./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4262209261 <...> Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. execve("./syz-executor4262209261", ["./syz-executor4262209261"], 0x7ffedda63eb0 /* 10 vars */) = 0 brk(NULL) = 0x5555564f5000 brk(0x5555564f5d00) = 0x5555564f5d00 arch_prctl(ARCH_SET_FS, 0x5555564f5380) = 0 set_tid_address(0x5555564f5650) = 5070 set_robust_list(0x5555564f5660, 24) = 0 rseq(0x5555564f5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4262209261", 4096) = 28 getrandom("\xbc\x72\x4c\x69\xbd\xdf\xb0\x5c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555564f5d00 brk(0x555556516d00) = 0x555556516d00 brk(0x555556517000) = 0x555556517000 mprotect(0x7f5daa94a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x5555564f5660, 24) = 0 [pid 5071] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5070] <... clone resumed>, child_tidptr=0x5555564f5650) = 5071 [pid 5071] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setsid() = 1 [pid 5071] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5071] unshare(CLONE_NEWNS) = 0 [pid 5071] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5071] unshare(CLONE_NEWIPC) = 0 [pid 5071] unshare(CLONE_NEWCGROUP) = 0 [pid 5071] unshare(CLONE_NEWUTS) = 0 [pid 5071] unshare(CLONE_SYSVSEM) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "16777216", 8) = 8 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "536870912", 9) = 9 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "8192", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5071] close(3) = 0 [pid 5071] getpid() = 1 [pid 5071] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached , child_tidptr=0x5555564f5650) = 3 [pid 5083] set_robust_list(0x5555564f5660, 24) = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [ 84.118074][ C0] hrtimer: interrupt took 1423092361 ns [pid 5083] close(3) = 0 [pid 5083] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5083] ioctl(3, SIOCGIFINDEX, {ifr_name="team0", ifr_ifindex=15}) = 0 [ 189.161662][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 189.168682][ C1] rcu: 0-...!: (2 ticks this GP) idle=e784/0/0x1 softirq=6768/6768 fqs=0 [ 189.177809][ C1] rcu: (detected by 1, t=10502 jiffies, g=8529, q=191 ncpus=2) [ 189.185482][ C1] Sending NMI from CPU 1 to CPUs 0: [ 189.190707][ C0] NMI backtrace for cpu 0 [ 189.190717][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.0-syzkaller-15859-g89cdf9d55601 #0 [ 189.190738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 189.190749][ C0] RIP: 0010:kasan_check_range+0x14c/0x190 [ 189.190797][ C0] Code: c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 85 c0 48 89 c2 75 97 48 89 da 4c 89 d8 4c 29 da e9 30 ff ff ff 5b 01 00 00 00 5d 41 5c c3 b8 01 00 00 00 c3 48 29 c3 48 89 da 49 [ 189.190816][ C0] RSP: 0018:ffffc90000007ab0 EFLAGS: 00000046 [ 189.190832][ C0] RAX: fffffbfff23e3fd1 RBX: 0000000000000001 RCX: ffffffff8168a54f [ 189.190846][ C0] RDX: fffffbfff23e3fd1 RSI: 0000000000000008 RDI: ffffffff91f1fe80 [ 189.190860][ C0] RBP: fffffbfff23e3fd0 R08: 0000000000000000 R09: fffffbfff23e3fd0 [ 189.190873][ C0] R10: ffffffff91f1fe87 R11: 0000000000000000 R12: ffffffff8cc9640a [ 189.190887][ C0] R13: ffffffff8cc963e8 R14: 0000000049da982d R15: 0000000000000002 [ 189.190900][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 189.190920][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.190934][ C0] CR2: 00007f5daa8cfe63 CR3: 000000007e165000 CR4: 00000000003506f0 [ 189.190948][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.190960][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.190972][ C0] Call Trace: [ 189.190980][ C0] [ 189.190988][ C0] ? show_regs+0x8f/0xa0 [ 189.191012][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 189.191044][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 189.191073][ C0] ? nmi_handle+0x1a6/0x570 [ 189.191098][ C0] ? kasan_check_range+0x14c/0x190 [ 189.191125][ C0] ? default_do_nmi+0x69/0x160 [ 189.191157][ C0] ? exc_nmi+0x186/0x200 [ 189.191186][ C0] ? end_repeat_nmi+0xf/0x2a [ 189.191213][ C0] ? __lock_acquire+0xc8f/0x5de0 [ 189.191243][ C0] ? kasan_check_range+0x14c/0x190 [ 189.191271][ C0] ? kasan_check_range+0x14c/0x190 [ 189.191299][ C0] ? kasan_check_range+0x14c/0x190 [ 189.191326][ C0] [ 189.191331][ C0] [ 189.191337][ C0] __lock_acquire+0xc8f/0x5de0 [ 189.191371][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 189.191402][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 189.191438][ C0] lock_acquire+0x1ae/0x510 [ 189.191466][ C0] ? debug_object_deactivate+0x113/0x320 [ 189.191497][ C0] ? lock_sync+0x190/0x190 [ 189.191525][ C0] ? find_held_lock+0x2d/0x110 [ 189.191552][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 189.191585][ C0] _raw_spin_lock_irqsave+0x3a/0x50 [ 189.191611][ C0] ? debug_object_deactivate+0x113/0x320 [ 189.191644][ C0] debug_object_deactivate+0x113/0x320 [ 189.191673][ C0] ? debug_object_free+0x360/0x360 [ 189.191702][ C0] ? debug_object_active_state+0x350/0x350 [ 189.191735][ C0] ? timerqueue_add+0x1c2/0x330 [ 189.191769][ C0] __hrtimer_run_queues+0x470/0xc10 [ 189.191803][ C0] ? enqueue_hrtimer+0x310/0x310 [ 189.191831][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 189.191856][ C0] hrtimer_interrupt+0x31b/0x800 [ 189.191892][ C0] __sysvec_apic_timer_interrupt+0x105/0x3f0 [ 189.191919][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 189.191941][ C0] [ 189.191947][ C0] [ 189.191953][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.191979][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 189.192003][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 47 13 b7 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 189.192021][ C0] RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246 [ 189.192036][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a82ea0e [ 189.192049][ C0] RDX: 0000000000000001 RSI: ffff888147e58000 RDI: ffff888147e58064 [ 189.192062][ C0] RBP: ffff888147e58064 R08: 0000000000000001 R09: ffffed1017306dbd [ 189.192075][ C0] R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff888016fc0000 [ 189.192088][ C0] R13: ffffffff8db226a0 R14: 0000000000000000 R15: 0000000000000000 [ 189.192105][ C0] ? ct_kernel_exit+0x12e/0x180 [ 189.192129][ C0] acpi_idle_enter+0xc5/0x160 [ 189.192154][ C0] cpuidle_enter_state+0x82/0x500 [ 189.192178][ C0] ? tick_nohz_idle_stop_tick+0x10d/0xb70 [ 189.192206][ C0] cpuidle_enter+0x4e/0xa0 [ 189.192227][ C0] do_idle+0x315/0x3f0 [ 189.192259][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 189.192294][ C0] cpu_startup_entry+0x50/0x60 [ 189.192325][ C0] rest_init+0x16f/0x2b0 [ 189.192347][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 189.192378][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 189.192402][ C0] arch_call_rest_init+0x13/0x30 [ 189.192429][ C0] start_kernel+0x39f/0x480 [ 189.192455][ C0] x86_64_start_reservations+0x18/0x30 [ 189.192489][ C0] x86_64_start_kernel+0xb2/0xc0 [ 189.192521][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 189.192558][ C0] [ 189.192565][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.858 msecs [ 189.192704][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g8529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 189.693117][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=4100 [ 189.700925][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g8529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 189.712215][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 189.722190][ C1] rcu: RCU grace-period kthread stack dump: [ 189.728076][ C1] task:rcu_preempt state:I stack:28496 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 189.738255][ C1] Call Trace: [ 189.741546][ C1] [ 189.744489][ C1] __schedule+0xee2/0x59a0 [ 189.748960][ C1] ? io_schedule_timeout+0x150/0x150 [ 189.754277][ C1] ? schedule+0x1fa/0x270 [ 189.758646][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 189.764039][ C1] ? timer_fixup_activate+0x2b0/0x2b0 [ 189.769445][ C1] schedule+0xe7/0x270 [ 189.773531][ C1] schedule_timeout+0x157/0x2c0 [ 189.778401][ C1] ? usleep_range_state+0x1a0/0x1a0 [ 189.783617][ C1] ? destroy_timer_on_stack+0x20/0x20 [ 189.789014][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 189.794846][ C1] ? prepare_to_swait_event+0xf4/0x470 [ 189.800333][ C1] rcu_gp_fqs_loop+0x1ec/0xb10 [ 189.805119][ C1] ? rcu_implicit_dynticks_qs+0x1370/0x1370 [ 189.811049][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 189.816879][ C1] rcu_gp_kthread+0x249/0x380 [ 189.821578][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 189.826364][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 189.831579][ C1] ? __kthread_parkme+0x14b/0x220 [ 189.836621][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 189.841408][ C1] kthread+0x33c/0x440 [ 189.845491][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.850715][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 189.856370][ C1] ret_from_fork+0x45/0x80 [ 189.860803][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 189.866454][ C1] ret_from_fork_asm+0x11/0x20 [ 189.871265][ C1]