ci-upstream-kasan-gce-selinux-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-selinux-root/syz-executor2242859498 <...> Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-selinux-root/syz-executor2242859498", ["ci-upstream-kasan-gce-selinux-root/syz-executor2242859498"], 0x7ffe0aebe4e0 /* 10 vars */) = 0 brk(NULL) = 0x55556aa47000 brk(0x55556aa47d80) = 0x55556aa47d80 arch_prctl(ARCH_SET_FS, 0x55556aa47400) = 0 set_tid_address(0x55556aa476d0) = 5624 set_robust_list(0x55556aa476e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-selinux-root/syz-executor2242859498", 4096) = 63 getrandom("\x90\xc5\xae\xe2\x08\xdf\x48\x27", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556aa47d80 brk(0x55556aa68d80) = 0x55556aa68d80 brk(0x55556aa69000) = 0x55556aa69000 mprotect(0x7fbfd37bd000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5625 attached , child_tidptr=0x55556aa476d0) = 5625 [pid 5625] set_robust_list(0x55556aa476e0, 24 [pid 5624] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] <... set_robust_list resumed>) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [] [pid 5624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5625] setpgid(0, 0) = 0 [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5625] write(3, "1000", 4) = 4 [pid 5625] close(3) = 0 [pid 5625] write(1, "executing program\n", 18) = 18 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] rt_sigaction(SIGRT_1, {sa_handler=0x7fbfd3726150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbfd3718420}, NULL, 8) = 0 executing program [pid 5625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbfd36cb000 [pid 5625] mprotect(0x7fbfd36cc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbfd36eb990, parent_tid=0x7fbfd36eb990, exit_signal=0, stack=0x7fbfd36cb000, stack_size=0x202c0, tls=0x7fbfd36eb6c0}ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5626 attached => {parent_tid=[5626]}, 88) = 5626 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5626] set_robust_list(0x7fbfd36eb9a0, 24) = 0 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] mkdirat(AT_FDCWD, "./nfsd", 0777) = 0 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 82.948749][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 82.949118][ T30] audit: type=1400 audit(1788470059.792:129): avc: denied { execmem } for pid=5624 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5626] mount(NULL, "./nfsd", "nfsd", 0, NULL [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... mount resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5626] <... futex resumed>) = 1 [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] mkdirat(AT_FDCWD, "./rpc_pipefs", 0777 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... mkdirat resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [ 83.013848][ T30] audit: type=1400 audit(1788470059.852:130): avc: denied { mounton } for pid=5625 comm="syz-executor224" path="/root/nfsd" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.037812][ T30] audit: type=1400 audit(1788470059.872:131): avc: denied { mount } for pid=5625 comm="syz-executor224" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [pid 5626] mount(NULL, "./rpc_pipefs", "rpc_pipefs", 0, NULL [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... mount resumed>) = 0 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] <... futex resumed>) = 1 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 83.063814][ T30] audit: type=1400 audit(1788470059.902:132): avc: denied { mount } for pid=5625 comm="syz-executor224" name="/" dev="rpc_pipefs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [pid 5626] openat(AT_FDCWD, "./nfsd/versions", O_RDWR) = 3 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] write(3, "-2 -3 +4\n", 9 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... write resumed>) = 9 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5625] <... futex resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./nfsd/portlist", O_RDWR [ 83.094471][ T30] audit: type=1400 audit(1788470059.932:133): avc: denied { search } for pid=5625 comm="syz-executor224" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 83.098282][ T30] audit: type=1400 audit(1788470059.932:134): avc: denied { read write } for pid=5625 comm="syz-executor224" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 83.098314][ T30] audit: type=1400 audit(1788470059.932:135): avc: denied { open } for pid=5625 comm="syz-executor224" path="/root/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... openat resumed>) = 4 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 0 [pid 5626] write(4, "tcp 2049\n", 9) = 9 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./nfsd/threads", O_RDWR) = 5 [ 83.174415][ T30] audit: type=1400 audit(1788470060.012:136): avc: denied { search } for pid=5625 comm="syz-executor224" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [pid 5626] futex(0x7fbfd37c3b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] futex(0x7fbfd37c3b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b68, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5625] futex(0x7fbfd37c3b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 83.227624][ T30] audit: type=1400 audit(1788470060.062:137): avc: denied { search } for pid=5625 comm="syz-executor224" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [pid 5626] write(5, "0\n", 2 [pid 5625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7fbfd37c3b7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbfd36aa000 [pid 5625] mprotect(0x7fbfd36ab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbfd36ca990, parent_tid=0x7fbfd36ca990, exit_signal=0, stack=0x7fbfd36aa000, stack_size=0x202c0, tls=0x7fbfd36ca6c0} => {parent_tid=[5629]}, 88) = 5629 ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5629 attached [pid 5629] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5625] rt_sigprocmask(SIG_SETMASK, [] [pid 5629] <... rseq resumed>) = 0 [pid 5625] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5629] set_robust_list(0x7fbfd36ca9a0, 24 [pid 5625] futex(0x7fbfd37c3b78, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... set_robust_list resumed>) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] <... futex resumed>) = 0 [pid 5629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] futex(0x7fbfd37c3b7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] openat(AT_FDCWD, "./rpc_pipefs/nfsd/cld", O_RDWR) = 6 [pid 5629] futex(0x7fbfd37c3b7c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5629] futex(0x7fbfd37c3b78, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5625] futex(0x7fbfd37c3b78, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7fbfd37c3b7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7fbfd37c3b7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7fbfd37c3b8c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbfd3689000 [pid 5625] mprotect(0x7fbfd368a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbfd36a9990, parent_tid=0x7fbfd36a9990, exit_signal=0, stack=0x7fbfd3689000, stack_size=0x202c0, tls=0x7fbfd36a96c0}ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5630 attached [pid 5630] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5625] <... clone3 resumed> => {parent_tid=[5630]}, 88) = 5630 [pid 5630] set_robust_list(0x7fbfd36a99a0, 24) = 0 [pid 5630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5630] futex(0x7fbfd37c3b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] futex(0x7fbfd37c3b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] <... futex resumed>) = 0 [pid 5625] <... futex resumed>) = 1 [pid 5625] futex(0x7fbfd37c3b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] futex(0x7fbfd37c3b7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5629] futex(0x7fbfd37c3b78, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7fbfd37c3b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7fbfd37c3b78, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... futex resumed>) = 0 [pid 5625] <... futex resumed>) = 1 [pid 5629] read(6 [pid 5625] futex(0x7fbfd37c3b7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... read resumed>, "\x01\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1034) = 1034 [pid 5629] futex(0x7fbfd37c3b7c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5629] futex(0x7fbfd37c3b78, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5630] futex(0x7fbfd37c3b8c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5630] futex(0x7fbfd37c3b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] exit_group(0 [pid 5630] <... futex resumed>) = ? [pid 5629] <... futex resumed>) = ? [pid 5625] <... exit_group resumed>) = ? [pid 5630] +++ exited with 0 +++ [pid 5629] +++ exited with 0 +++ [pid 5624] kill(-5625, SIGKILL) = 0 [pid 5624] kill(5625, SIGKILL) = 0 [pid 5624] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5624] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5624] getdents64(3, 0x55556aa487b0 /* 2 entries */, 32768) = 48 [pid 5624] getdents64(3, 0x55556aa487b0 /* 0 entries */, 32768) = 0 [pid 5624] close(3) = 0 [ 285.978344][ T32] INFO: task syz-executor22 ** replaying previous printk message ** [ 285.978344][ T32] INFO: task syz-executor224:5626 blocked for more than 143 seconds. [ 285.978372][ T32] Not tainted syzkaller #0 [ 285.978395][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.978405][ T32] task:syz-executor224 state:D stack:24312 pid:5626 tgid:5625 ppid:5624 task_flags:0x400140 flags:0x00080802 [ 285.978453][ T32] Call Trace: [ 285.978459][ T32] [ 285.978468][ T32] __schedule+0x1259/0x6920 [ 285.978514][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 285.978540][ T32] ? lock_acquire+0x1d1/0x380 [ 285.978558][ T32] ? __pfx___schedule+0x10/0x10 [ 285.978572][ T32] ? find_held_lock+0x2b/0x80 [ 285.978594][ T32] ? schedule+0x225/0x2c0 [ 285.978612][ T32] schedule+0xdd/0x2c0 [ 285.978628][ T32] schedule_timeout+0x1b2/0x280 [ 285.978651][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 285.978680][ T32] ? mark_held_locks+0x40/0x70 [ 285.978700][ T32] __wait_for_common+0x2e7/0x4c0 [ 285.978717][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 285.978743][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 285.978773][ T32] ? dput.part.0+0x4f/0x240 [ 285.978801][ T32] ? dput+0x24/0x30 [ 285.978822][ T32] ? rpc_queue_upcall+0x2a5/0x530 [ 285.978846][ T32] nfsd4_cld_tracking_init+0x4be/0x10f0 [ 285.978875][ T32] ? __pfx_nfsd4_cld_tracking_init+0x10/0x10 [ 285.978896][ T32] ? net_generic+0x25/0x2a0 [ 285.978926][ T32] nfsd4_client_tracking_init+0xe5/0x1c0 [ 285.978950][ T32] nfs4_state_start_net.cold+0xb7/0x480 [ 285.978971][ T32] ? __init_waitqueue_head+0xca/0x150 [ 285.979003][ T32] nfsd_svc+0x54a/0x7d0 [ 285.979023][ T32] write_threads+0x316/0x600 [ 285.979044][ T32] ? __pfx_write_threads+0x10/0x10 [ 285.979062][ T32] ? __might_fault+0xc5/0x140 [ 285.979086][ T32] ? __might_fault+0xc5/0x140 [ 285.979115][ T32] ? _copy_from_user+0x59/0xd0 [ 285.979140][ T32] ? __pfx_write_threads+0x10/0x10 [ 285.979159][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 285.979178][ T32] vfs_write+0x2aa/0x1050 [ 285.979203][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 285.979221][ T32] ? lock_acquire+0x1d1/0x380 [ 285.979236][ T32] ? __fget_files+0x34/0x3d0 [ 285.979254][ T32] ? __pfx_vfs_write+0x10/0x10 [ 285.979276][ T32] ? find_held_lock+0x2b/0x80 [ 285.979297][ T32] ? __fget_files+0x215/0x3d0 [ 285.979319][ T32] ? __fget_files+0x21f/0x3d0 [ 285.979343][ T32] ksys_write+0x12a/0x250 [ 285.979358][ T32] ? __pfx_ksys_write+0x10/0x10 [ 285.979372][ T32] ? rcu_is_watching+0x13/0xc0 [ 285.979393][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.979408][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.979429][ T32] do_syscall_64+0x123/0x790 [ 285.979449][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.979466][ T32] RIP: 0033:0x7fbfd3713269 [ 285.979480][ T32] RSP: 002b:00007fbfd36eb1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.979495][ T32] RAX: ffffffffffffffda RBX: 00007fbfd37c3b68 RCX: 00007fbfd3713269 [ 285.979506][ T32] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000005 [ 285.979515][ T32] RBP: 00007fbfd37c3b60 R08: 35203a6b63617473 R09: 35203a6b63617473 [ 285.979526][ T32] R10: 35203a6b63617473 R11: 0000000000000246 R12: 00007fbfd3795378 [ 285.979536][ T32] R13: 0000200000000200 R14: 0000200000000500 R15: 00002000000000c0 [ 285.979558][ T32] [ 285.979564][ T32] [ 285.979564][ T32] Showing all locks held in the system: [ 285.979571][ T32] locks held by kworker/u8:1/13: 2, on CPU#0: [ 285.979582][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 285.979630][ T32] #1: ffffc90000127d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 285.979676][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 285.979687][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 285.979728][ T32] #1: ffffffff9bc63c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 285.979777][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 285.979788][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 285.979852][ T32] locks held by getty/5360: 2, on CPU#1: [ 285.979864][ T32] #0: ffff888029f520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 285.979907][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 285.979948][ T32] locks held by syz-executor224/5626: 3, on CPU#1: [ 285.979959][ T32] #0: ffff88802b935970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 285.979999][ T32] #1: ffff888035040460 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 285.980038][ T32] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 285.980078][ T32] [ 285.980081][ T32] ============================================= [ 285.980081][ T32] [ 285.980088][ T32] NMI backtrace for cpu 1 [ 285.980097][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 285.980114][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 285.980123][ T32] Call Trace: [ 285.980128][ T32] [ 285.980134][ T32] dump_stack_lvl+0x100/0x190 [ 285.980157][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 285.980181][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.980199][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 285.980224][ T32] sys_info+0x141/0x190 [ 285.980244][ T32] watchdog+0xcb1/0x1030 [ 285.980266][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.980282][ T32] ? __pfx_watchdog+0x10/0x10 [ 285.980300][ T32] ? __kthread_parkme+0x18f/0x230 [ 285.980320][ T32] ? kthread+0x13a/0x450 [ 285.980339][ T32] ? __pfx_watchdog+0x10/0x10 [ 285.980354][ T32] kthread+0x373/0x450 [ 285.980374][ T32] ? __pfx_kthread+0x10/0x10 [ 285.980396][ T32] ret_from_fork+0x730/0xd60 [ 285.980414][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 285.980432][ T32] ? __switch_to+0x800/0x10f0 [ 285.980453][ T32] ? __pfx_kthread+0x10/0x10 [ 285.980475][ T32] ret_from_fork_asm+0x1a/0x30 [ 285.980501][ T32] [ 285.980507][ T32] Sending NMI from CPU 1 to CPUs 0: [ 285.980524][ C0] NMI backtrace for cpu 0 [ 285.980534][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 285.980549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 285.980556][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 285.980576][ C0] Code: 07 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 1a cf fc eb a2 e8 d1 1a [ 285.980588][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 285.980598][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 285.980607][ C0] RDX: 00000000000003fd RSI: ffffffff85afe8d0 RDI: ffffffff9bc63ca0 [ 285.980615][ C0] RBP: ffffffff9bc63c60 R08: 0000000000000001 R09: 000000000000001f [ 285.980624][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 285.980632][ C0] R13: 0000000000000020 R14: fffffbfff378c7e9 R15: dffffc0000000000 [ 285.980641][ C0] FS: 0000000000000000(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 285.980655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.980664][ C0] CR2: 0000561b47b0e660 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 285.980672][ C0] Call Trace: [ 285.980677][ C0] [ 285.980683][ C0] wait_for_lsr+0x13a/0x210 [ 285.980698][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 285.980713][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 285.980727][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 285.980747][ C0] serial8250_console_write+0xf46/0x1330 [ 285.980765][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 285.980781][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 285.980801][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 285.980823][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 285.980844][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 285.980863][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 285.980882][ C0] ? do_raw_spin_lock+0x90/0x260 [ 285.980900][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 285.980917][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 285.980936][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 285.980955][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 285.980976][ C0] nbcon_kthread_func+0x613/0x7d0 [ 285.980997][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 285.981018][ C0] ? __kthread_parkme+0x18f/0x230 [ 285.981033][ C0] ? kthread+0x13a/0x450 [ 285.981049][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 285.981068][ C0] kthread+0x373/0x450 [ 285.981084][ C0] ? __pfx_kthread+0x10/0x10 [ 285.981101][ C0] ret_from_fork+0x730/0xd60 [ 285.981115][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 285.981130][ C0] ? __switch_to+0x800/0x10f0 [ 285.981146][ C0] ? __pfx_kthread+0x10/0x10 [ 285.981164][ C0] ret_from_fork_asm+0x1a/0x30 [ 285.981181][ C0] [ 285.981523][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 286.851560][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.860658][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 286.870705][ T32] Call Trace: [ 286.873980][ T32] [ 286.876902][ T32] dump_stack_lvl+0x100/0x190 [ 286.881579][ T32] vpanic+0x553/0x970 [ 286.885546][ T32] ? __pfx_vpanic+0x10/0x10 [ 286.890035][ T32] panic+0xd1/0xe0 [ 286.893738][ T32] ? __pfx_panic+0x10/0x10 [ 286.898136][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 286.903154][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 286.909297][ T32] ? watchdog.cold+0x1ec/0x234 [ 286.914045][ T32] watchdog.cold+0x1fd/0x234 [ 286.918621][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.924408][ T32] ? __pfx_watchdog+0x10/0x10 [ 286.929081][ T32] ? __kthread_parkme+0x18f/0x230 [ 286.934091][ T32] ? kthread+0x13a/0x450 [ 286.938317][ T32] ? __pfx_watchdog+0x10/0x10 [ 286.942973][ T32] kthread+0x373/0x450 [ 286.947027][ T32] ? __pfx_kthread+0x10/0x10 [ 286.951605][ T32] ret_from_fork+0x730/0xd60 [ 286.956178][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 286.961274][ T32] ? __switch_to+0x800/0x10f0 [ 286.965939][ T32] ? __pfx_kthread+0x10/0x10 [ 286.970520][ T32] ret_from_fork_asm+0x1a/0x30 [ 286.975273][ T32] [ 286.978461][ T32] Kernel Offset: disabled [ 286.982761][ T32] Rebooting in 86400 seconds..