ci-upstream-net-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-kasan-gce/syz-executor889600304 <...> Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. execve("ci-upstream-net-kasan-gce/syz-executor889600304", ["ci-upstream-net-kasan-gce/syz-executor889600304"], 0x7ffccabdabc0 /* 10 vars */) = 0 brk(NULL) = 0x55555635a000 brk(0x55555635ad80) = 0x55555635ad80 arch_prctl(ARCH_SET_FS, 0x55555635a400) = 0 set_tid_address(0x55555635a6d0) = 5640 set_robust_list(0x55555635a6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-kasan-gce/syz-executor889600304", 4096) = 53 getrandom("\x5c\x2b\xa8\xe2\xcd\x5b\x14\x87", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555635ad80 brk(0x55555637bd80) = 0x55555637bd80 brk(0x55555637c000) = 0x55555637c000 mprotect(0x7ff90f233000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5641 attached , child_tidptr=0x55555635a6d0) = 5641 [pid 5641] set_robust_list(0x55555635a6e0, 24 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] <... set_robust_list resumed>) = 0 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5641] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5642 attached ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5643 attached [pid 5642] set_robust_list(0x55555635a6e0, 24 [pid 5640] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5642 [pid 5642] <... set_robust_list resumed>) = 0 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] set_robust_list(0x55555635a6e0, 24 [pid 5641] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5643 [pid 5643] <... set_robust_list resumed>) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [] [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5642] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5643] <... prctl resumed>) = 0 [pid 5642] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5644 attached [pid 5642] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5640] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5644 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5645 attached [pid 5644] set_robust_list(0x55555635a6e0, 24 [pid 5643] write(3, "1000", 4 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] set_robust_list(0x55555635a6e0, 24 [pid 5644] <... set_robust_list resumed>) = 0 [pid 5643] <... write resumed>) = 4 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] close(3 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5642] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5645 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] <... close resumed>) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5644] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5645] <... prctl resumed>) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 5643] write(1, "executing program\n", 18 [pid 5645] write(3, "1000", 4ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5646 attached [pid 5644] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5643] <... write resumed>) = 18 [pid 5640] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5646 [pid 5646] set_robust_list(0x55555635a6e0, 24 [pid 5645] <... write resumed>) = 4 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] <... set_robust_list resumed>) = 0 [pid 5645] close(3 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] <... close resumed>) = 0 [pid 5643] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] write(1, "executing program\n", 18 [pid 5643] <... socket resumed>) = 3 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5645] <... write resumed>) = 18 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5646] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5645] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERICci-upstream-net-kasan-gce/strace-static-x86_64: Process 5647 attached [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5646] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5645] <... socket resumed>) = 3 executing program [pid 5643] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCHci-upstream-net-kasan-gce/strace-static-x86_64: Process 5649 attached ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5648 attached [pid 5647] set_robust_list(0x55555635a6e0, 24 [pid 5645] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCH [pid 5644] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5647 [pid 5640] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5649 [pid 5649] set_robust_list(0x55555635a6e0, 24 [pid 5648] set_robust_list(0x55555635a6e0, 24 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5646] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5648 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] <... set_robust_list resumed>) = 0 [pid 5648] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5649] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5647] <... prctl resumed>) = 0 [pid 5648] <... prctl resumed>) = 0 [pid 5648] setpgid(0, 0 [pid 5647] setpgid(0, 0 [pid 5649] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5649] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5648] <... setpgid resumed>) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5647] <... setpgid resumed>) = 0 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5650 attached [pid 5648] <... openat resumed>) = 3 executing program [pid 5650] set_robust_list(0x55555635a6e0, 24 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5650] <... set_robust_list resumed>) = 0 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] write(1, "executing program\n", 18 [pid 5647] <... openat resumed>) = 3 [pid 5648] <... write resumed>) = 18 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] <... clone resumed>, child_tidptr=0x55555635a6d0) = 5650 [pid 5648] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5648] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCH [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] write(3, "1000", 4 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... write resumed>) = 4 [pid 5650] <... prctl resumed>) = 0 [pid 5647] close(3 [pid 5650] setpgid(0, 0 [pid 5647] <... close resumed>) = 0 [pid 5650] <... setpgid resumed>) = 0 [pid 5647] write(1, "executing program\n", 18 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5647] <... write resumed>) = 18 [pid 5647] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5650] <... openat resumed>) = 3 executing program [pid 5647] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCH [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] write(1, "executing program\n", 18) = 18 executing program [pid 5650] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5650] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCH [pid 5643] <... sendmsg resumed>) = 20 [pid 5643] socket(AF_NETLINK, SOCK_DGRAM, 0) = 4 [pid 5643] write(4, "\xfc\x00\x00\x00\x1c\x00\x07\x04\xab\x5b\x25\x09\xb8\x68\x03\x00\x02\xab\x08\x7a\x01\x00\x00\x00\x01\x48\x10\x93\x21\x00\x01\xc0\xf0\x03\x05\x84\x05\x00\x60\x10\x00\x00\x00\x00\x00\x03\x98\x15\xfa\x2c\x53\xc2\x86\x48\x00\x00\x00\xb9\xd9\x56\x62\x53\x7a\x00\xbc\x00\x0c\x00\xf0\xff\x7f\x00\x00\xb4\x00\x60\x00\x33\xd4\x40\x00\x04\x05\x60\x91\x6a\x00\x33\xf4\x36\x31\x30\x12\xda\xfd\x5a\x32\xe2\x73\xfc"..., 252) = 252 [pid 5643] exit_group(0) = ? [pid 5643] +++ exited with 0 +++ [pid 5641] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5641] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5653 attached , child_tidptr=0x55555635a6d0) = 5653 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5653] set_robust_list(0x55555635a6e0, 24) = 0 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [ 101.309551][ T5643] netlink: 'syz-executor889': attribute type 12 has an invalid length. [pid 5653] close(3) = 0 executing program [pid 5653] write(1, "executing program\n", 18) = 18 [pid 5653] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5653] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=20, nlmsg_type=0x27 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=74513705, nlmsg_pid=635427836}, "\x06\x00\x00\x00"], iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN}, MSG_DONTROUTE|MSG_NOSIGNAL|MSG_BATCH [pid 5642] kill(-5645, SIGKILL) = 0 [pid 5642] kill(5645, SIGKILL) = 0 [pid 5646] kill(-5648, SIGKILL) = 0 [pid 5646] kill(5648, SIGKILL) = 0 [pid 5644] kill(-5647, SIGKILL) = 0 [pid 5644] kill(5647, SIGKILL) = 0 [pid 5649] kill(-5650, SIGKILL) = 0 [pid 5649] kill(5650, SIGKILL) = 0 [pid 5641] kill(-5653, SIGKILL) = 0 [pid 5641] kill(5653, SIGKILL) = 0 [pid 5642] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5642] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5642] getdents64(3, 0x55555635b7a0 /* 2 entries */, 32768) = 48 [pid 5642] getdents64(3, 0x55555635b7a0 /* 0 entries */, 32768) = 0 [pid 5642] close(3) = 0 [pid 5649] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5649] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5649] getdents64(3, 0x55555635b7a0 /* 2 entries */, 32768) = 48 [pid 5649] getdents64(3, 0x55555635b7a0 /* 0 entries */, 32768) = 0 [pid 5649] close(3) = 0 [pid 5646] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5644] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5646] <... openat resumed>) = 3 [pid 5646] fstat(3 [pid 5644] <... openat resumed>) = 3 [pid 5646] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5644] fstat(3 [pid 5646] getdents64(3 [pid 5644] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5646] <... getdents64 resumed>, 0x55555635b7a0 /* 2 entries */, 32768) = 48 [pid 5646] getdents64(3 [pid 5644] getdents64(3 [pid 5646] <... getdents64 resumed>, 0x55555635b7a0 /* 0 entries */, 32768) = 0 [pid 5646] close(3 [pid 5644] <... getdents64 resumed>, 0x55555635b7a0 /* 2 entries */, 32768) = 48 [pid 5646] <... close resumed>) = 0 [pid 5644] getdents64(3, 0x55555635b7a0 /* 0 entries */, 32768) = 0 [pid 5644] close(3) = 0 [pid 5641] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5641] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5641] getdents64(3, 0x55555635b7a0 /* 2 entries */, 32768) = 48 [pid 5641] getdents64(3, 0x55555635b7a0 /* 0 entries */, 32768) = 0 [pid 5641] close(3) = 0 [ 286.893302][ T31] INFO: task syz-executor889:5647 blocked for more than 143 seconds. [ 286.893325][ T31] Not tainted syzkaller #0 [ 286.893332][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.893337][ T31] task:syz-executor889 state:D stack:27472 pid:5647 tgid:5647 ppid:5644 task_flags:0x400140 flags:0x00080002 [ 286.893375][ T31] Call Trace: [ 286.893382][ T31] [ 286.893391][ T31] __schedule+0x17db/0x58f0 [ 286.893455][ T31] ? __pfx___schedule+0x10/0x10 [ 286.893481][ T31] ? schedule+0x90/0x2b0 [ 286.893513][ T31] schedule+0x164/0x2b0 [ 286.893527][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.893540][ T31] __mutex_lock+0x7c1/0x1550 [ 286.893556][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.893572][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.893594][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.893606][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.893625][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.893640][ T31] ? do_syscall_64+0x166/0x520 [ 286.893653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.893672][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.893691][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.893716][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.893732][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.893753][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.893766][ T31] ? __nla_parse+0x40/0x60 [ 286.893784][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.893799][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.893817][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.893836][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.893858][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.893870][ T31] ? security_capable+0x7e/0x2c0 [ 286.893888][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.893906][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.893920][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.893944][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.893963][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.893977][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.894009][ T31] ? down_read+0x2be/0x330 [ 286.894027][ T31] genl_rcv+0x28/0x40 [ 286.894039][ T31] netlink_unicast+0x7bd/0x940 [ 286.894062][ T31] netlink_sendmsg+0x813/0xb40 [ 286.894086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.894109][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.894122][ T31] ? rcu_is_watching+0x16/0xb0 [ 286.894138][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.894155][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.894176][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.894197][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.894218][ T31] ? import_iovec+0x73/0xa0 [ 286.894243][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.894260][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.894275][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.894320][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.894335][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.894355][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.894376][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.894395][ T31] do_syscall_64+0x166/0x520 [ 286.894409][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.894421][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.894434][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.894449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.894463][ T31] RIP: 0033:0x7ff90f1a0679 [ 286.894475][ T31] RSP: 002b:00007ffd06a9ba98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.894489][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff90f1a0679 [ 286.894505][ T31] RDX: 0000000000044004 RSI: 0000200000000780 RDI: 0000000000000003 [ 286.894514][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.894522][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd06a9bc18 [ 286.894530][ T31] R13: 0000000000000002 R14: 00007ffd06a9bac0 R15: 00007ffd06a9bab0 [ 286.894549][ T31] [ 286.894555][ T31] INFO: task syz-executor889:5648 blocked for more than 143 seconds. [ 286.894564][ T31] Not tainted syzkaller #0 [ 286.894570][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.894576][ T31] task:syz-executor889 state:D stack:27472 pid:5648 tgid:5648 ppid:5646 task_flags:0x400140 flags:0x00080002 [ 286.894608][ T31] Call Trace: [ 286.894613][ T31] [ 286.894620][ T31] __schedule+0x17db/0x58f0 [ 286.894655][ T31] ? __pfx___schedule+0x10/0x10 [ 286.894680][ T31] ? schedule+0x90/0x2b0 [ 286.894693][ T31] schedule+0x164/0x2b0 [ 286.894706][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.894718][ T31] __mutex_lock+0x7c1/0x1550 [ 286.894735][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.894750][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.894767][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.894780][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.894797][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.894812][ T31] ? do_syscall_64+0x166/0x520 [ 286.894829][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.894847][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.894866][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.894891][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.894907][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.894928][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.894941][ T31] ? __nla_parse+0x40/0x60 [ 286.894959][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.894973][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.894992][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.895018][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.895051][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.895063][ T31] ? security_capable+0x7e/0x2c0 [ 286.895081][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.895099][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.895112][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.895136][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.895154][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.895169][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.895195][ T31] ? down_read+0x2be/0x330 [ 286.895217][ T31] genl_rcv+0x28/0x40 [ 286.895230][ T31] netlink_unicast+0x7bd/0x940 [ 286.895253][ T31] netlink_sendmsg+0x813/0xb40 [ 286.895276][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.895299][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.895314][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.895331][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.895351][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.895371][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.895392][ T31] ? import_iovec+0x73/0xa0 [ 286.895409][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.895425][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.895440][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.895484][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.895523][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.895542][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.895563][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.895582][ T31] do_syscall_64+0x166/0x520 [ 286.895595][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.895607][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.895619][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.895634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.895647][ T31] RIP: 0033:0x7ff90f1a0679 [ 286.895657][ T31] RSP: 002b:00007ffd06a9ba98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.895670][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff90f1a0679 [ 286.895679][ T31] RDX: 0000000000044004 RSI: 0000200000000780 RDI: 0000000000000003 [ 286.895687][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.895695][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd06a9bc18 [ 286.895703][ T31] R13: 0000000000000002 R14: 00007ffd06a9bac0 R15: 00007ffd06a9bab0 [ 286.895722][ T31] [ 286.895727][ T31] INFO: task syz-executor889:5650 blocked for more than 143 seconds. [ 286.895736][ T31] Not tainted syzkaller #0 [ 286.895742][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.895747][ T31] task:syz-executor889 state:D stack:26688 pid:5650 tgid:5650 ppid:5649 task_flags:0x400140 flags:0x00080002 [ 286.895779][ T31] Call Trace: [ 286.895783][ T31] [ 286.895791][ T31] __schedule+0x17db/0x58f0 [ 286.895826][ T31] ? __pfx___schedule+0x10/0x10 [ 286.895850][ T31] ? schedule+0x90/0x2b0 [ 286.895864][ T31] schedule+0x164/0x2b0 [ 286.895877][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.895889][ T31] __mutex_lock+0x7c1/0x1550 [ 286.895905][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.895921][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.895937][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.895950][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.895967][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.895982][ T31] ? do_syscall_64+0x166/0x520 [ 286.895994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.896015][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.896034][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.896059][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.896075][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.896095][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.896109][ T31] ? __nla_parse+0x40/0x60 [ 286.896126][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.896140][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.896159][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.896178][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.896199][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.896210][ T31] ? security_capable+0x7e/0x2c0 [ 286.896228][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.896246][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.896259][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.896283][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.896301][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.896316][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.896342][ T31] ? down_read+0x2be/0x330 [ 286.896359][ T31] genl_rcv+0x28/0x40 [ 286.896371][ T31] netlink_unicast+0x7bd/0x940 [ 286.896393][ T31] netlink_sendmsg+0x813/0xb40 [ 286.896416][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.896439][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.896454][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.896471][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.896492][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.896517][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.896539][ T31] ? import_iovec+0x73/0xa0 [ 286.896556][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.896572][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.896587][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.896631][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.896662][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.896682][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.896702][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.896721][ T31] do_syscall_64+0x166/0x520 [ 286.896734][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.896745][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.896758][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.896773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.896785][ T31] RIP: 0033:0x7ff90f1a0679 [ 286.896796][ T31] RSP: 002b:00007ffd06a9ba98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.896808][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff90f1a0679 [ 286.896817][ T31] RDX: 0000000000044004 RSI: 0000200000000780 RDI: 0000000000000003 [ 286.896825][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.896833][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd06a9bc18 [ 286.896840][ T31] R13: 0000000000000002 R14: 00007ffd06a9bac0 R15: 00007ffd06a9bab0 [ 286.896859][ T31] [ 286.896864][ T31] INFO: task syz-executor889:5653 blocked for more than 143 seconds. [ 286.896873][ T31] Not tainted syzkaller #0 [ 286.896879][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.896884][ T31] task:syz-executor889 state:D stack:27472 pid:5653 tgid:5653 ppid:5641 task_flags:0x400140 flags:0x00080002 [ 286.896915][ T31] Call Trace: [ 286.896919][ T31] [ 286.896926][ T31] __schedule+0x17db/0x58f0 [ 286.896961][ T31] ? __pfx___schedule+0x10/0x10 [ 286.896985][ T31] ? schedule+0x90/0x2b0 [ 286.897002][ T31] schedule+0x164/0x2b0 [ 286.897018][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.897029][ T31] __mutex_lock+0x7c1/0x1550 [ 286.897045][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.897061][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.897078][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.897090][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.897108][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.897122][ T31] ? do_syscall_64+0x166/0x520 [ 286.897134][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.897152][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.897171][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.897196][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.897212][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.897232][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.897245][ T31] ? __nla_parse+0x40/0x60 [ 286.897263][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.897277][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.897296][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.897314][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.897336][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.897346][ T31] ? security_capable+0x7e/0x2c0 [ 286.897364][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.897382][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.897395][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.897419][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.897437][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.897452][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.897478][ T31] ? down_read+0x2be/0x330 [ 286.897501][ T31] genl_rcv+0x28/0x40 [ 286.897514][ T31] netlink_unicast+0x7bd/0x940 [ 286.897536][ T31] netlink_sendmsg+0x813/0xb40 [ 286.897559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.897582][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.897596][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.897614][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.897634][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.897653][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.897674][ T31] ? import_iovec+0x73/0xa0 [ 286.897691][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.897707][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.897722][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.897766][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.897805][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.897824][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.897845][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.897863][ T31] do_syscall_64+0x166/0x520 [ 286.897876][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.897888][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.897900][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.897915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.897927][ T31] RIP: 0033:0x7ff90f1a0679 [ 286.897937][ T31] RSP: 002b:00007ffd06a9ba98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.897950][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff90f1a0679 [ 286.897959][ T31] RDX: 0000000000044004 RSI: 0000200000000780 RDI: 0000000000000003 [ 286.897967][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.897974][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000018aed [ 286.897982][ T31] R13: 00007ffd06a9baac R14: 00007ffd06a9bac0 R15: 00007ffd06a9bab0 [ 286.898001][ T31] [ 286.898007][ T31] [ 286.898007][ T31] Showing all locks held in the system: [ 286.898014][ T31] locks held by kworker/u8:1/13: 2, on CPU#0: [ 286.898031][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.898067][ T31] #1: ffffc90000127c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.898104][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 286.898113][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.898164][ T31] locks held by getty/5373: 2, on CPU#1: [ 286.898173][ T31] #0: ffff8880359a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.898208][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 286.898242][ T31] locks held by syz-executor889/5645: 2, on CPU#1: [ 286.898251][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.898280][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.898313][ T31] locks held by syz-executor889/5647: 2, on CPU#0: [ 286.898322][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.898351][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.898383][ T31] locks held by syz-executor889/5648: 2, on CPU#1: [ 286.898391][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.898420][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.898453][ T31] locks held by syz-executor889/5650: 2, on CPU#0: [ 286.898461][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.898490][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.898528][ T31] locks held by syz-executor889/5653: 2, on CPU#0: [ 286.898537][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.898566][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.898598][ T31] [ 286.898601][ T31] ============================================= [ 286.898601][ T31] [ 286.898607][ T31] NMI backtrace for cpu 1 [ 286.898615][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.898630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.898636][ T31] Call Trace: [ 286.898642][ T31] [ 286.898646][ T31] dump_stack_lvl+0xe8/0x150 [ 286.898665][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 286.898682][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.898702][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 286.898720][ T31] sys_info+0x135/0x170 [ 286.898736][ T31] watchdog+0xfd7/0x1030 [ 286.898752][ T31] ? watchdog+0x1c7/0x1030 [ 286.898766][ T31] kthread+0x38b/0x480 [ 286.898779][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.898790][ T31] ? __pfx_kthread+0x10/0x10 [ 286.898802][ T31] ret_from_fork+0x514/0xb70 [ 286.898816][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.898834][ T31] ? __switch_to+0xc89/0x1420 [ 286.898852][ T31] ? __pfx_kthread+0x10/0x10 [ 286.898864][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.898890][ T31] [ 286.898894][ T31] Sending NMI from CPU 1 to CPUs 0: [ 286.898938][ C0] NMI backtrace for cpu 0 [ 286.898953][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 286.898971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.898981][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.899010][ C0] Code: 5c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 51 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 286.899024][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242 [ 286.899041][ C0] RAX: 00000000000d0157 RBX: ffffffff819badbc RCX: 8000000000000001 [ 286.899053][ C0] RDX: 0000000000000001 RSI: ffffffff8e4776a5 RDI: ffffffff8c6d9c80 [ 286.899065][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 286.899077][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 286.899089][ C0] R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 286.899102][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 286.899116][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.899128][ C0] CR2: 000055f4e8355660 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 286.899145][ C0] Call Trace: [ 286.899151][ C0] [ 286.899158][ C0] default_idle+0x9/0x20 [ 286.899178][ C0] default_idle_call+0x72/0xb0 [ 286.899198][ C0] do_idle+0x1cc/0x540 [ 286.899224][ C0] ? __pfx_do_idle+0x10/0x10 [ 286.899253][ C0] cpu_startup_entry+0x43/0x60 [ 286.899268][ C0] rest_init+0x378/0x3a0 [ 286.899289][ C0] ? __pfx_rest_init+0x10/0x10 [ 286.899313][ C0] ? __pfx_kernel_init+0x10/0x10 [ 286.899335][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 286.899360][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 286.899379][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 286.899400][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 286.899435][ C0] start_kernel+0x392/0x3e0 [ 286.899454][ C0] x86_64_start_reservations+0x24/0x30 [ 286.899477][ C0] x86_64_start_kernel+0x137/0x1b0 [ 286.899497][ C0] common_startup_64+0x13e/0x157 [ 286.899525][ C0] [ 286.899916][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.984332][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.993632][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.004119][ T31] Call Trace: [ 289.007454][ T31] [ 289.010396][ T31] vpanic+0x56d/0xa60 [ 289.014404][ T31] ? __pfx_vpanic+0x10/0x10 [ 289.018934][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 289.024535][ T31] panic+0xc5/0xd0 [ 289.028294][ T31] ? __pfx_panic+0x10/0x10 [ 289.032732][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 289.037786][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 289.044155][ T31] watchdog+0x1030/0x1030 [ 289.048514][ T31] ? watchdog+0x1c7/0x1030 [ 289.052969][ T31] kthread+0x38b/0x480 [ 289.057329][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.062139][ T31] ? __pfx_kthread+0x10/0x10 [ 289.066756][ T31] ret_from_fork+0x514/0xb70 [ 289.071622][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 289.076868][ T31] ? __switch_to+0xc89/0x1420 [ 289.081763][ T31] ? __pfx_kthread+0x10/0x10 [ 289.086816][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.091630][ T31] [ 289.095162][ T31] Kernel Offset: disabled [ 289.099517][ T31] Rebooting in 86400 seconds..