./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor903934578 <...> Warning: Permanently added '10.128.1.100' (ECDSA) to the list of known hosts. execve("./syz-executor903934578", ["./syz-executor903934578"], 0x7ffcea0b0e30 /* 10 vars */) = 0 brk(NULL) = 0x55555598b000 brk(0x55555598bc40) = 0x55555598bc40 arch_prctl(ARCH_SET_FS, 0x55555598b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor903934578", 4096) = 27 brk(0x5555559acc40) = 0x5555559acc40 brk(0x5555559ad000) = 0x5555559ad000 mprotect(0x7fc18abbd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5021 attached , child_tidptr=0x55555598b5d0) = 5021 [pid 5021] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setsid() = 1 [pid 5021] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5021] unshare(CLONE_NEWNS) = 0 [pid 5021] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5021] unshare(CLONE_NEWIPC) = 0 [pid 5021] unshare(CLONE_NEWCGROUP) = 0 [pid 5021] unshare(CLONE_NEWUTS) = 0 [pid 5021] unshare(CLONE_SYSVSEM) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "16777216", 8) = 8 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "536870912", 9) = 9 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "8192", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5021] close(3) = 0 [pid 5021] getpid() = 1 [pid 5021] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 8b 44 24 60 65 48 2b 04 25 28 00 00 00 0f 85 c6 00 00 00 48 83 [ 147.106327][ C1] RSP: 0018:ffffc900001e0cf8 EFLAGS: 00000046 [ 147.106337][ C1] RAX: dffffc0000000000 RBX: 1ffff9200003c1a0 RCX: ffffffff8166ace4 [ 147.106345][ C1] RDX: 1ffff11003d25e5f RSI: 0000000000000004 RDI: ffffc900001e0d20 [ 147.106352][ C1] RBP: ffff88801e92f2e8 R08: 0000000000000001 R09: fffff5200003c1a4 [ 147.106359][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888016a51dc0 [ 147.106366][ C1] R13: ffff88801e92f2f8 R14: 0000000000000001 R15: ffffffff884cdab0 [ 147.106376][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 147.106387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.106394][ C1] CR2: 0000000020000600 CR3: 0000000021523000 CR4: 0000000000350ee0 [ 147.106402][ C1] Call Trace: [ 147.106405][ C1] [ 147.106410][ C1] ? nmi_cpu_backtrace+0x1d0/0x350 [ 147.106434][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 147.106452][ C1] ? nmi_handle+0x13d/0x400 [ 147.106467][ C1] ? do_raw_spin_lock+0x1ac/0x2b0 [ 147.106483][ C1] ? default_do_nmi+0x6b/0x170 [ 147.106496][ C1] ? exc_nmi+0x171/0x1e0 [ 147.106507][ C1] ? end_repeat_nmi+0x16/0x31 [ 147.106519][ C1] ? taprio_find+0x140/0x140 [ 147.106537][ C1] ? do_raw_spin_lock+0x124/0x2b0 [ 147.106554][ C1] ? do_raw_spin_lock+0x1ac/0x2b0 [ 147.106570][ C1] ? do_raw_spin_lock+0x1ac/0x2b0 [ 147.106586][ C1] ? do_raw_spin_lock+0x1ac/0x2b0 [ 147.106603][ C1] [ 147.106606][ C1] [ 147.106609][ C1] ? spin_bug+0x1c0/0x1c0 [ 147.106626][ C1] advance_sched+0xd2/0xd20 [ 147.106646][ C1] ? taprio_find+0x140/0x140 [ 147.106661][ C1] __hrtimer_run_queues+0x604/0xc00 [ 147.106679][ C1] ? enqueue_hrtimer+0x320/0x320 [ 147.106692][ C1] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 147.106712][ C1] hrtimer_interrupt+0x320/0x7b0 [ 147.106730][ C1] __sysvec_apic_timer_interrupt+0x14a/0x430 [ 147.106745][ C1] sysvec_apic_timer_interrupt+0x92/0xc0 [ 147.106760][ C1] [ 147.106762][ C1] [ 147.106766][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.106778][ C1] RIP: 0010:acpi_safe_halt+0x40/0x50 [ 147.106794][ C1] Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 47 80 b2 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f [ 147.106804][ C1] RSP: 0018:ffffc90000177d18 EFLAGS: 00000246 [ 147.106812][ C1] RAX: ffff888016a51dc0 RBX: 0000000000000000 RCX: ffffffff8a201115 [ 147.106819][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.106826][ C1] RBP: ffff888014ad4064 R08: 0000000000000001 R09: ffffed1017326d9d [ 147.106833][ C1] R10: ffff8880b9936ceb R11: 0000000000000001 R12: 0000000000000001 [ 147.106840][ C1] R13: ffff888014ad4000 R14: ffff888014ad4064 R15: 0000000000000000 [ 147.106849][ C1] ? ct_kernel_exit+0x1d5/0x240 [ 147.106865][ C1] acpi_idle_do_entry+0x53/0x70 [ 147.106880][ C1] acpi_idle_enter+0x173/0x290 [ 147.106895][ C1] ? cpuidle_enter+0x4e/0xa0 [ 147.106910][ C1] cpuidle_enter_state+0xd3/0x6f0 [ 147.106926][ C1] cpuidle_enter+0x4e/0xa0 [ 147.106940][ C1] do_idle+0x2fe/0x3c0 [ 147.106957][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 147.106974][ C1] ? _raw_spin_unlock_irq+0x30/0x50 [ 147.106991][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 147.107006][ C1] cpu_startup_entry+0x18/0x20 [ 147.107022][ C1] start_secondary+0x200/0x290 [ 147.107034][ C1] ? set_cpu_sibling_map+0x1f20/0x1f20 [ 147.107047][ C1] secondary_startup_64_no_verify+0x167/0x16b [ 147.107069][ C1] [ 147.107240][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g3801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 147.506703][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 147.516663][ C0] rcu: RCU grace-period kthread stack dump: [ 147.522537][ C0] task:rcu_preempt state:R running task stack:28800 pid:16 ppid:2 flags:0x00004000 [ 147.533301][ C0] Call Trace: [ 147.536571][ C0] [ 147.539493][ C0] __schedule+0xc9a/0x5880 [ 147.543913][ C0] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 147.549722][ C0] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 147.555531][ C0] ? io_schedule_timeout+0x150/0x150 [ 147.560811][ C0] ? timer_shutdown_sync+0x20/0x20 [ 147.565929][ C0] schedule+0xde/0x1a0 [ 147.569990][ C0] schedule_timeout+0x14e/0x2b0 [ 147.574838][ C0] ? usleep_range_state+0x1b0/0x1b0 [ 147.580038][ C0] ? collect_expired_timers+0x200/0x200 [ 147.585574][ C0] ? qrtr_node_enqueue+0x730/0x1310 [ 147.590859][ C0] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 147.596664][ C0] ? prepare_to_swait_event+0xf6/0x480 [ 147.602123][ C0] rcu_gp_fqs_loop+0x190/0x910 [ 147.606970][ C0] ? force_qs_rnp+0x820/0x820 [ 147.611667][ C0] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 147.617494][ C0] rcu_gp_kthread+0x23a/0x360 [ 147.622176][ C0] ? rcu_gp_init+0x13d0/0x13d0 [ 147.626946][ C0] ? __kthread_parkme+0x163/0x220 [ 147.631967][ C0] ? rcu_gp_init+0x13d0/0x13d0 [ 147.636729][ C0] kthread+0x344/0x440 [ 147.640794][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 147.646421][ C0] ret_from_fork+0x1f/0x30 [ 147.650846][ C0] [ 147.653861][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 147.660172][ C0] CPU: 0 PID: 10 Comm: kworker/u4:0 Not tainted 6.4.0-syzkaller-12069-gc17414a273b8 #0 [ 147.669798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 147.679849][ C0] Workqueue: events_unbound toggle_allocation_gate [ 147.686347][ C0] RIP: 0010:smp_call_function_many_cond+0x699/0x1720 [ 147.693021][ C0] Code: 0b 00 85 ed 74 48 48 8b 44 24 08 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 ee 53 0b 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 d1 0d 00 00 8b 43 08 31 ff 83 e0 01 41 [ 147.712623][ C0] RSP: 0018:ffffc900000f7948 EFLAGS: 00000293 [ 147.718687][ C0] RAX: 0000000000000000 RBX: ffff8880b9943020 RCX: 0000000000000000 [ 147.726651][ C0] RDX: ffff888016679dc0 RSI: ffffffff81798b82 RDI: 0000000000000005 [ 147.734614][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 147.742574][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017328605 [ 147.750536][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000001 [ 147.758498][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 147.767422][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.773998][ C0] CR2: 00007ffcca5df080 CR3: 000000000c775000 CR4: 0000000000350ef0 [ 147.781964][ C0] Call Trace: [ 147.785232][ C0] [ 147.788073][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x370 [ 147.794397][ C0] ? do_raw_spin_unlock+0x175/0x230 [ 147.799594][ C0] ? rcu_sched_clock_irq+0x1e12/0x3280 [ 147.805058][ C0] ? rcu_note_context_switch+0x1800/0x1800 [ 147.810869][ C0] ? hrtimer_run_queues+0x97/0x440 [ 147.815979][ C0] ? tick_sched_do_timer+0x460/0x460 [ 147.821258][ C0] ? update_process_times+0x11e/0x1a0 [ 147.826632][ C0] ? tick_sched_handle+0x8e/0x170 [ 147.831699][ C0] ? tick_sched_timer+0xee/0x110 [ 147.836626][ C0] ? __hrtimer_run_queues+0x1ca/0xc00 [ 147.841999][ C0] ? enqueue_hrtimer+0x320/0x320 [ 147.846932][ C0] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 147.853001][ C0] ? hrtimer_interrupt+0x320/0x7b0 [ 147.858112][ C0] ? __sysvec_apic_timer_interrupt+0x14a/0x430 [ 147.864263][ C0] ? sysvec_apic_timer_interrupt+0x92/0xc0 [ 147.870065][ C0] [ 147.872986][ C0] [ 147.875908][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.882056][ C0] ? smp_call_function_many_cond+0x692/0x1720 [ 147.888142][ C0] ? smp_call_function_many_cond+0x699/0x1720 [ 147.894205][ C0] ? smp_call_function_many_cond+0x692/0x1720 [ 147.900270][ C0] ? __text_poke+0x890/0x890 [ 147.904853][ C0] ? trace_csd_function_entry+0x1a0/0x1a0 [ 147.910572][ C0] ? apply_relocation+0x630/0x630 [ 147.915591][ C0] ? __text_poke+0x890/0x890 [ 147.920172][ C0] on_each_cpu_cond_mask+0x5a/0xa0 [ 147.925281][ C0] text_poke_bp_batch+0x24f/0x780 [ 147.930296][ C0] ? __kmem_cache_alloc_node+0xd1/0x350 [ 147.935834][ C0] ? arch_jump_label_transform_apply+0x12/0x30 [ 147.941988][ C0] ? do_sync_core+0x30/0x30 [ 147.946487][ C0] ? arch_jump_label_transform_queue+0xa4/0x100 [ 147.952752][ C0] ? __jump_label_update+0x296/0x410 [ 147.958051][ C0] text_poke_finish+0x1a/0x30 [ 147.962722][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 147.968788][ C0] jump_label_update+0x32f/0x410 [ 147.973723][ C0] static_key_enable_cpuslocked+0x1b5/0x270 [ 147.979610][ C0] static_key_enable+0x1a/0x20 [ 147.984367][ C0] toggle_allocation_gate+0xf8/0x230 [ 147.989644][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 147.994838][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.000035][ C0] process_one_work+0xa34/0x16f0 [ 148.004972][ C0] ? lock_sync+0x190/0x190 [ 148.009384][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 148.014754][ C0] ? spin_bug+0x1c0/0x1c0 [ 148.019077][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 148.024099][ C0] worker_thread+0x67d/0x10c0 [ 148.028781][ C0] ? process_one_work+0x16f0/0x16f0 [ 148.033973][ C0] kthread+0x344/0x440 [ 148.038033][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 148.043656][ C0] ret_from_fork+0x1f/0x30 [ 148.048076][ C0]