./strace-static-x86_64: Process 5839 attached [pid 5839] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] getppid() = 0 [pid 5839] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5839] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5839] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5839] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5839] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5839] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5839] unshare(CLONE_NEWNS) = 0 [pid 5839] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5839] unshare(CLONE_NEWIPC) = 0 [pid 5839] unshare(CLONE_NEWCGROUP) = 0 [pid 5839] unshare(CLONE_NEWUTS) = 0 [pid 5839] unshare(CLONE_SYSVSEM) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "16777216", 8) = 8 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "536870912", 9) = 9 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1024", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "8192", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1024", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1024", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5839] close(3) = 0 [pid 5839] getpid() = 1 [pid 5839] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5861] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5839] <... clone resumed>, child_tidptr=0x55555fcc6650) = 2 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5861] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5861] read(200, 0x7ffd08afabb0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] write(1, "executing program\n", 18executing program ) = 18 [pid 5861] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 5861] ioctl(3, SIOCGIFINDEX, {ifr_name="bond0", ifr_ifindex=15}) = 0 [pid 5861] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5861] bpf(BPF_MAP_CREATE, NULL, 72) = -1 EFAULT (Bad address) [ 107.982609][ C1] hrtimer: interrupt took 1880566 ns [pid 5861] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xac\x00\x00\x00\x24\x00\x0b\x0f\x2b\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x01\x00\xff\xff\xff\xff\x02\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x7c\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00\x04\x00\x02\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=172}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 172 [pid 5861] close(3) = 0 [pid 5861] close(4) = 0 [pid 5861] close(5) = -1 EBADF (Bad file descriptor) [pid 5861] close(6) = -1 EBADF (Bad file descriptor) [pid 5861] close(7) = -1 EBADF (Bad file descriptor) [pid 5861] close(8) = -1 EBADF (Bad file descriptor) [pid 5861] close(9) = -1 EBADF (Bad file descriptor) [pid 5861] close(10) = -1 EBADF (Bad file descriptor) [pid 5861] close(11) = -1 EBADF (Bad file descriptor) [pid 5861] close(12) = -1 EBADF (Bad file descriptor) [pid 5861] close(13) = -1 EBADF (Bad file descriptor) [pid 5861] close(14) = -1 EBADF (Bad file descriptor) [pid 5861] close(15) = -1 EBADF (Bad file descriptor) [pid 5861] close(16) = -1 EBADF (Bad file descriptor) [pid 5861] close(17) = -1 EBADF (Bad file descriptor) [pid 5861] close(18) = -1 EBADF (Bad file descriptor) [pid 5861] close(19) = -1 EBADF (Bad file descriptor) [pid 5861] close(20) = -1 EBADF (Bad file descriptor) [pid 5861] close(21) = -1 EBADF (Bad file descriptor) [pid 5861] close(22) = -1 EBADF (Bad file descriptor) [pid 5861] close(23) = -1 EBADF (Bad file descriptor) [pid 5861] close(24) = -1 EBADF (Bad file descriptor) [pid 5861] close(25) = -1 EBADF (Bad file descriptor) [pid 5861] close(26) = -1 EBADF (Bad file descriptor) [pid 5861] close(27) = -1 EBADF (Bad file descriptor) [pid 5861] close(28) = -1 EBADF (Bad file descriptor) [pid 5861] close(29) = -1 EBADF (Bad file descriptor) [pid 5861] exit_group(0) = ? [pid 5861] +++ exited with 0 +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5839] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached , child_tidptr=0x55555fcc6650) = 3 [pid 5862] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] read(200, 0x7ffd08afabb0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] write(1, "executing program\n", 18executing program ) = 18 [pid 5862] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 5862] ioctl(3, SIOCGIFINDEX, {ifr_name="bond0", ifr_ifindex=15}) = 0 [pid 5862] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5862] bpf(BPF_MAP_CREATE, NULL, 72) = -1 EFAULT (Bad address) [pid 5862] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xac\x00\x00\x00\x24\x00\x0b\x0f\x2b\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x01\x00\xff\xff\xff\xff\x02\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x7c\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00\x04\x00\x02\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=172}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 172 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] close(5) = -1 EBADF (Bad file descriptor) [pid 5862] close(6) = -1 EBADF (Bad file descriptor) [pid 5862] close(7) = -1 EBADF (Bad file descriptor) [pid 5862] close(8) = -1 EBADF (Bad file descriptor) [pid 5862] close(9) = -1 EBADF (Bad file descriptor) [pid 5862] close(10) = -1 EBADF (Bad file descriptor) [pid 5862] close(11) = -1 EBADF (Bad file descriptor) [pid 5862] close(12) = -1 EBADF (Bad file descriptor) [pid 5862] close(13) = -1 EBADF (Bad file descriptor) [pid 5862] close(14) = -1 EBADF (Bad file descriptor) [pid 5862] close(15 [pid 5839] kill(-3, SIGKILL [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] ???() = ? [pid 5839] <... kill resumed>) = 0 [pid 5839] kill(3, SIGKILL) = 0 [pid 5862] +++ killed by SIGKILL +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5839] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached , child_tidptr=0x55555fcc6650) = 4 [pid 5863] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 executing program [pid 5863] read(200, 0x7ffd08afabb0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] write(1, "executing program\n", 18) = 18 [pid 5863] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 5863] ioctl(3, SIOCGIFINDEX, {ifr_name="bond0", ifr_ifindex=15}) = 0 [pid 5863] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5863] bpf(BPF_MAP_CREATE, NULL, 72) = -1 EFAULT (Bad address) [pid 5863] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xac\x00\x00\x00\x24\x00\x0b\x0f\x2b\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x01\x00\xff\xff\xff\xff\x02\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x7c\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00\x04\x00\x02\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=172}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 172 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] close(5) = -1 EBADF (Bad file descriptor) [pid 5863] close(6) = -1 EBADF (Bad file descriptor) [pid 5863] close(7) = -1 EBADF (Bad file descriptor) [pid 5863] close(8) = -1 EBADF (Bad file descriptor) [pid 5863] close(9) = -1 EBADF (Bad file descriptor) [pid 5863] close(10) = -1 EBADF (Bad file descriptor) [pid 5863] close(11) = -1 EBADF (Bad file descriptor) [pid 5863] close(12) = -1 EBADF (Bad file descriptor) [pid 5863] close(13) = -1 EBADF (Bad file descriptor) [pid 5863] close(14) = -1 EBADF (Bad file descriptor) [pid 5863] close(15) = -1 EBADF (Bad file descriptor) [pid 5863] close(16) = -1 EBADF (Bad file descriptor) [pid 5863] close(17) = -1 EBADF (Bad file descriptor) [pid 5863] close(18) = -1 EBADF (Bad file descriptor) [pid 5863] close(19) = -1 EBADF (Bad file descriptor) [pid 5863] close(20) = -1 EBADF (Bad file descriptor) [pid 5863] close(21) = -1 EBADF (Bad file descriptor) [pid 5863] close(22) = -1 EBADF (Bad file descriptor) [pid 5863] close(23) = -1 EBADF (Bad file descriptor) [pid 5863] close(24) = -1 EBADF (Bad file descriptor) [pid 5863] close(25) = -1 EBADF (Bad file descriptor) [pid 5863] close(26) = -1 EBADF (Bad file descriptor) [pid 5863] close(27) = -1 EBADF (Bad file descriptor) [pid 5863] close(28) = -1 EBADF (Bad file descriptor) [pid 5863] close(29) = -1 EBADF (Bad file descriptor) [pid 5863] exit_group(0) = ? [pid 5839] kill(-4, SIGKILL [pid 5863] +++ exited with 0 +++ [pid 5839] <... kill resumed>) = 0 [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=777 /* 7.77 s */} --- [pid 5839] kill(4, SIGKILL) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached executing program , child_tidptr=0x55555fcc6650) = 5 [pid 5865] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] read(200, 0x7ffd08afabb0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 5865] ioctl(3, SIOCGIFINDEX, {ifr_name="bond0", ifr_ifindex=15}) = 0 [pid 5865] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5865] bpf(BPF_MAP_CREATE, NULL, 72) = -1 EFAULT (Bad address) [pid 5865] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xac\x00\x00\x00\x24\x00\x0b\x0f\x2b\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x01\x00\xff\xff\xff\xff\x02\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x7c\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00\x04\x00\x02\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=172}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 172 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] close(5) = -1 EBADF (Bad file descriptor) [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0) = ? [pid 5865] +++ exited with 0 +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1624 /* 16.24 s */} --- [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached , child_tidptr=0x55555fcc6650) = 6 [pid 5873] set_robust_list(0x55555fcc6660, 24) = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] read(200, executing program 0x7ffd08afabb0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 5873] ioctl(3, SIOCGIFINDEX, {ifr_name="bond0", ifr_ifindex=15}) = 0 [pid 5873] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5873] bpf(BPF_MAP_CREATE, NULL, 72) = -1 EFAULT (Bad address) [pid 5873] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xac\x00\x00\x00\x24\x00\x0b\x0f\x2b\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x01\x00\xff\xff\xff\xff\x02\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x7c\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00\x04\x00\x02\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=172}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 172 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] close(5) = -1 EBADF (Bad file descriptor) [pid 5873] close(6) = -1 EBADF (Bad file descriptor) [pid 5873] close(7) = -1 EBADF (Bad file descriptor) [pid 5873] close(8) = -1 EBADF (Bad file descriptor) [pid 5873] close(9) = -1 EBADF (Bad file descriptor) [pid 5873] close(10) = -1 EBADF (Bad file descriptor) [pid 5873] close(11) = -1 EBADF (Bad file descriptor) [pid 5873] close(12) = -1 EBADF (Bad file descriptor) [pid 5873] close(13) = -1 EBADF (Bad file descriptor) [pid 5873] close(14) = -1 EBADF (Bad file descriptor) [pid 5873] close(15) = -1 EBADF (Bad file descriptor) [pid 5873] close(16) = -1 EBADF (Bad file descriptor) [pid 5873] close(17) = -1 EBADF (Bad file descriptor) [pid 5873] close(18) = -1 EBADF (Bad file descriptor) [pid 5873] close(19) = -1 EBADF (Bad file descriptor) [pid 5873] close(20) = -1 EBADF (Bad file descriptor) [pid 5873] close(21) = -1 EBADF (Bad file descriptor) [pid 5873] close(22) = -1 EBADF (Bad file descriptor) [pid 5873] close(23) = -1 EBADF (Bad file descriptor) [pid 5873] close(24) = -1 EBADF (Bad file descriptor) [pid 5873] close(25) = -1 EBADF (Bad file descriptor) [pid 5873] close(26) = -1 EBADF (Bad file descriptor) [pid 5873] close(27) = -1 EBADF (Bad file descriptor) [pid 5873] close(28) = -1 EBADF (Bad file descriptor) [pid 5873] close(29) = -1 EBADF (Bad file descriptor) [pid 5873] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5839] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555fcc6650) = 7 ./strace-static-x86_64: Process 5874 attached [pid 5839] kill(-7, SIGKILL) = -1 ESRCH (No such process) [pid 5839] kill(7, SIGKILL) = 0 [ 355.905169][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.912613][ C0] rcu: 1-...!: (3 ticks this GP) idle=2904/1/0x4000000000000000 softirq=16358/16358 fqs=0 [ 355.923539][ C0] rcu: (detected by 0, t=10502 jiffies, g=12569, q=909 ncpus=2) [ 355.931519][ C0] Sending NMI from CPU 0 to CPUs 1: [ 355.931565][ C1] NMI backtrace for cpu 1 [ 355.931595][ C1] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 355.931615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.931631][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 355.931698][ C1] RIP: 0010:lock_release+0x89/0x3e0 [ 355.931725][ C1] Code: ed 02 0e 00 0f 84 44 02 00 00 65 8b 05 30 aa fe 10 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 b0 9c 92 41 83 bf ec 0a 00 00 00 <0f> 85 1e 02 00 00 49 81 3e 40 73 60 93 0f 84 11 02 00 00 48 c7 44 [ 355.931740][ C1] RSP: 0018:ffffc90000a08c18 EFLAGS: 00000046 [ 355.931755][ C1] RAX: 0000000000000000 RBX: 0000000000000802 RCX: 48f792c786545100 [ 355.931767][ C1] RDX: 0000000000000001 RSI: ffffffff8be28320 RDI: ffffffff8be282e0 [ 355.931779][ C1] RBP: ffffc90000a08d08 R08: 0000000000000003 R09: 0000000000000004 [ 355.931791][ C1] R10: dffffc0000000000 R11: fffff52000141170 R12: dffffc0000000000 [ 355.931803][ C1] R13: ffffffff81aea3ed R14: ffffffff99c93b48 R15: ffff88801c773c00 [ 355.931817][ C1] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 355.931831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.931843][ C1] CR2: 00005618c9b91a08 CR3: 0000000077482000 CR4: 00000000003526f0 [ 355.931858][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.931869][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.931879][ C1] Call Trace: [ 355.931888][ C1] [ 355.931901][ C1] _raw_spin_unlock_irqrestore+0x70/0x110 [ 355.931929][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.931950][ C1] ? debug_object_deactivate+0x9a/0x250 [ 355.931979][ C1] debug_deactivate+0x1d/0x200 [ 355.931997][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 355.932033][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 355.932058][ C1] ? read_tsc+0x9/0x20 [ 355.932084][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 355.932124][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 355.932144][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 355.932166][ C1] [ 355.932172][ C1] [ 355.932178][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.932197][ C1] RIP: 0010:stack_depot_save_flags+0x5/0x900 [ 355.932228][ C1] Code: c7 c7 50 36 8e 8e 48 89 da e8 57 6f 00 00 eb d9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 40 65 48 8b 05 d6 79 a6 0d 48 [ 355.932242][ C1] RSP: 0018:ffffc9000212f400 EFLAGS: 00000246 [ 355.932256][ C1] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000000000001 [ 355.932266][ C1] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffc9000212f410 [ 355.932277][ C1] RBP: ffffc9000212f638 R08: 000000000000000f R09: ffffffff81729de5 [ 355.932289][ C1] R10: ffffc9000212f318 R11: ffffffff81acf670 R12: ffff88801a441dc0 [ 355.932302][ C1] R13: 0000000000000000 R14: ffff88802274a008 R15: ffffc9000212f410 [ 355.932317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.932336][ C1] ? unwind_next_frame+0xa5/0x2390 [ 355.932368][ C1] kasan_save_track+0x4f/0x80 [ 355.932383][ C1] ? kasan_save_track+0x3e/0x80 [ 355.932397][ C1] ? kasan_save_free_info+0x46/0x50 [ 355.932419][ C1] ? __kasan_slab_free+0x62/0x70 [ 355.932434][ C1] ? kfree+0x18e/0x440 [ 355.932447][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11ef/0x2ae0 [ 355.932470][ C1] ? ieee80211_iface_work+0x806/0xfe0 [ 355.932491][ C1] ? cfg80211_wiphy_work+0x2df/0x460 [ 355.932515][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 355.932540][ C1] ? worker_thread+0x8a0/0xda0 [ 355.932554][ C1] ? kthread+0x70e/0x8a0 [ 355.932571][ C1] ? ret_from_fork+0x3f9/0x770 [ 355.932592][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 355.932633][ C1] kasan_save_free_info+0x46/0x50 [ 355.932655][ C1] __kasan_slab_free+0x62/0x70 [ 355.932671][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11ef/0x2ae0 [ 355.932691][ C1] kfree+0x18e/0x440 [ 355.932708][ C1] ieee80211_ibss_rx_queued_mgmt+0x11ef/0x2ae0 [ 355.932735][ C1] ? worker_thread+0x8a0/0xda0 [ 355.932749][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 355.932768][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 355.932789][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 355.932815][ C1] ? __lock_acquire+0xab9/0xd20 [ 355.932856][ C1] ieee80211_iface_work+0x806/0xfe0 [ 355.932883][ C1] cfg80211_wiphy_work+0x2df/0x460 [ 355.932908][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 355.932934][ C1] process_scheduled_works+0xae1/0x17b0 [ 355.932974][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.933007][ C1] worker_thread+0x8a0/0xda0 [ 355.933035][ C1] kthread+0x70e/0x8a0 [ 355.933055][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.933070][ C1] ? __pfx_kthread+0x10/0x10 [ 355.933089][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.933108][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.933128][ C1] ? __pfx_kthread+0x10/0x10 [ 355.933147][ C1] ret_from_fork+0x3f9/0x770 [ 355.933171][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 355.933197][ C1] ? __switch_to_asm+0x39/0x70 [ 355.933218][ C1] ? __switch_to_asm+0x33/0x70 [ 355.933234][ C1] ? __pfx_kthread+0x10/0x10 [ 355.933253][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.933279][ C1] [ 355.933292][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.727 msecs [ 355.933553][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g12569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 356.482618][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=5523 [ 356.490566][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g12569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 356.502079][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 356.512178][ C0] rcu: RCU grace-period kthread stack dump: [ 356.518184][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 356.530544][ C0] Call Trace: [ 356.533954][ C0] [ 356.536947][ C0] __schedule+0x16f5/0x4d00 [ 356.541519][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 356.546817][ C0] ? schedule+0x165/0x360 [ 356.551198][ C0] ? __lock_acquire+0xab9/0xd20 [ 356.556117][ C0] ? __pfx___schedule+0x10/0x10 [ 356.561133][ C0] ? schedule+0x91/0x360 [ 356.565433][ C0] schedule+0x165/0x360 [ 356.569632][ C0] schedule_timeout+0x12b/0x270 [ 356.574524][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 356.579939][ C0] ? __pfx_process_timeout+0x10/0x10 [ 356.585287][ C0] ? prepare_to_swait_event+0x341/0x380 [ 356.591007][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 356.595923][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 356.600906][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.606149][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 356.611495][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 356.616788][ C0] ? finish_swait+0xcd/0x1f0 [ 356.621441][ C0] rcu_gp_kthread+0x99/0x390 [ 356.626259][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.631846][ C0] ? __kthread_parkme+0x7b/0x200 [ 356.636816][ C0] ? __kthread_parkme+0x1a1/0x200 [ 356.642160][ C0] kthread+0x70e/0x8a0 [ 356.646278][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.651613][ C0] ? __pfx_kthread+0x10/0x10 [ 356.656262][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.661582][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.666816][ C0] ? __pfx_kthread+0x10/0x10 [ 356.671472][ C0] ret_from_fork+0x3f9/0x770 [ 356.676447][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 356.681631][ C0] ? __switch_to_asm+0x39/0x70 [ 356.686536][ C0] ? __switch_to_asm+0x33/0x70 [ 356.691331][ C0] ? __pfx_kthread+0x10/0x10 [ 356.695964][ C0] ret_from_fork_asm+0x1a/0x30 [ 356.700774][ C0]