INFO: task syz-executor.5:14384 can't die for more than 143 seconds.
task:syz-executor.5 state:D stack:28008 pid:14384 ppid: 3139 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4984 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6265
schedule+0xd2/0x260 kernel/sched/core.c:6338
schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x174/0x270 kernel/sched/completion.c:138
__synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:930
install_new_memslots+0x312/0x570 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1471
kvm_set_memslot+0xdfe/0x1a40 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1605
__kvm_set_memory_region+0xc1c/0x13d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1763
kvm_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1784 [inline]
kvm_vm_ioctl_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1796 [inline]
kvm_vm_ioctl+0x512/0x23d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4371
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f21090368a7
RSP: 002b:00007f21065aa5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00007f21090368a7
RDX: 00007f21065aad30 RSI: 000000004020ae46 RDI: 0000000000000004
RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000
R13: 00007f21065aad30 R14: 0000000000000007 R15: 0000000020006000
INFO: task syz-executor.5:14384 blocked for more than 143 seconds.
Not tainted 5.15.0-next-20211112-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5 state:D stack:28008 pid:14384 ppid: 3139 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:4984 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6265
schedule+0xd2/0x260 kernel/sched/core.c:6338
schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857
do_wait_for_common kernel/sched/completion.c:85 [inline]
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x174/0x270 kernel/sched/completion.c:138
__synchronize_srcu+0x1f2/0x290 kernel/rcu/srcutree.c:930
install_new_memslots+0x312/0x570 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1471
kvm_set_memslot+0xdfe/0x1a40 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1605
__kvm_set_memory_region+0xc1c/0x13d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1763
kvm_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1784 [inline]
kvm_vm_ioctl_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1796 [inline]
kvm_vm_ioctl+0x512/0x23d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4371
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f21090368a7
RSP: 002b:00007f21065aa5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00007f21090368a7
RDX: 00007f21065aad30 RSI: 000000004020ae46 RDI: 0000000000000004
RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000
R13: 00007f21065aad30 R14: 0000000000000007 R15: 0000000020006000
INFO: task syz-executor.5:14401 can't die for more than 145 seconds.
task:syz-executor.5 state:R running task stack:25680 pid:14401 ppid: 3139 flags:0x00004006
Call Trace:
Showing all locks held in the system:
1 lock held by khungtaskd/27:
#0: ffffffff8bb83ba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
1 lock held by in:imklog/6224:
1 lock held by syz-executor.5/14384:
#0: ffffc90005e710a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1783 [inline]
#0: ffffc90005e710a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region arch/x86/kvm/../../../virt/kvm/kvm_main.c:1796 [inline]
#0: ffffc90005e710a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl+0x507/0x23d0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4371
4 locks held by syz-executor.5/14401:
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-next-20211112-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:254 [inline]
watchdog+0xcb7/0xed0 kernel/hung_task.c:339
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 9553 Comm: systemd-udevd Not tainted 5.15.0-next-20211112-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:copy_from_kernel_nofault mm/maccess.c:42 [inline]
RIP: 0010:copy_from_kernel_nofault+0x1b3/0x280 mm/maccess.c:25
Code: 66 8b 03 31 ff 66 41 89 45 00 89 ee e8 86 6d d8 ff 85 ed 0f 85 2c ff ff ff e8 59 6b d8 ff 49 83 c5 02 48 83 c3 02 49 83 ec 02 48 6b d8 ff 31 ff 4c 89 e6 e8 ce 6d d8 ff 4d 85 e4 74 41 e8 34
RSP: 0018:ffffc900054578a0 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff888070da9c5c RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff888036fc9d40 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff819f833c R11: 0000000000000000 R12: 0000000000000001
R13: ffff88803a694ff5 R14: ffff88803a694ff6 R15: ffffc900054579d0
FS: 00007f7d9fc7b8c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc4f64e4000 CR3: 000000006f838000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
prepend_copy+0x22/0x70 fs/d_path.c:49
prepend+0xa9/0x130 fs/d_path.c:75
prepend_name fs/d_path.c:100 [inline]
__prepend_path fs/d_path.c:132 [inline]
prepend_path+0x58e/0xea0 fs/d_path.c:171
d_absolute_path+0xef/0x1a0 fs/d_path.c:233
tomoyo_get_absolute_path security/tomoyo/realpath.c:101 [inline]
tomoyo_realpath_from_path+0x288/0x620 security/tomoyo/realpath.c:276
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x21b/0x400 security/tomoyo/file.c:822
security_inode_getattr+0xcf/0x140 security/security.c:1334
vfs_getattr fs/stat.c:157 [inline]
vfs_fstat+0x43/0xb0 fs/stat.c:182
__do_sys_newfstat+0x81/0x100 fs/stat.c:422
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7d9eaed2e2
Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7
RSP: 002b:00007fff8025eb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 00007f7d9eda8440 RCX: 00007f7d9eaed2e2
RDX: 00007fff8025eb90 RSI: 00007fff8025eb90 RDI: 000000000000000f
RBP: 000055d17c171c90 R08: 0000000000000b40 R09: 000055d17c174ac0
R10: 000055d17c171c90 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000001000 R14: 000055d17c174ac0 R15: 00007fff8025ee50
----------------
Code disassembly (best guess):
0: 66 8b 03 mov (%rbx),%ax
3: 31 ff xor %edi,%edi
5: 66 41 89 45 00 mov %ax,0x0(%r13)
a: 89 ee mov %ebp,%esi
c: e8 86 6d d8 ff callq 0xffd86d97
11: 85 ed test %ebp,%ebp
13: 0f 85 2c ff ff ff jne 0xffffff45
19: e8 59 6b d8 ff callq 0xffd86b77
1e: 49 83 c5 02 add $0x2,%r13
22: 48 83 c3 02 add $0x2,%rbx
26: 49 83 ec 02 sub $0x2,%r12
* 2a: e8 48 6b d8 ff callq 0xffd86b77 <-- trapping instruction
2f: 31 ff xor %edi,%edi
31: 4c 89 e6 mov %r12,%rsi
34: e8 ce 6d d8 ff callq 0xffd86e07
39: 4d 85 e4 test %r12,%r12
3c: 74 41 je 0x7f
3e: e8 .byte 0xe8
3f: 34 .byte 0x34