[[0;32m  OK  [0m] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[[0;32m  OK  [0m] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[[0;32m  OK  [0m] Started Load/Save RF Kill Switch Status.
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [  484.867960][ T6544] block nbd0: shutting down sockets
[  716.237275][   T27] INFO: task syz-executor308:6544 can't die for more than 143 seconds.
[  716.245610][   T27] task:syz-executor308 state:D stack:26784 pid: 6544 ppid:  6543 flags:0x00004004
[  716.254920][   T27] Call Trace:
[  716.258340][   T27]  
[  716.261321][   T27]  __schedule+0x940/0x26f0
[  716.265844][   T27]  ? io_schedule_timeout+0x140/0x140
[  716.271213][   T27]  schedule+0xd2/0x260
[  716.275293][   T27]  schedule_timeout+0x1db/0x2a0
[  716.280228][   T27]  ? usleep_range+0x170/0x170
[  716.284908][   T27]  ? wait_for_completion+0x16c/0x270
[  716.290524][   T27]  ? lock_downgrade+0x6e0/0x6e0
[  716.295462][   T27]  ? do_raw_spin_lock+0x120/0x2b0
[  716.300604][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  716.305568][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  716.310903][   T27]  wait_for_completion+0x174/0x270
[  716.316072][   T27]  ? bit_wait_io_timeout+0x160/0x160
[  716.321457][   T27]  ? flush_workqueue_prep_pwqs+0x290/0x4f0
[  716.327441][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  716.333755][   T27]  ? check_flush_dependency+0x86/0x400
[  716.339309][   T27]  flush_workqueue+0x3ed/0x15b0
[  716.344172][   T27]  ? __dev_printk+0xcf/0xf5
[  716.348804][   T27]  ? dev_err_probe.cold+0x21/0x21
[  716.353841][   T27]  ? check_flush_dependency+0x400/0x400
[  716.359585][   T27]  ? sock_shutdown.cold+0x62/0x6e
[  716.364696][   T27]  nbd_ioctl+0x6d8/0xb10
[  716.369076][   T27]  ? nbd_release+0x160/0x160
[  716.373677][   T27]  ? finish_wait+0x270/0x270
[  716.378510][   T27]  ? find_held_lock+0x2d/0x110
[  716.383310][   T27]  ? nbd_release+0x160/0x160
[  716.388193][   T27]  blkdev_ioctl+0x2a1/0x700
[  716.392799][   T27]  ? blkdev_common_ioctl+0x18f0/0x18f0
[  716.398360][   T27]  block_ioctl+0xfa/0x140
[  716.402954][   T27]  ? blkdev_open+0x2b0/0x2b0
[  716.407981][   T27]  __x64_sys_ioctl+0x193/0x200
[  716.413044][   T27]  do_syscall_64+0x35/0xb0
[  716.417632][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  716.423543][   T27] RIP: 0033:0x7fd8d39a4389
[  716.428427][   T27] RSP: 002b:00007ffcce3d0ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  716.437067][   T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8d39a4389
[  716.445169][   T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  716.453210][   T27] RBP: 0000000000000000 R08: 00007ffcce3d0c88 R09: 00007ffcce3d0c88
[  716.461287][   T27] R10: 00007ffcce3d0c88 R11: 0000000000000246 R12: 00007fd8d39636a0
[  716.469327][   T27] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[  716.477418][   T27]  
[  716.480455][   T27] INFO: task syz-executor308:6544 blocked for more than 143 seconds.
[  716.488584][   T27]       Not tainted 5.15.0-rc4-next-20211008-syzkaller #0
[  716.495717][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  716.504616][   T27] task:syz-executor308 state:D stack:26784 pid: 6544 ppid:  6543 flags:0x00004004
[  716.513946][   T27] Call Trace:
[  716.517320][   T27]  
[  716.520254][   T27]  __schedule+0x940/0x26f0
[  716.524692][   T27]  ? io_schedule_timeout+0x140/0x140
[  716.530076][   T27]  schedule+0xd2/0x260
[  716.534296][   T27]  schedule_timeout+0x1db/0x2a0
[  716.539246][   T27]  ? usleep_range+0x170/0x170
[  716.544105][   T27]  ? wait_for_completion+0x16c/0x270
[  716.549972][   T27]  ? lock_downgrade+0x6e0/0x6e0
[  716.554943][   T27]  ? do_raw_spin_lock+0x120/0x2b0
[  716.560063][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  716.565014][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  716.570287][   T27]  wait_for_completion+0x174/0x270
[  716.575414][   T27]  ? bit_wait_io_timeout+0x160/0x160
[  716.580817][   T27]  ? flush_workqueue_prep_pwqs+0x290/0x4f0
[  716.586842][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  716.593197][   T27]  ? check_flush_dependency+0x86/0x400
[  716.598791][   T27]  flush_workqueue+0x3ed/0x15b0
[  716.603661][   T27]  ? __dev_printk+0xcf/0xf5
[  716.608348][   T27]  ? dev_err_probe.cold+0x21/0x21
[  716.613411][   T27]  ? check_flush_dependency+0x400/0x400
[  716.619065][   T27]  ? sock_shutdown.cold+0x62/0x6e
[  716.624128][   T27]  nbd_ioctl+0x6d8/0xb10
[  716.628498][   T27]  ? nbd_release+0x160/0x160
[  716.633144][   T27]  ? finish_wait+0x270/0x270
[  716.637841][   T27]  ? find_held_lock+0x2d/0x110
[  716.642625][   T27]  ? nbd_release+0x160/0x160
[  716.647276][   T27]  blkdev_ioctl+0x2a1/0x700
[  716.651977][   T27]  ? blkdev_common_ioctl+0x18f0/0x18f0
[  716.657545][   T27]  block_ioctl+0xfa/0x140
[  716.661887][   T27]  ? blkdev_open+0x2b0/0x2b0
[  716.666486][   T27]  __x64_sys_ioctl+0x193/0x200
[  716.671322][   T27]  do_syscall_64+0x35/0xb0
[  716.675751][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  716.681738][   T27] RIP: 0033:0x7fd8d39a4389
[  716.686154][   T27] RSP: 002b:00007ffcce3d0ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  716.694633][   T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8d39a4389
[  716.702703][   T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  716.710777][   T27] RBP: 0000000000000000 R08: 00007ffcce3d0c88 R09: 00007ffcce3d0c88
[  716.718863][   T27] R10: 00007ffcce3d0c88 R11: 0000000000000246 R12: 00007fd8d39636a0
[  716.726833][   T27] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[  716.734912][   T27]  
[  716.738163][   T27] 
[  716.738163][   T27] Showing all locks held in the system:
[  716.745861][   T27] 1 lock held by khungtaskd/27:
[  716.750800][   T27]  #0: ffffffff8bb813a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  716.761016][   T27] 3 locks held by kworker/u4:2/44:
[  716.766159][   T27]  #0: ffff8880b9c39a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x1e/0x30
[  716.776165][   T27]  #1: ffff8880b9c279c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x173/0x490
[  716.787874][   T27]  #2: ffff8880b9c28258 (&base->lock){..-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0
[  716.797382][   T27] 3 locks held by kworker/u5:0/46:
[  716.802490][   T27]  #0: ffff88807be8b138 ((wq_completion)knbd0-recv){+.+.}-{0:0}, at: process_one_work+0x896/0x1690
[  716.813402][   T27]  #1: ffffc9000116fdb0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690
[  716.824647][   T27]  #2: ffff88801c1a4120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_recvmsg+0xbc/0x850
[  716.834188][   T27] 
[  716.836606][   T27] =============================================
[  716.836606][   T27] 
[  716.845075][   T27] NMI backtrace for cpu 1
[  716.849400][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211008-syzkaller #0
[  716.858757][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  716.869247][   T27] Call Trace:
[  716.872527][   T27]  
[  716.875443][   T27]  dump_stack_lvl+0xcd/0x134
[  716.880267][   T27]  nmi_cpu_backtrace.cold+0x47/0x144
[  716.885540][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  716.891002][   T27]  nmi_trigger_cpumask_backtrace+0x1ae/0x220
[  716.897051][   T27]  watchdog+0xcb7/0xed0
[  716.901208][   T27]  ? trace_sched_process_hang+0x280/0x280
[  716.907099][   T27]  kthread+0x405/0x4f0
[  716.911237][   T27]  ? set_kthread_struct+0x130/0x130
[  716.916626][   T27]  ret_from_fork+0x1f/0x30
[  716.921139][   T27]  
[  716.924316][   T27] Sending NMI from CPU 1 to CPUs 0:
[  716.929588][    C0] NMI backtrace for cpu 0
[  716.929600][    C0] CPU: 0 PID: 44 Comm: kworker/u4:2 Not tainted 5.15.0-rc4-next-20211008-syzkaller #0
[  716.929623][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  716.929636][    C0] Workqueue: events_unbound toggle_allocation_gate
[  716.929751][    C0] RIP: 0010:do_raw_spin_unlock+0x147/0x230
[  716.929780][    C0] Code: c1 ea 03 0f b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 92 00 00 00 48 c7 c0 20 6e 9f 8b c7 45 08 ff ff ff ff <48> ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 b7 00
[  716.929800][    C0] RSP: 0018:ffffc9000114f9d0 EFLAGS: 00000246
[  716.929815][    C0] RAX: ffffffff8b9f6e20 RBX: 0000000000000007 RCX: ffffffff815c2670
[  716.929830][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888010db8120
[  716.929843][    C0] RBP: ffff888010db8120 R08: 0000000000000000 R09: ffff888010db8123
[  716.929857][    C0] R10: ffffed10021b7024 R11: 000000000000003f R12: ffff888010db8128
[  716.929870][    C0] R13: ffff888010db8130 R14: 0000000000000f8a R15: ffffffff8bcac5c0
[  716.929885][    C0] FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  716.929905][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  716.929919][    C0] CR2: 00007f7372c12020 CR3: 000000000b88e000 CR4: 00000000003506f0
[  716.929933][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  716.929945][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  716.929958][    C0] Call Trace:
[  716.929963][    C0]  
[  716.929977][    C0]  ? __kmalloc_track_caller+0xc9/0x310
[  716.929998][    C0]  _raw_spin_unlock+0x1a/0x40
[  716.930022][    C0]  __text_poke+0x5d4/0x8c0
[  716.930075][    C0]  ? text_poke_loc_init+0x340/0x340
[  716.930100][    C0]  ? __kmalloc_track_caller+0xc9/0x310
[  716.930123][    C0]  text_poke_bp_batch+0x3d7/0x560
[  716.930148][    C0]  ? mutex_lock_io_nested+0x1150/0x1150
[  716.930175][    C0]  ? alternatives_enable_smp+0xf0/0xf0
[  716.930200][    C0]  ? __jump_label_patch+0x159/0x1b0
[  716.930224][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  716.930250][    C0]  ? __jump_label_update+0x351/0x400
[  716.930302][    C0]  text_poke_finish+0x16/0x30
[  716.930324][    C0]  arch_jump_label_transform_apply+0x13/0x20
[  716.930349][    C0]  jump_label_update+0x1d5/0x430
[  716.930374][    C0]  static_key_enable_cpuslocked+0x1b1/0x260
[  716.930399][    C0]  static_key_enable+0x16/0x20
[  716.930422][    C0]  toggle_allocation_gate+0x100/0x390
[  716.930447][    C0]  ? lock_release+0x720/0x720
[  716.930469][    C0]  ? wake_up_kfence_timer+0x20/0x20
[  716.930500][    C0]  process_one_work+0x9b2/0x1690
[  716.930531][    C0]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  716.930560][    C0]  ? rwlock_bug.part.0+0x90/0x90
[  716.930582][    C0]  ? _raw_spin_lock_irq+0x41/0x50
[  716.930607][    C0]  worker_thread+0x658/0x11f0
[  716.930637][    C0]  ? process_one_work+0x1690/0x1690
[  716.930664][    C0]  kthread+0x405/0x4f0
[  716.930686][    C0]  ? set_kthread_struct+0x130/0x130
[  716.930712][    C0]  ret_from_fork+0x1f/0x30
[  716.930741][    C0]  
[  716.930748][    C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.161 msecs
[  716.931582][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  717.241854][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211008-syzkaller #0
[  717.251232][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  717.261280][   T27] Call Trace:
[  717.264553][   T27]  
[  717.267482][   T27]  dump_stack_lvl+0xcd/0x134
[  717.272108][   T27]  panic+0x2b0/0x6dd
[  717.276159][   T27]  ? __warn_printk+0xf3/0xf3
[  717.280795][   T27]  ? watchdog.cold+0x1b9/0x1de
[  717.285678][   T27]  watchdog.cold+0x1ca/0x1de
[  717.290280][   T27]  ? trace_sched_process_hang+0x280/0x280
[  717.296024][   T27]  kthread+0x405/0x4f0
[  717.300102][   T27]  ? set_kthread_struct+0x130/0x130
[  717.305600][   T27]  ret_from_fork+0x1f/0x30
[  717.310135][   T27]  
[  717.313526][   T27] Kernel Offset: disabled
[  717.317968][   T27] Rebooting in 86400 seconds..