ci-upstream-net-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-kasan-gce/syz-executor3284286983 <...> Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. execve("ci-upstream-net-kasan-gce/syz-executor3284286983", ["ci-upstream-net-kasan-gce/syz-executor3284286983"], 0x7ffd9586b3b0 /* 10 vars */) = 0 brk(NULL) = 0x5555579d5000 brk(0x5555579d5d80) = 0x5555579d5d80 arch_prctl(ARCH_SET_FS, 0x5555579d5400) = 0 set_tid_address(0x5555579d56d0) = 5640 set_robust_list(0x5555579d56e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-kasan-gce/syz-executor3284286983", 4096) = 54 getrandom("\x19\xa5\x11\xc0\x6e\x67\x7d\x7f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555579d5d80 brk(0x5555579f6d80) = 0x5555579f6d80 brk(0x5555579f7000) = 0x5555579f7000 mprotect(0x7fbc27a25000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5641 attached , child_tidptr=0x5555579d56d0) = 5641 [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5641] set_robust_list(0x5555579d56e0, 24 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5641] <... set_robust_list resumed>) = 0 [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5641] rt_sigprocmask(SIG_SETMASK, []ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5642 attached , NULL, 8) = 0 [pid 5640] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5642 [pid 5642] set_robust_list(0x5555579d56e0, 24 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5642] <... set_robust_list resumed>) = 0 [pid 5641] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5642] rt_sigprocmask(SIG_BLOCK, ~[]ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5643 attached , [], 8) = 0 [pid 5643] set_robust_list(0x5555579d56e0, 24 [pid 5642] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5643] <... set_robust_list resumed>) = 0 [pid 5641] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5643 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5644 attached [pid 5643] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] rt_sigprocmask(SIG_SETMASK, []ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5645 attached [pid 5640] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5645 [pid 5644] set_robust_list(0x5555579d56e0, 24 [pid 5643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] set_robust_list(0x5555579d56e0, 24 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5644] <... set_robust_list resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] <... prctl resumed>) = 0 [pid 5643] setpgid(0, 0 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] <... setpgid resumed>) = 0 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... prctl resumed>) = 0 [pid 5643] <... openat resumed>) = 3 [pid 5642] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5644 [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] setpgid(0, 0 [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5644] <... setpgid resumed>) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5643] write(3, "1000", 4 [pid 5645] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5644] <... openat resumed>) = 3 [pid 5643] <... write resumed>) = 4 [pid 5643] close(3) = 0 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5646 attached [pid 5640] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5646 [pid 5645] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5644] write(3, "1000", 4 executing program [pid 5643] write(1, "executing program\n", 18 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] set_robust_list(0x5555579d56e0, 24 [pid 5643] <... write resumed>) = 18 [pid 5644] <... write resumed>) = 4 [pid 5644] close(3) = 0 [pid 5643] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5644] write(1, "executing program\n", 18 [pid 5643] <... socket resumed>) = 3 [pid 5646] <... set_robust_list resumed>) = 0 executing program [pid 5644] <... write resumed>) = 18 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] <... socket resumed>) = 3 [pid 5643] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=7388457, nlmsg_pid=635427836}, "\x00\x00\x00\x00\x00\x00\x00\x00\x20\x11\x02\x00\x91\x85\x06\x00\x08\x00\x1b\x00\x00\x00\x00\x00"], iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_DONTWAIT|MSG_MORE}, MSG_DONTROUTE|MSG_CONFIRM|MSG_ZEROCOPYci-upstream-net-kasan-gce/strace-static-x86_64: Process 5647 attached [pid 5640] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5644] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=7388457, nlmsg_pid=635427836}, "\x00\x00\x00\x00\x00\x00\x00\x00\x20\x11\x02\x00\x91\x85\x06\x00\x08\x00\x1b\x00\x00\x00\x00\x00"], iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_DONTWAIT|MSG_MORE}, MSG_DONTROUTE|MSG_CONFIRM|MSG_ZEROCOPY [pid 5640] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5647] set_robust_list(0x5555579d56e0, 24 [pid 5646] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5645] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5647 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5648 attached [pid 5646] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci-upstream-net-kasan-gce/strace-static-x86_64: Process 5650 attached [pid 5640] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5648 [pid 5648] set_robust_list(0x5555579d56e0, 24 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] <... clone resumed>, child_tidptr=0x5555579d56d0) = 5650 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] set_robust_list(0x5555579d56e0, 24 [pid 5647] <... openat resumed>) = 3 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5647] write(3, "1000", 4 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] <... set_robust_list resumed>) = 0 [ 107.031502][ T5643] lo: entered promiscuous mode [ 107.043023][ T5643] bond0: entered promiscuous mode [ 107.044040][ T5643] dummy0: entered promiscuous mode [ 107.048406][ T5643] eql: entered promiscuous mode [ 107.060151][ T5643] ifb0: entered promiscuous mode [ 107.072700][ T5643] ifb1: entered promiscuous mode [ 107.079220][ T5643] virtio_net virtio1 eth0: entered promiscuous mode [ 107.106196][ T5643] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 107.125556][ T5643] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 107.131021][ T5643] hwsim0: entered promiscuous mode [ 107.131249][ T5643] ieee802154 phy0 wpan0: entered promiscuous mode [ 107.131330][ T5643] ieee802154 phy1 wpan1: entered promiscuous mode [ 107.131409][ T5643] teql0: entered promiscuous mode [ 107.131590][ T5643] tunl0: entered promiscuous mode [ 107.131773][ T5643] gre0: entered promiscuous mode [ 107.131856][ T5643] gretap0: entered promiscuous mode [ 107.131933][ T5643] erspan0: entered promiscuous mode [ 107.135271][ T5643] ip_vti0: entered promiscuous mode [ 107.135764][ T5643] ip6_vti0: entered promiscuous mode [ 107.135951][ T5643] sit0: entered promiscuous mode [ 107.136104][ T5643] ip6tnl0: entered promiscuous mode [ 107.136253][ T5643] ip6gre0: entered promiscuous mode [ 107.136332][ T5643] lapb0: entered promiscuous mode [ 107.136411][ T5643] lapb1: entered promiscuous mode [ 107.138509][ T5643] lapb2: entered promiscuous mode [ 107.138583][ T5643] lapb3: entered promiscuous mode [ 107.138649][ T5643] lapb4: entered promiscuous mode [ 107.138715][ T5643] lapb5: entered promiscuous mode [ 286.338122][ T31] INFO: task syz-executor328:5644 blocked for more than 143 seconds. [ 286.338163][ T31] Not tainted syzkaller #0 [ 286.338169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.338177][ T31] task:syz-executor328 state:D stack:26720 pid:5644 tgid:5644 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 286.338222][ T31] Call Trace: [ 286.338229][ T31] [ 286.338240][ T31] __schedule+0x17db/0x58f0 [ 286.338289][ T31] ? __pfx___schedule+0x10/0x10 [ 286.338307][ T31] ? schedule+0x90/0x2b0 [ 286.338320][ T31] schedule+0x164/0x2b0 [ 286.338334][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.338346][ T31] __mutex_lock+0x7c1/0x1550 [ 286.338362][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.338377][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.338395][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.338407][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.338422][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.338435][ T31] ? do_syscall_64+0x166/0x520 [ 286.338448][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.338491][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.338507][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.338528][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.338541][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.338553][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.338564][ T31] ? __nla_parse+0x40/0x60 [ 286.338579][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.338592][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.338608][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.338625][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.338644][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.338654][ T31] ? security_capable+0x7e/0x2c0 [ 286.338669][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.338685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.338697][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.338722][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.338739][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.338752][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.338775][ T31] ? down_read+0x2be/0x330 [ 286.338791][ T31] genl_rcv+0x28/0x40 [ 286.338802][ T31] netlink_unicast+0x7bd/0x940 [ 286.338822][ T31] netlink_sendmsg+0x813/0xb40 [ 286.338837][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.338852][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.338862][ T31] ? rcu_is_watching+0x16/0xb0 [ 286.338876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.338885][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.338899][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.338915][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.338934][ T31] ? import_iovec+0x73/0xa0 [ 286.338949][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.338965][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.338978][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.339017][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.339030][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.339042][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.339060][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.339076][ T31] do_syscall_64+0x166/0x520 [ 286.339089][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.339099][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.339109][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.339122][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.339132][ T31] RIP: 0033:0x7fbc279926f9 [ 286.339146][ T31] RSP: 002b:00007fff99a75978 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.339157][ T31] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007fbc279926f9 [ 286.339164][ T31] RDX: 0000000014044804 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.339170][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.339176][ T31] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff99a75af8 [ 286.339183][ T31] R13: 0000000000000002 R14: 00007fff99a759a0 R15: 00007fff99a75990 [ 286.339198][ T31] [ 286.339207][ T31] INFO: task syz-executor328:5647 blocked for more than 143 seconds. [ 286.339214][ T31] Not tainted syzkaller #0 [ 286.339219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.339224][ T31] task:syz-executor328 state:D stack:26720 pid:5647 tgid:5647 ppid:5645 task_flags:0x400140 flags:0x00080002 [ 286.339256][ T31] Call Trace: [ 286.339259][ T31] [ 286.339265][ T31] __schedule+0x17db/0x58f0 [ 286.339292][ T31] ? __pfx___schedule+0x10/0x10 [ 286.339308][ T31] ? schedule+0x90/0x2b0 [ 286.339322][ T31] schedule+0x164/0x2b0 [ 286.339335][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.339346][ T31] __mutex_lock+0x7c1/0x1550 [ 286.339362][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.339376][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.339390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.339402][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.339416][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.339429][ T31] ? do_syscall_64+0x166/0x520 [ 286.339440][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.339460][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.339475][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.339496][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.339509][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.339520][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.339531][ T31] ? __nla_parse+0x40/0x60 [ 286.339546][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.339558][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.339575][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.339591][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.339609][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.339618][ T31] ? security_capable+0x7e/0x2c0 [ 286.339633][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.339648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.339660][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.339680][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.339695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.339708][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.339730][ T31] ? down_read+0x2be/0x330 [ 286.339746][ T31] genl_rcv+0x28/0x40 [ 286.339757][ T31] netlink_unicast+0x7bd/0x940 [ 286.339777][ T31] netlink_sendmsg+0x813/0xb40 [ 286.339792][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.339806][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.339816][ T31] ? rcu_is_watching+0x16/0xb0 [ 286.339828][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.339837][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.339849][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.339865][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.339883][ T31] ? import_iovec+0x73/0xa0 [ 286.339897][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.339911][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.339923][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.339965][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.339979][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.339991][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.340008][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.340024][ T31] do_syscall_64+0x166/0x520 [ 286.340036][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.340049][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.340059][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.340071][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.340081][ T31] RIP: 0033:0x7fbc279926f9 [ 286.340089][ T31] RSP: 002b:00007fff99a75978 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.340099][ T31] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007fbc279926f9 [ 286.340106][ T31] RDX: 0000000014044804 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.340112][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.340118][ T31] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff99a75af8 [ 286.340124][ T31] R13: 0000000000000002 R14: 00007fff99a759a0 R15: 00007fff99a75990 [ 286.340139][ T31] [ 286.340143][ T31] INFO: task syz-executor328:5650 blocked for more than 143 seconds. [ 286.340150][ T31] Not tainted syzkaller #0 [ 286.340155][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.340159][ T31] task:syz-executor328 state:D stack:26720 pid:5650 tgid:5650 ppid:5646 task_flags:0x400140 flags:0x00080002 [ 286.340186][ T31] Call Trace: [ 286.340189][ T31] [ 286.340195][ T31] __schedule+0x17db/0x58f0 [ 286.340226][ T31] ? __pfx___schedule+0x10/0x10 [ 286.340242][ T31] ? schedule+0x90/0x2b0 [ 286.340255][ T31] schedule+0x164/0x2b0 [ 286.340268][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.340280][ T31] __mutex_lock+0x7c1/0x1550 [ 286.340295][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.340310][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.340324][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.340336][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.340351][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.340363][ T31] ? do_syscall_64+0x166/0x520 [ 286.340375][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.340390][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.340406][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.340427][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.340439][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.340454][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.340466][ T31] ? __nla_parse+0x40/0x60 [ 286.340480][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.340492][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.340509][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.340525][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.340544][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.340553][ T31] ? security_capable+0x7e/0x2c0 [ 286.340567][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.340582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.340594][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.340614][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.340629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.340642][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.340664][ T31] ? down_read+0x2be/0x330 [ 286.340680][ T31] genl_rcv+0x28/0x40 [ 286.340691][ T31] netlink_unicast+0x7bd/0x940 [ 286.340711][ T31] netlink_sendmsg+0x813/0xb40 [ 286.340726][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.340740][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.340750][ T31] ? rcu_is_watching+0x16/0xb0 [ 286.340762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.340771][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.340783][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.340799][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.340817][ T31] ? import_iovec+0x73/0xa0 [ 286.340831][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.340845][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.340857][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.340895][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.340908][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.340920][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.340938][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.340955][ T31] do_syscall_64+0x166/0x520 [ 286.340968][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.340977][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.340987][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.340999][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.341009][ T31] RIP: 0033:0x7fbc279926f9 [ 286.341017][ T31] RSP: 002b:00007fff99a75978 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.341027][ T31] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007fbc279926f9 [ 286.341033][ T31] RDX: 0000000014044804 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.341040][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.341045][ T31] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff99a75af8 [ 286.341051][ T31] R13: 0000000000000002 R14: 00007fff99a759a0 R15: 00007fff99a75990 [ 286.341067][ T31] [ 286.341071][ T31] INFO: task syz-executor328:5651 blocked for more than 143 seconds. [ 286.341078][ T31] Not tainted syzkaller #0 [ 286.341082][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.341086][ T31] task:syz-executor328 state:D stack:26720 pid:5651 tgid:5651 ppid:5648 task_flags:0x400140 flags:0x00080002 [ 286.341112][ T31] Call Trace: [ 286.341116][ T31] [ 286.341121][ T31] __schedule+0x17db/0x58f0 [ 286.341147][ T31] ? __pfx___schedule+0x10/0x10 [ 286.341164][ T31] ? schedule+0x90/0x2b0 [ 286.341177][ T31] schedule+0x164/0x2b0 [ 286.341190][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.341202][ T31] __mutex_lock+0x7c1/0x1550 [ 286.341217][ T31] ? __mutex_lock+0x5d4/0x1550 [ 286.341232][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.341246][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.341257][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.341272][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 286.341284][ T31] ? do_syscall_64+0x166/0x520 [ 286.341296][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.341310][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.341326][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.341347][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.341359][ T31] ? trace_kmalloc+0x2a/0xf0 [ 286.341370][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 286.341381][ T31] ? __nla_parse+0x40/0x60 [ 286.341396][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 286.341408][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 286.341424][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 286.341440][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.341464][ T31] ? bpf_lsm_capable+0x9/0x20 [ 286.341473][ T31] ? security_capable+0x7e/0x2c0 [ 286.341487][ T31] genl_rcv_msg+0x614/0x7a0 [ 286.341503][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.341515][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 286.341534][ T31] netlink_rcv_skb+0x226/0x4a0 [ 286.341550][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.341563][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.341585][ T31] ? down_read+0x2be/0x330 [ 286.341601][ T31] genl_rcv+0x28/0x40 [ 286.341612][ T31] netlink_unicast+0x7bd/0x940 [ 286.341631][ T31] netlink_sendmsg+0x813/0xb40 [ 286.341645][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.341660][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.341672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.341681][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 286.341693][ T31] ____sys_sendmsg+0x54e/0x850 [ 286.341709][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.341727][ T31] ? import_iovec+0x73/0xa0 [ 286.341741][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.341754][ T31] ? __lock_acquire+0x747/0x2de0 [ 286.341766][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.341805][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 286.341818][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.341830][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.341847][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 286.341863][ T31] do_syscall_64+0x166/0x520 [ 286.341875][ T31] ? trace_irq_disable+0x3b/0x140 [ 286.341884][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.341894][ T31] ? clear_bhb_loop+0x70/0xc0 [ 286.341906][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.341916][ T31] RIP: 0033:0x7fbc279926f9 [ 286.341924][ T31] RSP: 002b:00007fff99a75978 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.341933][ T31] RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007fbc279926f9 [ 286.341940][ T31] RDX: 0000000014044804 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.341946][ T31] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.341953][ T31] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff99a75af8 [ 286.341960][ T31] R13: 0000000000000002 R14: 00007fff99a759a0 R15: 00007fff99a75990 [ 286.341976][ T31] [ 286.341983][ T31] [ 286.341983][ T31] Showing all locks held in the system: [ 286.341989][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 286.341996][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.342024][ T31] locks held by kworker/u8:3/45: 2, on CPU#1: [ 286.342031][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.342058][ T31] #1: ffffc90000b57c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.342101][ T31] locks held by getty/5370: 2, on CPU#1: [ 286.342108][ T31] #0: ffff8880357f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.342137][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 286.342166][ T31] locks held by syz-executor328/5643: 2, on CPU#0: [ 286.342175][ T31] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.342200][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.342225][ T31] locks held by syz-executor328/5644: 2, on CPU#0: [ 286.342232][ T31] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.342256][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.342281][ T31] locks held by syz-executor328/5647: 2, on CPU#0: [ 286.342288][ T31] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.342312][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.342337][ T31] locks held by syz-executor328/5650: 2, on CPU#0: [ 286.342344][ T31] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.342368][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.342393][ T31] locks held by syz-executor328/5651: 2, on CPU#0: [ 286.342400][ T31] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.342424][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 286.342449][ T31] [ 286.342456][ T31] ============================================= [ 286.342456][ T31] [ 286.342464][ T31] NMI backtrace for cpu 1 [ 286.342477][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.342488][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.342493][ T31] Call Trace: [ 286.342497][ T31] [ 286.342501][ T31] dump_stack_lvl+0xe8/0x150 [ 286.342516][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 286.342528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.342543][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 286.342555][ T31] sys_info+0x135/0x170 [ 286.342565][ T31] watchdog+0xfd7/0x1030 [ 286.342578][ T31] ? watchdog+0x1c7/0x1030 [ 286.342591][ T31] kthread+0x38b/0x480 [ 286.342601][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.342609][ T31] ? __pfx_kthread+0x10/0x10 [ 286.342619][ T31] ret_from_fork+0x514/0xb70 [ 286.342631][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.342640][ T31] ? __switch_to+0xc89/0x1420 [ 286.342655][ T31] ? __pfx_kthread+0x10/0x10 [ 286.342665][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.342686][ T31] [ 286.342690][ T31] Sending NMI from CPU 1 to CPUs 0: [ 286.342738][ C0] NMI backtrace for cpu 0 [ 286.342752][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 286.342772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.342782][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.342809][ C0] Code: 9c 87 02 e9 83 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 81 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 286.342824][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242 [ 286.342840][ C0] RAX: 00000000000cf457 RBX: ffffffff819bbb9c RCX: 8000000000000001 [ 286.342854][ C0] RDX: 0000000000000001 RSI: ffffffff8e417316 RDI: ffffffff8c6dac80 [ 286.342867][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 286.342881][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 286.342894][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 286.342909][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 286.342924][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.342937][ C0] CR2: 00005593d17b4978 CR3: 0000000077990000 CR4: 00000000003526f0 [ 286.342958][ C0] Call Trace: [ 286.342965][ C0] [ 286.342971][ C0] default_idle+0x9/0x20 [ 286.342999][ C0] default_idle_call+0x72/0xb0 [ 286.343026][ C0] do_idle+0x1cc/0x540 [ 286.343045][ C0] ? __pfx_do_idle+0x10/0x10 [ 286.343066][ C0] cpu_startup_entry+0x43/0x60 [ 286.343083][ C0] rest_init+0x378/0x3a0 [ 286.343100][ C0] ? __pfx_rest_init+0x10/0x10 [ 286.343121][ C0] ? __pfx_kernel_init+0x10/0x10 [ 286.343139][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 286.343168][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 286.343191][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 286.343215][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 286.343247][ C0] start_kernel+0x392/0x3e0 [ 286.343267][ C0] x86_64_start_reservations+0x24/0x30 [ 286.343292][ C0] x86_64_start_kernel+0x137/0x1b0 [ 286.343316][ C0] common_startup_64+0x13e/0x157 [ 286.343346][ C0] [ 286.343940][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.370353][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.379436][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.389559][ T31] Call Trace: [ 288.392831][ T31] [ 288.395749][ T31] vpanic+0x56d/0xa60 [ 288.399719][ T31] ? __pfx___schedule+0x10/0x10 [ 288.404558][ T31] ? __pfx_vpanic+0x10/0x10 [ 288.409049][ T31] panic+0xc5/0xd0 [ 288.412750][ T31] ? __pfx_panic+0x10/0x10 [ 288.417151][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 288.422588][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 288.427943][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 288.434073][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 288.440206][ T31] watchdog+0x1030/0x1030 [ 288.444516][ T31] ? watchdog+0x1c7/0x1030 [ 288.448909][ T31] kthread+0x38b/0x480 [ 288.452956][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.457622][ T31] ? __pfx_kthread+0x10/0x10 [ 288.462202][ T31] ret_from_fork+0x514/0xb70 [ 288.466769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.471855][ T31] ? __switch_to+0xc89/0x1420 [ 288.476512][ T31] ? __pfx_kthread+0x10/0x10 [ 288.481077][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.485827][ T31] [ 288.489141][ T31] Kernel Offset: disabled [ 288.493474][ T31] Rebooting in 86400 seconds..