[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 715.689442][ T1634] INFO: task syz-executor761:8468 blocked for more than 143 seconds. [ 715.697961][ T1634] Not tainted 5.14.0-rc3-syzkaller #0 [ 715.719299][ T1634] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.739396][ T1634] task:syz-executor761 state:D stack:24312 pid: 8468 ppid: 8451 flags:0x00004004 [ 715.749054][ T1634] Call Trace: [ 715.768569][ T1634] __schedule+0x93a/0x26f0 [ 715.773204][ T1634] ? io_schedule_timeout+0x140/0x140 [ 715.778486][ T1634] ? lock_chain_count+0x20/0x20 [ 715.799285][ T1634] schedule+0xd3/0x270 [ 715.803877][ T1634] schedule_timeout+0x1db/0x2a0 [ 715.808724][ T1634] ? usleep_range+0x170/0x170 [ 715.829285][ T1634] ? wait_for_completion+0x16e/0x280 [ 715.834593][ T1634] ? mark_held_locks+0x9f/0xe0 [ 715.849294][ T1634] ? rwlock_bug.part.0+0x90/0x90 [ 715.854419][ T1634] ? _raw_spin_unlock_irq+0x1f/0x40 [ 715.869299][ T1634] wait_for_completion+0x176/0x280 [ 715.874507][ T1634] ? __flush_work+0x4e0/0xad0 [ 715.889290][ T1634] ? bit_wait_io_timeout+0x160/0x160 [ 715.894587][ T1634] ? _raw_spin_unlock_irq+0x1f/0x40 [ 715.909296][ T1634] __flush_work+0x50e/0xad0 [ 715.914010][ T1634] ? queue_delayed_work_on+0x120/0x120 [ 715.939314][ T1634] ? lock_downgrade+0x6e0/0x6e0 [ 715.944285][ T1634] ? flush_workqueue_prep_pwqs+0x510/0x510 [ 715.959300][ T1634] ? queue_work_on+0xda/0x110 [ 715.964073][ T1634] ? lockdep_hardirqs_on+0x79/0x100 [ 715.979275][ T1634] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 715.985527][ T1634] __drain_all_pages+0x47d/0x6c0 [ 715.999287][ T1634] __alloc_pages_slowpath.constprop.0+0x8e5/0x21b0 [ 716.006158][ T1634] ? get_page_from_freelist+0x3c4/0x2f80 [ 716.029285][ T1634] ? warn_alloc+0x120/0x120 [ 716.033901][ T1634] ? __zone_watermark_ok+0x450/0x450 [ 716.039183][ T1634] ? prepare_alloc_pages+0x17b/0x580 [ 716.059278][ T1634] __alloc_pages+0x412/0x500 [ 716.064141][ T1634] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 716.079285][ T1634] ? find_held_lock+0x2d/0x110 [ 716.084243][ T1634] ? lock_downgrade+0x6e0/0x6e0 [ 716.089174][ T1634] ? do_raw_spin_lock+0x120/0x2b0 [ 716.109285][ T1634] alloc_pages+0x18c/0x2a0 [ 716.113993][ T1634] __get_free_pages+0x8/0x40 [ 716.118754][ T1634] kasan_populate_vmalloc_pte+0x25/0x160 [ 716.139297][ T1634] __apply_to_page_range+0x694/0x1080 [ 716.144899][ T1634] ? kasan_poison+0x60/0x60 [ 716.169274][ T1634] ? rwlock_bug.part.0+0x90/0x90 [ 716.174321][ T1634] alloc_vmap_area+0xb2d/0x1e30 [ 716.189291][ T1634] ? free_vmap_area+0x1ad0/0x1ad0 [ 716.194419][ T1634] ? rcu_read_lock_sched_held+0x3a/0x70 [ 716.209281][ T1634] ? trace_kmalloc_node+0x32/0x100 [ 716.214494][ T1634] __get_vm_area_node.constprop.0+0x128/0x380 [ 716.229282][ T1634] __vmalloc_node_range+0x12e/0x960 [ 716.234569][ T1634] ? array_map_alloc+0x285/0x710 [ 716.249278][ T1634] ? array_map_alloc+0x285/0x710 [ 716.254308][ T1634] ? lockdep_hardirqs_on+0x79/0x100 [ 716.269278][ T1634] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 716.275400][ T1634] ? vfree_atomic+0xe0/0xe0 [ 716.289281][ T1634] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 716.295618][ T1634] ? apparmor_capable+0x1d8/0x460 [ 716.319284][ T1634] ? array_map_alloc+0x285/0x710 [ 716.324326][ T1634] __bpf_map_area_alloc+0xd5/0x150 [ 716.339294][ T1634] ? array_map_alloc+0x285/0x710 [ 716.344370][ T1634] array_map_alloc+0x285/0x710 [ 716.349142][ T1634] prog_array_map_alloc+0x1a0/0x290 [ 716.369307][ T1634] ? prog_fd_array_get_ptr+0x80/0x80 [ 716.375096][ T1634] __sys_bpf+0xbc3/0x53b0 [ 716.389332][ T1634] ? bpf_link_get_from_fd+0x110/0x110 [ 716.394982][ T1634] ? find_held_lock+0x2d/0x110 [ 716.409519][ T1634] ? trace_hardirqs_on+0x38/0x1c0 [ 716.414649][ T1634] __x64_sys_bpf+0x75/0xb0 [ 716.429300][ T1634] ? syscall_enter_from_user_mode+0x21/0x70 [ 716.435222][ T1634] do_syscall_64+0x35/0xb0 [ 716.449316][ T1634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.455540][ T1634] RIP: 0033:0x445919 [ 716.469314][ T1634] RSP: 002b:00007fb397e31318 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.477838][ T1634] RAX: ffffffffffffffda RBX: 00000000004ca408 RCX: 0000000000445919 [ 716.509277][ T1634] RDX: 0000000000000040 RSI: 0000000020011fd4 RDI: 0000000000000000 [ 716.517709][ T1634] RBP: 00000000004ca400 R08: 00007fb397e31700 R09: 0000000000000000 [ 716.539490][ T1634] R10: 00007fb397e31700 R11: 0000000000000246 R12: 000000000049a074 [ 716.579274][ T1634] R13: 00007fff4a85ccaf R14: 00007fb397e31400 R15: 0000000000022000 [ 716.587396][ T1634] [ 716.587396][ T1634] Showing all locks held in the system: [ 716.609317][ T1634] 3 locks held by kworker/0:1/7: [ 716.614518][ T1634] 2 locks held by kworker/1:1/26: [ 716.630354][ T1634] 1 lock held by khungtaskd/1634: [ 716.635461][ T1634] #0: ffffffff8b97ba40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 716.659296][ T1634] 1 lock held by khugepaged/1665: [ 716.664432][ T1634] #0: ffffffff8ba5e6a8 (lock#6){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 [ 716.689342][ T1634] 1 lock held by in:imklog/8146: [ 716.694456][ T1634] #0: ffff888029644ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 716.729292][ T1634] 1 lock held by syz-executor761/8468: [ 716.734841][ T1634] #0: ffffffff8ba9d4e8 (pcpu_drain_mutex){+.+.}-{3:3}, at: __drain_all_pages+0x4f/0x6c0 [ 716.759302][ T1634] [ 716.761622][ T1634] ============================================= [ 716.761622][ T1634] [ 716.779282][ T1634] NMI backtrace for cpu 0 [ 716.783695][ T1634] CPU: 0 PID: 1634 Comm: khungtaskd Not tainted 5.14.0-rc3-syzkaller #0 [ 716.792094][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.802128][ T1634] Call Trace: [ 716.805390][ T1634] dump_stack_lvl+0xcd/0x134 [ 716.809973][ T1634] nmi_cpu_backtrace.cold+0x44/0xd7 [ 716.815157][ T1634] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.820347][ T1634] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 716.826317][ T1634] watchdog+0xd0a/0xfc0 [ 716.830460][ T1634] ? reset_hung_task_detector+0x30/0x30 [ 716.835989][ T1634] kthread+0x3e5/0x4d0 [ 716.840215][ T1634] ? set_kthread_struct+0x130/0x130 [ 716.845515][ T1634] ret_from_fork+0x1f/0x30 [ 716.850055][ T1634] Sending NMI from CPU 0 to CPUs 1: [ 716.855691][ C1] NMI backtrace for cpu 1 [ 716.855700][ C1] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 5.14.0-rc3-syzkaller #0 [ 716.855707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.855714][ C1] Workqueue: events prog_array_map_clear_deferred [ 716.855724][ C1] RIP: 0010:__lock_acquire+0x1637/0x54a0 [ 716.855732][ C1] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 f8 06 48 8d 3c c5 a0 28 cd 8f e8 c1 04 61 00 48 0f a3 1d 49 5e 72 0e <0f> 83 fe 02 00 00 48 bd eb 83 b5 80 46 86 c8 61 49 0f af ef 48 c1 [ 716.855743][ C1] RSP: 0018:ffffc90000e0f8e8 EFLAGS: 00000047 [ 716.855751][ C1] RAX: 0000000000000001 RBX: 0000000000000656 RCX: ffffffff815aca4f [ 716.855757][ C1] RDX: fffffbfff1f9a52e RSI: 0000000000000008 RDI: ffffffff8fcd2968 [ 716.855764][ C1] RBP: ffff888011b3c2e2 R08: 0000000000000000 R09: ffffffff8fcd296f [ 716.855770][ C1] R10: fffffbfff1f9a52d R11: 0000000000000000 R12: ffff888011b3c2c0 [ 716.855776][ C1] R13: ffff888011b3b880 R14: 0000000000000000 R15: 38d833c71a517839 [ 716.855783][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 716.855789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.855795][ C1] CR2: 000000000236a2b8 CR3: 0000000036efe000 CR4: 0000000000350ee0 [ 716.855800][ C1] Call Trace: [ 716.855804][ C1] ? finish_task_switch.isra.0+0x232/0xa50 [ 716.855808][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 716.855813][ C1] lock_acquire+0x1ab/0x510 [ 716.855817][ C1] ? fd_array_map_delete_elem+0x120/0x2e0 [ 716.855821][ C1] ? lock_release+0x720/0x720 [ 716.855825][ C1] __mutex_lock+0x12a/0x10a0 [ 716.855829][ C1] ? fd_array_map_delete_elem+0x120/0x2e0 [ 716.855834][ C1] ? fd_array_map_delete_elem+0x120/0x2e0 [ 716.855838][ C1] ? mutex_is_locked+0xe/0x40 [ 716.855842][ C1] ? mutex_lock_io_nested+0xf00/0xf00 [ 716.855847][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 716.855851][ C1] ? wait_for_completion_io+0x280/0x280 [ 716.855856][ C1] fd_array_map_delete_elem+0x120/0x2e0 [ 716.855860][ C1] prog_array_map_clear_deferred+0x10b/0x1b0 [ 716.855865][ C1] ? array_map_free+0x1e0/0x1e0 [ 716.855869][ C1] process_one_work+0x98d/0x1630 [ 716.855873][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 716.855878][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 716.855882][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 716.855887][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 716.855892][ C1] ? move_linked_works+0x1ec/0x2f0 [ 716.855896][ C1] worker_thread+0x658/0x11f0 [ 716.855900][ C1] ? process_one_work+0x1630/0x1630 [ 716.855904][ C1] kthread+0x3e5/0x4d0 [ 716.855907][ C1] ? set_kthread_struct+0x130/0x130 [ 716.855911][ C1] ret_from_fork+0x1f/0x30 [ 716.939289][ T1634] Kernel panic - not syncing: hung_task: blocked tasks [ 717.127932][ T1634] CPU: 0 PID: 1634 Comm: khungtaskd Not tainted 5.14.0-rc3-syzkaller #0 [ 717.136244][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.146282][ T1634] Call Trace: [ 717.149550][ T1634] dump_stack_lvl+0xcd/0x134 [ 717.154221][ T1634] panic+0x306/0x73d [ 717.158108][ T1634] ? __warn_printk+0xf3/0xf3 [ 717.162775][ T1634] ? lapic_can_unplug_cpu+0x80/0x80 [ 717.168136][ T1634] ? preempt_schedule_thunk+0x16/0x18 [ 717.173498][ T1634] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 717.179645][ T1634] ? watchdog.cold+0x5/0x158 [ 717.184403][ T1634] watchdog.cold+0x16/0x158 [ 717.188894][ T1634] ? reset_hung_task_detector+0x30/0x30 [ 717.194429][ T1634] kthread+0x3e5/0x4d0 [ 717.198595][ T1634] ? set_kthread_struct+0x130/0x130 [ 717.203800][ T1634] ret_from_fork+0x1f/0x30 [ 717.215621][ T1634] Kernel Offset: disabled [ 717.220189][ T1634] Rebooting in 86400 seconds..