./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor953963187 <...> Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. execve("./syz-executor953963187", ["./syz-executor953963187"], 0x7ffcd2732670 /* 10 vars */) = 0 brk(NULL) = 0x5555566e5000 brk(0x5555566e5d00) = 0x5555566e5d00 arch_prctl(ARCH_SET_FS, 0x5555566e5380) = 0 set_tid_address(0x5555566e5650) = 5013 set_robust_list(0x5555566e5660, 24) = 0 rseq(0x5555566e5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor953963187", 4096) = 27 getrandom("\x6c\x36\xe4\x0f\x93\x06\xa4\xed", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555566e5d00 brk(0x555556706d00) = 0x555556706d00 brk(0x555556707000) = 0x555556707000 mprotect(0x7fdafd448000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566e5650) = 5014 ./strace-static-x86_64: Process 5014 attached [pid 5014] set_robust_list(0x5555566e5660, 24) = 0 [pid 5014] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] setsid() = 1 [pid 5014] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5014] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5014] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [ 78.937005][ T26] audit: type=1400 audit(1692584696.920:83): avc: denied { write } for pid=5010 comm="strace-static-x" path="pipe:[29675]" dev="pipefs" ino=29675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [pid 5014] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5014] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5014] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5014] unshare(CLONE_NEWNS) = 0 [pid 5014] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5014] unshare(CLONE_NEWIPC) = 0 [pid 5014] unshare(CLONE_NEWCGROUP) = 0 [pid 5014] unshare(CLONE_NEWUTS) = 0 [pid 5014] unshare(CLONE_SYSVSEM) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "16777216", 8) = 8 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "536870912", 9) = 9 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1024", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "8192", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1024", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1024", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5014] close(3) = 0 [pid 5014] getpid() = 1 [pid 5014] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< f2 eb b6 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 188.493968][ C1] RSP: 0018:ffffc900003e8be8 EFLAGS: 00000046 [ 188.493983][ C1] RAX: fffffbfff1d55db2 RBX: fffffbfff1d55db3 RCX: ffffffff816630f7 [ 188.493997][ C1] RDX: fffffbfff1d55db3 RSI: 0000000000000008 RDI: ffffffff8eaaed90 [ 188.494010][ C1] RBP: fffffbfff1d55db2 R08: 0000000000000000 R09: fffffbfff1d55db2 [ 188.494022][ C1] R10: ffffffff8eaaed97 R11: 000000000000004e R12: 0000000000000001 [ 188.494034][ C1] R13: 0000000000000000 R14: ffffffff9235e458 R15: 0000000000000000 [ 188.494046][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 188.494065][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.494079][ C1] CR2: 0000000020000600 CR3: 000000000c776000 CR4: 00000000003506e0 [ 188.494091][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.494103][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.494114][ C1] Call Trace: [ 188.494120][ C1] [ 188.494127][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 188.494147][ C1] ? kasan_check_range+0x10d/0x190 [ 188.494165][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 188.494193][ C1] ? nmi_handle+0x145/0x400 [ 188.494216][ C1] ? kasan_check_range+0x10d/0x190 [ 188.494234][ C1] ? default_do_nmi+0x69/0x160 [ 188.494256][ C1] ? exc_nmi+0x171/0x1e0 [ 188.494276][ C1] ? end_repeat_nmi+0x16/0x31 [ 188.494299][ C1] ? lock_acquire+0xb7/0x510 [ 188.494321][ C1] ? kasan_check_range+0x10d/0x190 [ 188.494339][ C1] ? kasan_check_range+0x10d/0x190 [ 188.494357][ C1] ? kasan_check_range+0x10d/0x190 [ 188.494375][ C1] [ 188.494385][ C1] [ 188.494391][ C1] lock_acquire+0xb7/0x510 [ 188.494413][ C1] ? lock_sync+0x190/0x190 [ 188.494435][ C1] ? debug_object_activate+0x11b/0x490 [ 188.494458][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 188.494481][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 188.494507][ C1] _raw_spin_lock_irqsave+0x3a/0x50 [ 188.494535][ C1] ? debug_object_activate+0x1a4/0x490 [ 188.494558][ C1] debug_object_activate+0x1a4/0x490 [ 188.494581][ C1] ? lock_acquire+0x1ae/0x510 [ 188.494603][ C1] ? debug_object_destroy+0x210/0x210 [ 188.494626][ C1] ? do_raw_spin_lock+0x12e/0x2b0 [ 188.494651][ C1] ? spin_bug+0x1d0/0x1d0 [ 188.494674][ C1] ? enqueue_hrtimer+0x23/0x310 [ 188.494696][ C1] enqueue_hrtimer+0x23/0x310 [ 188.494718][ C1] __hrtimer_run_queues+0xa0a/0xc10 [ 188.494742][ C1] ? enqueue_hrtimer+0x310/0x310 [ 188.494763][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 188.494792][ C1] hrtimer_interrupt+0x31b/0x800 [ 188.494817][ C1] __sysvec_apic_timer_interrupt+0x14a/0x430 [ 188.494840][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 188.494865][ C1] [ 188.494870][ C1] [ 188.494876][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.494898][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 188.494927][ C1] Code: 81 e1 00 01 00 00 65 48 8b 14 25 c0 b9 03 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 04 16 00 00 85 c0 74 2b 8b 82 e0 15 00 00 <83> f8 02 75 20 48 8b 8a e8 15 00 00 8b 92 e4 15 00 00 48 8b 01 48 [ 188.494945][ C1] RSP: 0018:ffffc900003cfbe8 EFLAGS: 00000246 [ 188.494959][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 188.494971][ C1] RDX: ffff88801a6440c0 RSI: ffffffff8868cf2e RDI: 0000000000000005 [ 188.494984][ C1] RBP: ffff888029200000 R08: 0000000000000005 R09: 0000000000000000 [ 188.494995][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000ba81 [ 188.495007][ C1] R13: dffffc0000000000 R14: 0000000000017503 R15: 0000000000040000 [ 188.495020][ C1] ? gc_worker+0x9fe/0x17f0 [ 188.495047][ C1] ? gc_worker+0xeb4/0x17f0 [ 188.495072][ C1] gc_worker+0x9fe/0x17f0 [ 188.495098][ C1] ? lock_sync+0x190/0x190 [ 188.495120][ C1] ? nf_conntrack_in+0x1850/0x1850 [ 188.495145][ C1] ? spin_bug+0x1d0/0x1d0 [ 188.495169][ C1] process_one_work+0xaa2/0x16f0 [ 188.495193][ C1] ? mld_report_work+0xcb0/0xcb0 [ 188.495212][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 188.495234][ C1] ? spin_bug+0x1d0/0x1d0 [ 188.495259][ C1] worker_thread+0x687/0x1110 [ 188.495282][ C1] ? process_one_work+0x16f0/0x16f0 [ 188.495304][ C1] kthread+0x33a/0x430 [ 188.495321][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 188.495341][ C1] ret_from_fork+0x2c/0x70 [ 188.495363][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 188.495388][ C1] ret_from_fork_asm+0x11/0x20 [ 188.495417][ C1] [ 188.495424][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.586 msecs [ 188.495835][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g6977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 189.006764][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 189.016777][ C0] rcu: RCU grace-period kthread stack dump: [ 189.022769][ C0] task:rcu_preempt state:R running task stack:28672 pid:15 ppid:2 flags:0x00004000 [ 189.033604][ C0] Call Trace: [ 189.036989][ C0] [ 189.040019][ C0] __schedule+0xee1/0x59f0 [ 189.044894][ C0] ? io_schedule_timeout+0x150/0x150 [ 189.050370][ C0] ? timer_fixup_activate+0x2b0/0x2b0 [ 189.055764][ C0] schedule+0xe7/0x1b0 [ 189.060030][ C0] schedule_timeout+0x157/0x2c0 [ 189.064992][ C0] ? usleep_range_state+0x1a0/0x1a0 [ 189.070584][ C0] ? destroy_timer_on_stack+0x20/0x20 [ 189.076157][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 189.082164][ C0] ? prepare_to_swait_event+0xf5/0x470 [ 189.087646][ C0] rcu_gp_fqs_loop+0x1ec/0xa50 [ 189.092953][ C0] ? force_qs_rnp+0x8d0/0x8d0 [ 189.097644][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 189.103216][ C0] rcu_gp_kthread+0x249/0x380 [ 189.107998][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 189.112779][ C0] ? __kthread_parkme+0x152/0x220 [ 189.118174][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 189.124428][ C0] kthread+0x33a/0x430 [ 189.128511][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 189.134169][ C0] ret_from_fork+0x2c/0x70 [ 189.138832][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 189.144487][ C0] ret_from_fork_asm+0x11/0x20 [ 189.149360][ C0] [ 189.152396][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 189.158825][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.5.0-rc7-syzkaller-g706a74159504 #0 [ 189.168389][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 189.178454][ C0] Workqueue: events_unbound toggle_allocation_gate [ 189.185068][ C0] RIP: 0010:smp_call_function_many_cond+0x4d6/0x1570 [ 189.191765][ C0] Code: 0b 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 dc 5e 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 3c 0e 00 00 8b 43 08 31 [ 189.211394][ C0] RSP: 0018:ffffc900002ff938 EFLAGS: 00000293 [ 189.217664][ C0] RAX: 0000000000000000 RBX: ffff8880b9941860 RCX: 0000000000000000 [ 189.225649][ C0] RDX: ffff88801925e200 RSI: ffffffff8179c1e4 RDI: 0000000000000005 [ 189.233813][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 189.241882][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed101732830d [ 189.249872][ C0] R13: 0000000000000001 R14: ffff8880b983d5c0 R15: ffff8880b9941868 [ 189.257861][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 189.266996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.273860][ C0] CR2: 00005555566e5650 CR3: 000000000c776000 CR4: 00000000003506f0 [ 189.282106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.290172][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.298430][ C0] Call Trace: [ 189.301888][ C0] [ 189.304744][ C0] ? rcu_check_gp_kthread_starvation+0x272/0x370 [ 189.311615][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 189.317107][ C0] ? rcu_sched_clock_irq+0x1fc6/0x2fb0 [ 189.322595][ C0] ? rcu_note_context_switch+0x1ac0/0x1ac0 [ 189.328611][ C0] ? hrtimer_run_queues+0x97/0x440 [ 189.334090][ C0] ? rcu_read_lock_sched_held+0x3a/0x70 [ 189.339657][ C0] ? tick_sched_do_timer+0x2e0/0x2e0 [ 189.345054][ C0] ? update_process_times+0x17b/0x220 [ 189.350527][ C0] ? timer_clear_idle+0xa0/0xa0 [ 189.355661][ C0] ? update_wall_time+0x1c/0x40 [ 189.360567][ C0] ? tick_sched_handle+0x8e/0x170 [ 189.365700][ C0] ? tick_sched_timer+0xe9/0x110 [ 189.370663][ C0] ? __hrtimer_run_queues+0x647/0xc10 [ 189.376229][ C0] ? enqueue_hrtimer+0x310/0x310 [ 189.381192][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 189.387283][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 189.392676][ C0] ? __sysvec_apic_timer_interrupt+0x14a/0x430 [ 189.399021][ C0] ? sysvec_apic_timer_interrupt+0x8e/0xc0 [ 189.404850][ C0] [ 189.407789][ C0] [ 189.410860][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.417380][ C0] ? smp_call_function_many_cond+0x4d4/0x1570 [ 189.423561][ C0] ? smp_call_function_many_cond+0x4d6/0x1570 [ 189.429733][ C0] ? smp_call_function_many_cond+0x4d4/0x1570 [ 189.435816][ C0] ? __text_poke+0x8a0/0x8a0 [ 189.440421][ C0] ? generic_smp_call_function_single_interrupt+0x20/0x20 [ 189.447838][ C0] ? apply_relocation+0x680/0x680 [ 189.452871][ C0] ? rcu_is_watching+0x12/0xb0 [ 189.457707][ C0] ? __text_poke+0x8a0/0x8a0 [ 189.462427][ C0] ? __kmem_cache_alloc_node+0xbc/0x470 [ 189.467994][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 189.473149][ C0] text_poke_bp_batch+0x250/0x780 [ 189.478274][ C0] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 189.483842][ C0] ? do_sync_core+0x30/0x30 [ 189.488450][ C0] ? __jump_label_patch+0x26c/0x340 [ 189.493758][ C0] ? arch_jump_label_transform_queue+0xa3/0x100 [ 189.500022][ C0] text_poke_finish+0x1a/0x30 [ 189.504800][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 189.510980][ C0] jump_label_update+0x32e/0x410 [ 189.516015][ C0] static_key_enable_cpuslocked+0x1b5/0x270 [ 189.521921][ C0] static_key_enable+0x1a/0x20 [ 189.526704][ C0] toggle_allocation_gate+0xf4/0x250 [ 189.532003][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 189.537309][ C0] ? spin_bug+0x1d0/0x1d0 [ 189.541661][ C0] process_one_work+0xaa2/0x16f0 [ 189.546618][ C0] ? lock_sync+0x190/0x190 [ 189.551050][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 189.556441][ C0] ? spin_bug+0x1d0/0x1d0 [ 189.560789][ C0] worker_thread+0x687/0x1110 [ 189.565490][ C0] ? process_one_work+0x16f0/0x16f0 [ 189.571052][ C0] kthread+0x33a/0x430 [ 189.575228][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 189.580883][ C0] ret_from_fork+0x2c/0x70 [ 189.585409][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 189.591068][ C0] ret_from_fork_asm+0x11/0x20 [ 189.595883][ C0]