[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.92' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 852.513212] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 1147.740537] INFO: task syz-executor964:8247 blocked for more than 140 seconds. [ 1147.747992] Not tainted 4.19.207-syzkaller #0 [ 1147.753994] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.762359] syz-executor964 D28184 8247 8132 0x00000004 [ 1147.768059] Call Trace: [ 1147.771033] __schedule+0x887/0x2040 [ 1147.774802] ? io_schedule_timeout+0x140/0x140 [ 1147.779449] ? prepare_to_wait_exclusive+0x2d0/0x2d0 [ 1147.785037] schedule+0x8d/0x1b0 [ 1147.788471] request_wait_answer+0x3dc/0x750 [ 1147.793291] ? flush_bg_queue+0x390/0x390 [ 1147.797505] ? wait_woken+0x250/0x250 [ 1147.801666] __fuse_request_send+0x123/0x1c0 [ 1147.806139] fuse_simple_request+0x2e6/0x820 [ 1147.810901] fuse_access+0x21b/0x2f0 [ 1147.814618] ? fuse_rmdir+0x370/0x370 [ 1147.818417] ? filename_lookup+0x3d5/0x5a0 [ 1147.823028] ? __phys_addr_symbol+0x2c/0x70 [ 1147.827354] ? __check_object_size+0x17b/0x3e0 [ 1147.832325] fuse_permission+0x33c/0x5a0 [ 1147.836386] ? fuse_getattr+0x2e0/0x2e0 [ 1147.840345] inode_permission.part.0+0x276/0x450 [ 1147.845607] inode_permission+0x35/0x140 [ 1147.849682] ksys_chdir+0xc9/0x1d0 [ 1147.853530] ? __ia32_sys_access+0x70/0x70 [ 1147.857766] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1147.863460] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1147.868489] __x64_sys_chdir+0x2d/0x40 [ 1147.872786] do_syscall_64+0xf9/0x620 [ 1147.876605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.882084] RIP: 0033:0x7f82cc34ce39 [ 1147.885809] Code: Bad RIP value. [ 1147.889162] RSP: 002b:00007f82cc2fd208 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1147.897197] RAX: ffffffffffffffda RBX: 00007f82cc3d74c8 RCX: 00007f82cc34ce39 [ 1147.904549] RDX: 00007f82cc34ce39 RSI: 5064a7e0d1041c60 RDI: 00000000200020c0 [ 1147.911883] RBP: 00007f82cc3d74c0 R08: 0000000000000000 R09: 00007f82cc3d74c8 [ 1147.919321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82cc3d74cc [ 1147.926651] R13: 00007fffa5d2aa0f R14: 00007f82cc2fd300 R15: 0000000000022000 [ 1147.934013] INFO: task syz-executor964:8276 blocked for more than 140 seconds. [ 1147.941467] Not tainted 4.19.207-syzkaller #0 [ 1147.946470] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.954494] syz-executor964 D27840 8276 8132 0x00000004 [ 1147.960121] Call Trace: [ 1147.962773] __schedule+0x887/0x2040 [ 1147.966486] ? io_schedule_timeout+0x140/0x140 [ 1147.971124] ? prepare_to_wait_exclusive+0x2d0/0x2d0 [ 1147.976221] schedule+0x8d/0x1b0 [ 1147.979571] request_wait_answer+0x3dc/0x750 [ 1147.984484] ? flush_bg_queue+0x390/0x390 [ 1147.988657] ? wait_woken+0x250/0x250 [ 1147.992532] __fuse_request_send+0x123/0x1c0 [ 1147.996935] fuse_simple_request+0x2e6/0x820 [ 1148.001425] fuse_access+0x21b/0x2f0 [ 1148.005251] ? fuse_rmdir+0x370/0x370 [ 1148.009036] ? filename_lookup+0x3d5/0x5a0 [ 1148.013332] ? __phys_addr_symbol+0x2c/0x70 [ 1148.017657] ? __check_object_size+0x17b/0x3e0 [ 1148.022395] fuse_permission+0x33c/0x5a0 [ 1148.026467] ? fuse_getattr+0x2e0/0x2e0 [ 1148.030506] inode_permission.part.0+0x276/0x450 [ 1148.035257] inode_permission+0x35/0x140 [ 1148.039303] ksys_chdir+0xc9/0x1d0 [ 1148.042906] ? __ia32_sys_access+0x70/0x70 [ 1148.047140] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1148.052569] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1148.057578] __x64_sys_chdir+0x2d/0x40 [ 1148.061517] do_syscall_64+0xf9/0x620 [ 1148.065327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.070617] RIP: 0033:0x7f82cc34ce39 [ 1148.074321] Code: Bad RIP value. [ 1148.077663] RSP: 002b:00007f82cc2fd208 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1148.085428] RAX: ffffffffffffffda RBX: 00007f82cc3d74c8 RCX: 00007f82cc34ce39 [ 1148.092773] RDX: 00007f82cc34ce39 RSI: 5064a7e0d1041c60 RDI: 00000000200020c0 [ 1148.100127] RBP: 00007f82cc3d74c0 R08: 0000000000000000 R09: 00007f82cc3d74c8 [ 1148.107446] R10: 00007f82cc3d74c8 R11: 0000000000000246 R12: 00007f82cc3d74cc [ 1148.114783] R13: 00007fffa5d2aa0f R14: 00007f82cc2fd300 R15: 0000000000022000 [ 1148.122137] INFO: task syz-executor964:8352 blocked for more than 140 seconds. [ 1148.129483] Not tainted 4.19.207-syzkaller #0 [ 1148.134552] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.142580] syz-executor964 D27800 8352 8132 0x00000004 [ 1148.148195] Call Trace: [ 1148.150840] __schedule+0x887/0x2040 [ 1148.154573] ? io_schedule_timeout+0x140/0x140 [ 1148.159142] ? prepare_to_wait_exclusive+0x2d0/0x2d0 [ 1148.164305] schedule+0x8d/0x1b0 [ 1148.167674] request_wait_answer+0x3dc/0x750 [ 1148.172138] ? flush_bg_queue+0x390/0x390 [ 1148.176288] ? wait_woken+0x250/0x250 [ 1148.180081] __fuse_request_send+0x123/0x1c0 [ 1148.184557] fuse_simple_request+0x2e6/0x820 [ 1148.189053] fuse_access+0x21b/0x2f0 [ 1148.192826] ? fuse_rmdir+0x370/0x370 [ 1148.196619] ? filename_lookup+0x3d5/0x5a0 [ 1148.200925] ? __phys_addr_symbol+0x2c/0x70 [ 1148.205248] ? __check_object_size+0x17b/0x3e0 [ 1148.209820] fuse_permission+0x33c/0x5a0 [ 1148.213963] ? fuse_getattr+0x2e0/0x2e0 [ 1148.217938] inode_permission.part.0+0x276/0x450 [ 1148.222757] inode_permission+0x35/0x140 [ 1148.226815] ksys_chdir+0xc9/0x1d0 [ 1148.230335] ? __ia32_sys_access+0x70/0x70 [ 1148.234649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1148.240013] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1148.245089] __x64_sys_chdir+0x2d/0x40 [ 1148.248971] do_syscall_64+0xf9/0x620 [ 1148.252851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.258032] RIP: 0033:0x7f82cc34ce39 [ 1148.261807] Code: Bad RIP value. [ 1148.265169] RSP: 002b:00007f82cc2fd208 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1148.272940] RAX: ffffffffffffffda RBX: 00007f82cc3d74c8 RCX: 00007f82cc34ce39 [ 1148.280295] RDX: 00007f82cc34ce39 RSI: 5064a7e0d1041c60 RDI: 00000000200020c0 [ 1148.287619] RBP: 00007f82cc3d74c0 R08: 0000000000000000 R09: 00007f82cc3d74c8 [ 1148.294952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82cc3d74cc [ 1148.302269] R13: 00007fffa5d2aa0f R14: 00007f82cc2fd300 R15: 0000000000022000 [ 1148.309569] INFO: task syz-executor964:8500 blocked for more than 140 seconds. [ 1148.316996] Not tainted 4.19.207-syzkaller #0 [ 1148.322077] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.330027] syz-executor964 D27592 8500 8132 0x00000004 [ 1148.335701] Call Trace: [ 1148.338304] __schedule+0x887/0x2040 [ 1148.342107] ? io_schedule_timeout+0x140/0x140 [ 1148.346708] ? prepare_to_wait_exclusive+0x2d0/0x2d0 [ 1148.351885] schedule+0x8d/0x1b0 [ 1148.355247] request_wait_answer+0x3dc/0x750 [ 1148.359654] ? flush_bg_queue+0x390/0x390 [ 1148.363909] ? wait_woken+0x250/0x250 [ 1148.367731] __fuse_request_send+0x123/0x1c0 [ 1148.372198] fuse_simple_request+0x2e6/0x820 [ 1148.376600] fuse_access+0x21b/0x2f0 [ 1148.380297] ? fuse_rmdir+0x370/0x370 [ 1148.384203] ? filename_lookup+0x3d5/0x5a0 [ 1148.388450] ? __phys_addr_symbol+0x2c/0x70 [ 1148.392839] ? __check_object_size+0x17b/0x3e0 [ 1148.397416] fuse_permission+0x33c/0x5a0 [ 1148.401537] ? fuse_getattr+0x2e0/0x2e0 [ 1148.405521] inode_permission.part.0+0x276/0x450 [ 1148.410260] inode_permission+0x35/0x140 [ 1148.414392] ksys_chdir+0xc9/0x1d0 [ 1148.417928] ? __ia32_sys_access+0x70/0x70 [ 1148.422315] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1148.427685] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1148.432763] __x64_sys_chdir+0x2d/0x40 [ 1148.436654] do_syscall_64+0xf9/0x620 [ 1148.440527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.445718] RIP: 0033:0x7f82cc34ce39 [ 1148.449412] Code: Bad RIP value. [ 1148.452841] RSP: 002b:00007f82cc2fd208 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1148.460621] RAX: ffffffffffffffda RBX: 00007f82cc3d74c8 RCX: 00007f82cc34ce39 [ 1148.467885] RDX: 00007f82cc34ce39 RSI: 5064a7e0d1041c60 RDI: 00000000200020c0 [ 1148.475206] RBP: 00007f82cc3d74c0 R08: 0000000000000000 R09: 00007f82cc3d74c8 [ 1148.482557] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82cc3d74cc [ 1148.489827] R13: 00007fffa5d2aa0f R14: 00007f82cc2fd300 R15: 0000000000022000 [ 1148.497186] INFO: task syz-executor964:8633 blocked for more than 140 seconds. [ 1148.504667] Not tainted 4.19.207-syzkaller #0 [ 1148.509663] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.517678] syz-executor964 D27944 8633 8132 0x00000004 [ 1148.523395] Call Trace: [ 1148.525977] __schedule+0x887/0x2040 [ 1148.529691] ? io_schedule_timeout+0x140/0x140 [ 1148.534320] ? prepare_to_wait_exclusive+0x2d0/0x2d0 [ 1148.539423] schedule+0x8d/0x1b0 [ 1148.542849] request_wait_answer+0x3dc/0x750 [ 1148.547254] ? flush_bg_queue+0x390/0x390 [ 1148.551453] ? wait_woken+0x250/0x250 [ 1148.555252] __fuse_request_send+0x123/0x1c0 [ 1148.559644] fuse_simple_request+0x2e6/0x820 [ 1148.564111] fuse_access+0x21b/0x2f0 [ 1148.567824] ? fuse_rmdir+0x370/0x370 [ 1148.571670] ? filename_lookup+0x3d5/0x5a0 [ 1148.575901] ? __phys_addr_symbol+0x2c/0x70 [ 1148.580201] ? __check_object_size+0x17b/0x3e0 [ 1148.584850] fuse_permission+0x33c/0x5a0 [ 1148.588989] ? fuse_getattr+0x2e0/0x2e0 [ 1148.593017] inode_permission.part.0+0x276/0x450 [ 1148.597766] inode_permission+0x35/0x140 [ 1148.601915] ksys_chdir+0xc9/0x1d0 [ 1148.605456] ? __ia32_sys_access+0x70/0x70 [ 1148.609677] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1148.615110] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1148.620164] __x64_sys_chdir+0x2d/0x40 [ 1148.624128] do_syscall_64+0xf9/0x620 [ 1148.627943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.633194] RIP: 0033:0x7f82cc34ce39 [ 1148.636903] Code: Bad RIP value. [ 1148.640250] RSP: 002b:00007f82cc2fd208 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1148.648013] RAX: ffffffffffffffda RBX: 00007f82cc3d74c8 RCX: 00007f82cc34ce39 [ 1148.655362] RDX: 00007f82cc34ce39 RSI: 5064a7e0d1041c60 RDI: 00000000200020c0 [ 1148.662682] RBP: 00007f82cc3d74c0 R08: 0000000000000000 R09: 00007f82cc3d74c8 [ 1148.669949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82cc3d74cc [ 1148.677275] R13: 00007fffa5d2aa0f R14: 00007f82cc2fd300 R15: 0000000000022000 [ 1148.684658] [ 1148.684658] Showing all locks held in the system: [ 1148.691039] 1 lock held by khungtaskd/1570: [ 1148.695348] #0: 00000000891295d9 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 1148.704034] [ 1148.705656] ============================================= [ 1148.705656] [ 1148.712812] NMI backtrace for cpu 1 [ 1148.716439] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.207-syzkaller #0 [ 1148.723861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.733194] Call Trace: [ 1148.735766] dump_stack+0x1fc/0x2ef [ 1148.739399] nmi_cpu_backtrace.cold+0x63/0xa2 [ 1148.743891] ? lapic_can_unplug_cpu+0x80/0x80 [ 1148.748373] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 1148.753652] watchdog+0x991/0xe60 [ 1148.757092] ? reset_hung_task_detector+0x30/0x30 [ 1148.761915] kthread+0x33f/0x460 [ 1148.765262] ? kthread_park+0x180/0x180 [ 1148.769218] ret_from_fork+0x24/0x30 [ 1148.773017] Sending NMI from CPU 1 to CPUs 0: [ 1148.777990] NMI backtrace for cpu 0 [ 1148.777996] CPU: 0 PID: 4691 Comm: systemd-journal Not tainted 4.19.207-syzkaller #0 [ 1148.778002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.778006] RIP: 0010:__lock_acquire+0x860/0x3ff0 [ 1148.778018] Code: da 89 d9 48 c1 ea 20 89 d0 41 29 d0 01 da c1 c0 04 44 31 c0 44 8d 04 10 29 c1 c1 c0 06 48 8b 3c 24 31 c8 89 c1 29 c2 44 01 c0 c1 08 31 ca 89 d1 41 29 d0 01 c2 c1 c1 10 89 d6 41 31 c8 44 89 [ 1148.778022] RSP: 0018:ffff8880a13ffb58 EFLAGS: 00000096 [ 1148.778030] RAX: 00000000ffffdb00 RBX: 0000000000000000 RCX: 00000000ffffda6c [ 1148.778035] RDX: 0000000000002594 RSI: ffff8880a13f6dc8 RDI: 0000000000000000 [ 1148.778042] RBP: ffff8880a13f6dea R08: 0000000000000094 R09: 0000000000000000 [ 1148.778047] R10: ffff8880a13f6dc8 R11: 0000000000000000 R12: 0000000000040094 [ 1148.778052] R13: ffff8880a13f6540 R14: ffff8880a13f6de0 R15: 0000000000000001 [ 1148.778058] FS: 00007f3323e0b8c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1148.778062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.778068] CR2: 00007f33211e8000 CR3: 00000000a0c14000 CR4: 00000000001406f0 [ 1148.778072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1148.778077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1148.778080] Call Trace: [ 1148.778084] ? kasan_kmalloc+0x139/0x160 [ 1148.778087] ? kmem_cache_alloc+0x122/0x370 [ 1148.778091] ? prepare_creds+0x39/0x510 [ 1148.778094] ? do_faccessat+0x94/0x7a0 [ 1148.778098] ? mark_held_locks+0xf0/0xf0 [ 1148.778102] ? __add_preferred_console.constprop.0+0x1a0/0x1a0 [ 1148.778106] ? mark_held_locks+0xf0/0xf0 [ 1148.778110] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1148.778114] ? __seccomp_filter+0xe4/0xca0 executing program [ 1148.778117] ? seccomp_send_sigsys+0x1c0/0x1c0 [ 1148.778121] lock_acquire+0x170/0x3c0 [ 1148.778125] ? fs_reclaim_acquire+0xe5/0x130 [ 1148.778128] fs_reclaim_acquire+0x105/0x130 [ 1148.778132] ? fs_reclaim_acquire+0xe5/0x130 [ 1148.778136] kmem_cache_alloc+0x21/0x370 [ 1148.778139] getname_flags+0xce/0x590 [ 1148.778142] user_path_at_empty+0x2a/0x50 [ 1148.778146] do_faccessat+0x248/0x7a0 [ 1148.778150] ? __ia32_sys_fallocate+0x140/0x140 [ 1148.778154] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1148.778158] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1148.778161] ? do_syscall_64+0x21/0x620 [ 1148.778165] do_syscall_64+0xf9/0x620 [ 1148.778169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.778172] RIP: 0033:0x7f33230c69c7 [ 1148.778183] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 1148.778187] RSP: 002b:00007ffe8bf710c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1148.778196] RAX: ffffffffffffffda RBX: 00007ffe8bf73fe0 RCX: 00007f33230c69c7 [ 1148.778201] RDX: 00007f3323b37a00 RSI: 0000000000000000 RDI: 0000557e6773f9a3 [ 1148.778206] RBP: 00007ffe8bf71100 R08: 0000000000000000 R09: 0000000000000000 [ 1148.778211] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1148.778216] R13: 0000000000000000 R14: 00007ffe8bf73fe0 R15: 00007ffe8bf715f0 [ 1148.778524] Kernel panic - not syncing: hung_task: blocked tasks [ 1149.080134] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.207-syzkaller #0 [ 1149.087569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.097024] Call Trace: [ 1149.099604] dump_stack+0x1fc/0x2ef [ 1149.103224] panic+0x26a/0x50e [ 1149.106406] ? __warn_printk+0xf3/0xf3 [ 1149.110273] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1149.115368] ? cpumask_next+0x3c/0x40 [ 1149.119184] ? printk_safe_flush+0xd6/0x120 [ 1149.123499] ? watchdog+0x991/0xe60 [ 1149.127116] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 1149.132566] watchdog+0x9a2/0xe60 [ 1149.136026] ? reset_hung_task_detector+0x30/0x30 [ 1149.140863] kthread+0x33f/0x460 [ 1149.144227] ? kthread_park+0x180/0x180 [ 1149.148201] ret_from_fork+0x24/0x30 [ 1149.152246] Kernel Offset: disabled [ 1149.155916] Rebooting in 86400 seconds..