[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 1084.530020][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1084.536781][ C0] rcu: 0-...!: (10499 ticks this GP) idle=76d/1/0x4000000000000000 softirq=9206/9206 fqs=0 [ 1084.547162][ C0] (t=10501 jiffies g=12161 q=535) [ 1084.552280][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g12161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1084.563479][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1084.573446][ C0] rcu: RCU grace-period kthread stack dump: [ 1084.579327][ C0] task:rcu_preempt state:R running task stack:28696 pid: 14 ppid: 2 flags:0x00004000 [ 1084.590117][ C0] Call Trace: [ 1084.593401][ C0] [ 1084.596340][ C0] __schedule+0x940/0x26f0 [ 1084.600899][ C0] ? io_schedule_timeout+0x140/0x140 [ 1084.606208][ C0] ? debug_object_destroy+0x210/0x210 [ 1084.611655][ C0] schedule+0xd3/0x270 [ 1084.615749][ C0] schedule_timeout+0x14a/0x2a0 [ 1084.620625][ C0] ? usleep_range+0x170/0x170 [ 1084.625313][ C0] ? destroy_timer_on_stack+0x20/0x20 [ 1084.630757][ C0] ? pci_setup_cardbus+0x272/0x45a [ 1084.635913][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1084.641735][ C0] ? prepare_to_swait_event+0xee/0x470 [ 1084.647251][ C0] rcu_gp_fqs_loop+0x186/0x810 [ 1084.652083][ C0] ? force_qs_rnp+0x760/0x760 [ 1084.656774][ C0] ? rcu_gp_init+0x90b/0x12a0 [ 1084.661474][ C0] rcu_gp_kthread+0x1de/0x320 [ 1084.666162][ C0] ? rcu_gp_init+0x12a0/0x12a0 [ 1084.670948][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1084.678454][ C0] ? __kthread_parkme+0x15f/0x220 [ 1084.683521][ C0] ? rcu_gp_init+0x12a0/0x12a0 [ 1084.688299][ C0] kthread+0x405/0x4f0 [ 1084.692412][ C0] ? set_kthread_struct+0x130/0x130 [ 1084.697626][ C0] ret_from_fork+0x1f/0x30 [ 1084.702125][ C0] [ 1084.705144][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1084.711488][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1084.716698][ C1] NMI backtrace for cpu 1 [ 1084.716707][ C1] CPU: 1 PID: 6548 Comm: syz-executor027 Not tainted 5.15.0-rc2-next-20210924-syzkaller #0 [ 1084.716732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.716743][ C1] RIP: 0010:__orc_find+0x6a/0xf0 [ 1084.716844][ C1] Code: 89 de 49 39 ec 72 4d 4c 89 e0 48 29 e8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 48 8d 5c 85 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 48 [ 1084.716864][ C1] RSP: 0018:ffffc900020bf510 EFLAGS: 00000a06 [ 1084.716881][ C1] RAX: 1ffffffff1bc00c0 RBX: ffffffff8de00600 RCX: ffffffff89400067 [ 1084.716896][ C1] RDX: 0000000000000007 RSI: ffffffff8e7ffc8a RDI: ffffffff8de005f4 [ 1084.716910][ C1] RBP: ffffffff8de005f4 R08: 0000000000000000 R09: ffffffff8e7ffc8a [ 1084.716925][ C1] R10: fffff52000417ed1 R11: 0000000000086089 R12: ffffffff8de00610 [ 1084.716939][ C1] R13: ffffffff8de005f4 R14: ffffffff8de005f4 R15: dffffc0000000000 [ 1084.716954][ C1] FS: 0000555556c6f300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1084.716975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1084.716991][ C1] CR2: 00007fbfeb842140 CR3: 000000017b0ce000 CR4: 00000000001506e0 [ 1084.717005][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1084.717018][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1084.717031][ C1] Call Trace: [ 1084.717036][ C1] [ 1084.717043][ C1] ? arch_stack_walk+0x5c/0xe0 [ 1084.717075][ C1] ? entry_SYSCALL_64_after_hwframe+0x43/0xae [ 1084.717102][ C1] unwind_next_frame+0x32a/0x1ce0 [ 1084.717128][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1084.717156][ C1] ? deref_stack_reg+0x150/0x150 [ 1084.717182][ C1] ? __unwind_start+0x51b/0x800 [ 1084.717205][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 1084.717229][ C1] arch_stack_walk+0x7d/0xe0 [ 1084.717252][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1084.717280][ C1] stack_trace_save+0x8c/0xc0 [ 1084.717302][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 1084.717329][ C1] kasan_save_stack+0x1e/0x50 [ 1084.717371][ C1] ? kasan_save_stack+0x1e/0x50 [ 1084.717390][ C1] ? __kasan_kmalloc+0xa9/0xd0 [ 1084.717410][ C1] ? io_issue_sqe+0x1d9e/0x7430 [ 1084.717467][ C1] ? __io_queue_sqe+0x90/0xb50 [ 1084.717489][ C1] ? io_submit_sqes+0x21be/0x99d0 [ 1084.717512][ C1] ? __do_sys_io_uring_enter+0xf55/0x1f00 [ 1084.717537][ C1] ? do_syscall_64+0x35/0xb0 [ 1084.717585][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1084.717610][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1084.717635][ C1] ? mark_held_locks+0x9f/0xe0 [ 1084.717661][ C1] ? find_held_lock+0x2d/0x110 [ 1084.717687][ C1] ? kmem_cache_alloc_trace+0x42/0x3c0 [ 1084.717736][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1084.717759][ C1] __kasan_kmalloc+0xa9/0xd0 [ 1084.717779][ C1] io_issue_sqe+0x1d9e/0x7430 [ 1084.717809][ C1] ? io_connect+0x6a0/0x6a0 [ 1084.717831][ C1] ? __io_submit_flush_completions+0x3e5/0x790 [ 1084.717859][ C1] ? io_req_free_batch+0xb60/0xb60 [ 1084.717882][ C1] ? mark_held_locks+0x9f/0xe0 [ 1084.717906][ C1] __io_queue_sqe+0x90/0xb50 [ 1084.717929][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1084.717957][ C1] ? io_uring_setup+0x2d90/0x2d90 [ 1084.717980][ C1] ? io_submit_sqes+0x9fd/0x99d0 [ 1084.718008][ C1] io_submit_sqes+0x21be/0x99d0 [ 1084.718041][ C1] ? __do_sys_io_uring_enter+0xf55/0x1f00 [ 1084.718066][ C1] __do_sys_io_uring_enter+0xf55/0x1f00 [ 1084.718095][ C1] ? io_submit_sqes+0x99d0/0x99d0 [ 1084.718119][ C1] ? find_held_lock+0x2d/0x110 [ 1084.718141][ C1] ? __context_tracking_exit+0xb8/0xe0 [ 1084.718165][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1084.718186][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1084.718212][ C1] ? syscall_enter_from_user_mode+0x21/0x70 [ 1084.718238][ C1] do_syscall_64+0x35/0xb0 [ 1084.718263][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1084.718289][ C1] RIP: 0033:0x7fbfeb7d0fb9 [ 1084.718312][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 1084.718333][ C1] RSP: 002b:00007ffe945eef88 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1084.718353][ C1] RAX: ffffffffffffffda RBX: 00000000000d7de4 RCX: 00007fbfeb7d0fb9 [ 1084.718367][ C1] RDX: 0000000000000000 RSI: 00000000000069c1 RDI: 0000000000000003 [ 1084.718380][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1084.718393][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe945eefac [ 1084.718406][ C1] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 1084.718426][ C1] [ 1084.718434][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.736 msecs [ 1084.718695][ C0] NMI backtrace for cpu 0 [ 1085.184992][ C0] CPU: 0 PID: 2575 Comm: kworker/u4:6 Not tainted 5.15.0-rc2-next-20210924-syzkaller #0 [ 1085.194718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.204777][ C0] Workqueue: events_unbound io_ring_exit_work [ 1085.210866][ C0] Call Trace: [ 1085.214149][ C0] [ 1085.216994][ C0] dump_stack_lvl+0xcd/0x134 [ 1085.221625][ C0] nmi_cpu_backtrace.cold+0x47/0x144 [ 1085.227081][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 1085.232320][ C0] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 1085.238406][ C0] rcu_dump_cpu_stacks+0x25e/0x3f0 [ 1085.243538][ C0] rcu_sched_clock_irq.cold+0x9d/0x746 [ 1085.249040][ C0] ? find_held_lock+0x2d/0x110 [ 1085.253813][ C0] ? rcutree_dead_cpu+0x30/0x30 [ 1085.258673][ C0] ? tick_sched_timer+0x2b/0x2d0 [ 1085.263687][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 1085.268561][ C0] update_process_times+0x16d/0x200 [ 1085.273781][ C0] tick_sched_handle+0x9b/0x180 [ 1085.278732][ C0] tick_sched_timer+0x1b0/0x2d0 [ 1085.283623][ C0] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 1085.289265][ C0] __hrtimer_run_queues+0x1c0/0xe50 [ 1085.294576][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1085.300576][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1085.306668][ C0] hrtimer_interrupt+0x31c/0x790 [ 1085.311645][ C0] __sysvec_apic_timer_interrupt+0x146/0x530 [ 1085.317643][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 1085.323292][ C0] [ 1085.326231][ C0] [ 1085.329167][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1085.335165][ C0] RIP: 0010:unwind_next_frame+0xb7/0x1ce0 [ 1085.340906][ C0] Code: fc ff df 48 c7 04 13 00 00 00 00 48 8b 8c 24 98 00 00 00 65 48 2b 0c 25 28 00 00 00 0f 85 4c 15 00 00 48 81 c4 a0 00 00 00 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 4d 8d 66 48 48 b8 00 00 00 00 00 fc [ 1085.360529][ C0] RSP: 0018:ffffc9000b507710 EFLAGS: 00000282 [ 1085.366606][ C0] RAX: 0000000000000001 RBX: ffffffff81648250 RCX: 0000000000000000 [ 1085.374604][ C0] RDX: dffffc0000000000 RSI: ffffc9000b507f28 RDI: 0000000000000001 [ 1085.382579][ C0] RBP: ffffc9000b507f58 R08: ffffffff8dea4be6 R09: 0000000000000001 [ 1085.390552][ C0] R10: fffff520016a0ef3 R11: 0000000000086089 R12: ffffc9000b500000 [ 1085.398527][ C0] R13: ffffc9000b507775 R14: ffffc9000b507740 R15: ffffc9000b507774 [ 1085.406770][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1085.412003][ C0] arch_stack_walk+0x7d/0xe0 [ 1085.416608][ C0] ? ret_from_fork+0x1f/0x30 [ 1085.421212][ C0] ? kfree+0xf6/0x560 [ 1085.425208][ C0] stack_trace_save+0x8c/0xc0 [ 1085.430588][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1085.436400][ C0] ? __lock_acquire+0x162f/0x54a0 [ 1085.441443][ C0] kasan_save_stack+0x1e/0x50 [ 1085.446125][ C0] ? kasan_save_stack+0x1e/0x50 [ 1085.450985][ C0] ? kasan_set_track+0x21/0x30 [ 1085.455765][ C0] ? kasan_set_free_info+0x20/0x30 [ 1085.460889][ C0] ? __kasan_slab_free+0xff/0x130 [ 1085.469657][ C0] ? slab_free_freelist_hook+0x8b/0x1c0 [ 1085.475217][ C0] ? kfree+0xf6/0x560 [ 1085.479245][ C0] ? io_ring_exit_work+0xbaa/0x1980 [ 1085.484470][ C0] ? process_one_work+0x9b2/0x1690 [ 1085.489657][ C0] ? worker_thread+0x658/0x11f0 [ 1085.494520][ C0] ? kthread+0x405/0x4f0 [ 1085.498782][ C0] ? find_held_lock+0x2d/0x110 [ 1085.503555][ C0] ? debug_check_no_obj_freed+0x20c/0x420 [ 1085.509304][ C0] ? mark_held_locks+0x9f/0xe0 [ 1085.514084][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1085.519908][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1085.525131][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1085.530972][ C0] ? debug_check_no_obj_freed+0x20c/0x420 [ 1085.536717][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1085.542971][ C0] kasan_set_track+0x21/0x30 [ 1085.547571][ C0] kasan_set_free_info+0x20/0x30 [ 1085.552526][ C0] __kasan_slab_free+0xff/0x130 [ 1085.557402][ C0] slab_free_freelist_hook+0x8b/0x1c0 [ 1085.562793][ C0] ? io_ring_exit_work+0xbaa/0x1980 [ 1085.568011][ C0] kfree+0xf6/0x560 [ 1085.571839][ C0] ? io_ring_exit_work+0xbb6/0x1980 [ 1085.577062][ C0] io_ring_exit_work+0xbaa/0x1980 [ 1085.582116][ C0] ? io_uring_try_cancel_requests+0xc30/0xc30 [ 1085.588216][ C0] ? io_uring_del_tctx_node+0x350/0x350 [ 1085.593809][ C0] process_one_work+0x9b2/0x1690 [ 1085.598775][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1085.604345][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1085.609348][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 1085.614488][ C0] worker_thread+0x658/0x11f0 [ 1085.619196][ C0] ? process_one_work+0x1690/0x1690 [ 1085.624415][ C0] kthread+0x405/0x4f0 [ 1085.628503][ C0] ? set_kthread_struct+0x130/0x130 [ 1085.633724][ C0] ret_from_fork+0x1f/0x30 [ 1085.638167][ C0]