[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 484.867960][ T6544] block nbd0: shutting down sockets [ 716.237275][ T27] INFO: task syz-executor308:6544 can't die for more than 143 seconds. [ 716.245610][ T27] task:syz-executor308 state:D stack:26784 pid: 6544 ppid: 6543 flags:0x00004004 [ 716.254920][ T27] Call Trace: [ 716.258340][ T27] [ 716.261321][ T27] __schedule+0x940/0x26f0 [ 716.265844][ T27] ? io_schedule_timeout+0x140/0x140 [ 716.271213][ T27] schedule+0xd2/0x260 [ 716.275293][ T27] schedule_timeout+0x1db/0x2a0 [ 716.280228][ T27] ? usleep_range+0x170/0x170 [ 716.284908][ T27] ? wait_for_completion+0x16c/0x270 [ 716.290524][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.295462][ T27] ? do_raw_spin_lock+0x120/0x2b0 [ 716.300604][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.305568][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.310903][ T27] wait_for_completion+0x174/0x270 [ 716.316072][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 716.321457][ T27] ? flush_workqueue_prep_pwqs+0x290/0x4f0 [ 716.327441][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.333755][ T27] ? check_flush_dependency+0x86/0x400 [ 716.339309][ T27] flush_workqueue+0x3ed/0x15b0 [ 716.344172][ T27] ? __dev_printk+0xcf/0xf5 [ 716.348804][ T27] ? dev_err_probe.cold+0x21/0x21 [ 716.353841][ T27] ? check_flush_dependency+0x400/0x400 [ 716.359585][ T27] ? sock_shutdown.cold+0x62/0x6e [ 716.364696][ T27] nbd_ioctl+0x6d8/0xb10 [ 716.369076][ T27] ? nbd_release+0x160/0x160 [ 716.373677][ T27] ? finish_wait+0x270/0x270 [ 716.378510][ T27] ? find_held_lock+0x2d/0x110 [ 716.383310][ T27] ? nbd_release+0x160/0x160 [ 716.388193][ T27] blkdev_ioctl+0x2a1/0x700 [ 716.392799][ T27] ? blkdev_common_ioctl+0x18f0/0x18f0 [ 716.398360][ T27] block_ioctl+0xfa/0x140 [ 716.402954][ T27] ? blkdev_open+0x2b0/0x2b0 [ 716.407981][ T27] __x64_sys_ioctl+0x193/0x200 [ 716.413044][ T27] do_syscall_64+0x35/0xb0 [ 716.417632][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.423543][ T27] RIP: 0033:0x7fd8d39a4389 [ 716.428427][ T27] RSP: 002b:00007ffcce3d0ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.437067][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8d39a4389 [ 716.445169][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 716.453210][ T27] RBP: 0000000000000000 R08: 00007ffcce3d0c88 R09: 00007ffcce3d0c88 [ 716.461287][ T27] R10: 00007ffcce3d0c88 R11: 0000000000000246 R12: 00007fd8d39636a0 [ 716.469327][ T27] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 716.477418][ T27] [ 716.480455][ T27] INFO: task syz-executor308:6544 blocked for more than 143 seconds. [ 716.488584][ T27] Not tainted 5.15.0-rc4-next-20211008-syzkaller #0 [ 716.495717][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.504616][ T27] task:syz-executor308 state:D stack:26784 pid: 6544 ppid: 6543 flags:0x00004004 [ 716.513946][ T27] Call Trace: [ 716.517320][ T27] [ 716.520254][ T27] __schedule+0x940/0x26f0 [ 716.524692][ T27] ? io_schedule_timeout+0x140/0x140 [ 716.530076][ T27] schedule+0xd2/0x260 [ 716.534296][ T27] schedule_timeout+0x1db/0x2a0 [ 716.539246][ T27] ? usleep_range+0x170/0x170 [ 716.544105][ T27] ? wait_for_completion+0x16c/0x270 [ 716.549972][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 716.554943][ T27] ? do_raw_spin_lock+0x120/0x2b0 [ 716.560063][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 716.565014][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.570287][ T27] wait_for_completion+0x174/0x270 [ 716.575414][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 716.580817][ T27] ? flush_workqueue_prep_pwqs+0x290/0x4f0 [ 716.586842][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.593197][ T27] ? check_flush_dependency+0x86/0x400 [ 716.598791][ T27] flush_workqueue+0x3ed/0x15b0 [ 716.603661][ T27] ? __dev_printk+0xcf/0xf5 [ 716.608348][ T27] ? dev_err_probe.cold+0x21/0x21 [ 716.613411][ T27] ? check_flush_dependency+0x400/0x400 [ 716.619065][ T27] ? sock_shutdown.cold+0x62/0x6e [ 716.624128][ T27] nbd_ioctl+0x6d8/0xb10 [ 716.628498][ T27] ? nbd_release+0x160/0x160 [ 716.633144][ T27] ? finish_wait+0x270/0x270 [ 716.637841][ T27] ? find_held_lock+0x2d/0x110 [ 716.642625][ T27] ? nbd_release+0x160/0x160 [ 716.647276][ T27] blkdev_ioctl+0x2a1/0x700 [ 716.651977][ T27] ? blkdev_common_ioctl+0x18f0/0x18f0 [ 716.657545][ T27] block_ioctl+0xfa/0x140 [ 716.661887][ T27] ? blkdev_open+0x2b0/0x2b0 [ 716.666486][ T27] __x64_sys_ioctl+0x193/0x200 [ 716.671322][ T27] do_syscall_64+0x35/0xb0 [ 716.675751][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.681738][ T27] RIP: 0033:0x7fd8d39a4389 [ 716.686154][ T27] RSP: 002b:00007ffcce3d0ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.694633][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8d39a4389 [ 716.702703][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 716.710777][ T27] RBP: 0000000000000000 R08: 00007ffcce3d0c88 R09: 00007ffcce3d0c88 [ 716.718863][ T27] R10: 00007ffcce3d0c88 R11: 0000000000000246 R12: 00007fd8d39636a0 [ 716.726833][ T27] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 716.734912][ T27] [ 716.738163][ T27] [ 716.738163][ T27] Showing all locks held in the system: [ 716.745861][ T27] 1 lock held by khungtaskd/27: [ 716.750800][ T27] #0: ffffffff8bb813a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 716.761016][ T27] 3 locks held by kworker/u4:2/44: [ 716.766159][ T27] #0: ffff8880b9c39a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x1e/0x30 [ 716.776165][ T27] #1: ffff8880b9c279c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x173/0x490 [ 716.787874][ T27] #2: ffff8880b9c28258 (&base->lock){..-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 [ 716.797382][ T27] 3 locks held by kworker/u5:0/46: [ 716.802490][ T27] #0: ffff88807be8b138 ((wq_completion)knbd0-recv){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 716.813402][ T27] #1: ffffc9000116fdb0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 716.824647][ T27] #2: ffff88801c1a4120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_recvmsg+0xbc/0x850 [ 716.834188][ T27] [ 716.836606][ T27] ============================================= [ 716.836606][ T27] [ 716.845075][ T27] NMI backtrace for cpu 1 [ 716.849400][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211008-syzkaller #0 [ 716.858757][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.869247][ T27] Call Trace: [ 716.872527][ T27] [ 716.875443][ T27] dump_stack_lvl+0xcd/0x134 [ 716.880267][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 716.885540][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.891002][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 716.897051][ T27] watchdog+0xcb7/0xed0 [ 716.901208][ T27] ? trace_sched_process_hang+0x280/0x280 [ 716.907099][ T27] kthread+0x405/0x4f0 [ 716.911237][ T27] ? set_kthread_struct+0x130/0x130 [ 716.916626][ T27] ret_from_fork+0x1f/0x30 [ 716.921139][ T27] [ 716.924316][ T27] Sending NMI from CPU 1 to CPUs 0: [ 716.929588][ C0] NMI backtrace for cpu 0 [ 716.929600][ C0] CPU: 0 PID: 44 Comm: kworker/u4:2 Not tainted 5.15.0-rc4-next-20211008-syzkaller #0 [ 716.929623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.929636][ C0] Workqueue: events_unbound toggle_allocation_gate [ 716.929751][ C0] RIP: 0010:do_raw_spin_unlock+0x147/0x230 [ 716.929780][ C0] Code: c1 ea 03 0f b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 92 00 00 00 48 c7 c0 20 6e 9f 8b c7 45 08 ff ff ff ff <48> ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 b7 00 [ 716.929800][ C0] RSP: 0018:ffffc9000114f9d0 EFLAGS: 00000246 [ 716.929815][ C0] RAX: ffffffff8b9f6e20 RBX: 0000000000000007 RCX: ffffffff815c2670 [ 716.929830][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888010db8120 [ 716.929843][ C0] RBP: ffff888010db8120 R08: 0000000000000000 R09: ffff888010db8123 [ 716.929857][ C0] R10: ffffed10021b7024 R11: 000000000000003f R12: ffff888010db8128 [ 716.929870][ C0] R13: ffff888010db8130 R14: 0000000000000f8a R15: ffffffff8bcac5c0 [ 716.929885][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 716.929905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.929919][ C0] CR2: 00007f7372c12020 CR3: 000000000b88e000 CR4: 00000000003506f0 [ 716.929933][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.929945][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.929958][ C0] Call Trace: [ 716.929963][ C0] [ 716.929977][ C0] ? __kmalloc_track_caller+0xc9/0x310 [ 716.929998][ C0] _raw_spin_unlock+0x1a/0x40 [ 716.930022][ C0] __text_poke+0x5d4/0x8c0 [ 716.930075][ C0] ? text_poke_loc_init+0x340/0x340 [ 716.930100][ C0] ? __kmalloc_track_caller+0xc9/0x310 [ 716.930123][ C0] text_poke_bp_batch+0x3d7/0x560 [ 716.930148][ C0] ? mutex_lock_io_nested+0x1150/0x1150 [ 716.930175][ C0] ? alternatives_enable_smp+0xf0/0xf0 [ 716.930200][ C0] ? __jump_label_patch+0x159/0x1b0 [ 716.930224][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.930250][ C0] ? __jump_label_update+0x351/0x400 [ 716.930302][ C0] text_poke_finish+0x16/0x30 [ 716.930324][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 716.930349][ C0] jump_label_update+0x1d5/0x430 [ 716.930374][ C0] static_key_enable_cpuslocked+0x1b1/0x260 [ 716.930399][ C0] static_key_enable+0x16/0x20 [ 716.930422][ C0] toggle_allocation_gate+0x100/0x390 [ 716.930447][ C0] ? lock_release+0x720/0x720 [ 716.930469][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 716.930500][ C0] process_one_work+0x9b2/0x1690 [ 716.930531][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 716.930560][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 716.930582][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 716.930607][ C0] worker_thread+0x658/0x11f0 [ 716.930637][ C0] ? process_one_work+0x1690/0x1690 [ 716.930664][ C0] kthread+0x405/0x4f0 [ 716.930686][ C0] ? set_kthread_struct+0x130/0x130 [ 716.930712][ C0] ret_from_fork+0x1f/0x30 [ 716.930741][ C0] [ 716.930748][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.161 msecs [ 716.931582][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 717.241854][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211008-syzkaller #0 [ 717.251232][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.261280][ T27] Call Trace: [ 717.264553][ T27] [ 717.267482][ T27] dump_stack_lvl+0xcd/0x134 [ 717.272108][ T27] panic+0x2b0/0x6dd [ 717.276159][ T27] ? __warn_printk+0xf3/0xf3 [ 717.280795][ T27] ? watchdog.cold+0x1b9/0x1de [ 717.285678][ T27] watchdog.cold+0x1ca/0x1de [ 717.290280][ T27] ? trace_sched_process_hang+0x280/0x280 [ 717.296024][ T27] kthread+0x405/0x4f0 [ 717.300102][ T27] ? set_kthread_struct+0x130/0x130 [ 717.305600][ T27] ret_from_fork+0x1f/0x30 [ 717.310135][ T27] [ 717.313526][ T27] Kernel Offset: disabled [ 717.317968][ T27] Rebooting in 86400 seconds..