[ 37.493828] audit: type=1800 audit(1547953316.404:27): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.513019] audit: type=1800 audit(1547953316.404:28): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.068859] audit: type=1800 audit(1547953317.044:29): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 38.087939] audit: type=1800 audit(1547953317.054:30): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.108' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 676.350304] print_req_error: I/O error, dev loop1, sector 64 flags 0 [ 676.362824] print_req_error: I/O error, dev loop1, sector 256 flags 0 [ 676.369723] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 676.396394] print_req_error: I/O error, dev loop1, sector 512 flags 0 [ 676.403531] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 676.412946] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 676.420818] UDF-fs: Scanning with blocksize 512 failed [ 676.427938] print_req_error: I/O error, dev loop1, sector 64 flags 0 [ 676.447032] print_req_error: I/O error, dev loop1, sector 512 flags 0 [ 676.453849] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 676.470159] print_req_error: I/O error, dev loop1, sector 1024 flags 0 [ 676.478433] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 676.522377] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.651953] INFO: task syz-executor408:7735 blocked for more than 140 seconds. [ 832.659566] Not tainted 5.0.0-rc2+ #34 [ 832.665061] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.673194] syz-executor408 D26776 7735 7730 0x00000004 [ 832.679276] Call Trace: [ 832.682177] __schedule+0x897/0x1e60 [ 832.685954] ? kasan_check_read+0x11/0x20 [ 832.690111] ? pci_mmcfg_check_reserved+0x170/0x170 [ 832.695349] ? __rwsem_down_write_failed_common+0xa37/0x1620 [ 832.701162] ? mark_held_locks+0xb1/0x100 [ 832.705507] ? _raw_spin_unlock_irq+0x28/0x90 [ 832.710012] schedule+0xfe/0x350 [ 832.713540] ? kasan_check_read+0x11/0x20 [ 832.717693] ? __schedule+0x1e60/0x1e60 [ 832.721708] ? trace_hardirqs_off_caller+0x300/0x300 [ 832.726985] ? do_raw_spin_trylock+0x270/0x270 [ 832.731583] __rwsem_down_write_failed_common+0xa4d/0x1620 [ 832.737392] ? rwsem_spin_on_owner+0x600/0x600 [ 832.742169] ? ___might_sleep+0x1e7/0x310 [ 832.746341] ? __lock_acquire+0x572/0x4a30 [ 832.750573] ? mark_held_locks+0x100/0x100 [ 832.755039] ? add_lock_to_list.isra.0+0x450/0x450 [ 832.759977] ? add_lock_to_list.isra.0+0x450/0x450 [ 832.765046] ? mark_held_locks+0x100/0x100 [ 832.769290] ? __lock_is_held+0xb6/0x140 [ 832.773494] ? lock_acquire+0x1db/0x570 [ 832.777530] ? grab_super+0xbf/0x410 [ 832.781244] ? ___might_sleep+0x1e7/0x310 [ 832.785556] rwsem_down_write_failed+0xe/0x10 [ 832.790049] ? rwsem_down_write_failed+0xe/0x10 [ 832.795769] call_rwsem_down_write_failed+0x17/0x30 [ 832.800822] down_write+0xa5/0x130 [ 832.804548] ? grab_super+0xbf/0x410 [ 832.808267] ? down_read+0x120/0x120 [ 832.812136] grab_super+0xbf/0x410 [ 832.815687] ? do_raw_spin_lock+0x156/0x360 [ 832.820022] ? lock_release+0xc40/0xc40 [ 832.824221] ? drop_super_exclusive+0x30/0x30 [ 832.828814] ? security_capable+0x98/0xc0 [ 832.833131] sget_userns+0x442/0xf50 [ 832.836868] ? kill_litter_super+0x60/0x60 [ 832.841232] ? ns_test_super+0x50/0x50 [ 832.845261] ? destroy_unused_super.part.0+0x110/0x110 [ 832.850663] ? blkdev_get+0xc9/0xae0 [ 832.854603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 832.860150] ? cap_capable+0x205/0x270 [ 832.864230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 832.869773] ? security_capable+0x98/0xc0 [ 832.874080] ? kill_litter_super+0x60/0x60 [ 832.878318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 832.884041] ? ns_capable_common+0x141/0x170 [ 832.888464] ? ns_test_super+0x50/0x50 [ 832.892494] ? kill_litter_super+0x60/0x60 [ 832.896732] sget+0x10c/0x150 [ 832.899847] mount_bdev+0xff/0x3c0 [ 832.903587] ? udf_load_vrs+0xdd0/0xdd0 [ 832.907574] udf_mount+0x35/0x40 [ 832.910946] mount_fs+0x123/0x43a [ 832.914576] ? emergency_thaw_all+0x260/0x260 [ 832.919076] ? lock_release+0xc40/0xc40 [ 832.924108] ? digsig_verify.cold+0x32/0x32 [ 832.928485] vfs_kern_mount.part.0+0xdb/0x570 [ 832.933188] ? may_umount+0xb0/0xb0 [ 832.936822] ? _raw_read_unlock+0x2d/0x50 [ 832.940971] ? __get_fs_type+0x9a/0xd0 [ 832.945021] do_mount+0x58e/0x3330 [ 832.948570] ? lock_release+0xc40/0xc40 [ 832.952686] ? copy_mount_string+0x40/0x40 [ 832.956938] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 832.962659] ? _copy_from_user+0xdd/0x150 [ 832.966820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 832.972495] ? copy_mount_options+0x30e/0x440 [ 832.976996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 832.982666] ksys_mount+0xdb/0x150 [ 832.986226] __x64_sys_mount+0xbe/0x150 [ 832.990233] do_syscall_64+0x1a3/0x800 [ 832.994281] ? syscall_return_slowpath+0x5f0/0x5f0 [ 832.999214] ? prepare_exit_to_usermode+0x232/0x3b0 [ 833.004388] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.009248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.014580] RIP: 0033:0x44a349 [ 833.017771] Code: 25 70 3a 20 66 69 6c 74 65 72 4f 4b 3a 25 64 20 73 74 61 74 65 3a 25 64 20 65 78 65 63 57 68 65 6e 50 72 65 76 3a 25 64 20 70 <72> 65 76 57 61 73 53 75 73 70 3a 25 64 0a 00 49 6e 76 61 6c 69 64 [ 833.036846] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.044698] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 833.052953] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 833.060226] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 833.067663] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 833.075062] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 833.082514] INFO: task syz-executor408:7746 blocked for more than 140 seconds. [ 833.089872] Not tainted 5.0.0-rc2+ #34 [ 833.094409] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.102492] syz-executor408 D27144 7746 7739 0x00000004 [ 833.108130] Call Trace: [ 833.110729] __schedule+0x897/0x1e60 [ 833.114592] ? pci_mmcfg_check_reserved+0x170/0x170 [ 833.119630] ? mark_held_locks+0x100/0x100 [ 833.123997] ? blkdev_get+0x59c/0xae0 [ 833.127803] ? __mutex_lock+0xa36/0x1670 [ 833.132000] ? find_held_lock+0x35/0x120 [ 833.136073] schedule+0xfe/0x350 [ 833.139441] ? __schedule+0x1e60/0x1e60 [ 833.143556] ? __mutex_add_waiter+0xba/0x290 [ 833.147965] ? do_raw_spin_trylock+0x270/0x270 [ 833.152699] ? mutex_destroy+0x200/0x200 [ 833.156775] schedule_preempt_disabled+0x13/0x20 [ 833.161531] __mutex_lock+0xa3b/0x1670 [ 833.165568] ? mount_bdev+0x93/0x3c0 [ 833.169291] ? mutex_trylock+0x2d0/0x2d0 [ 833.173496] ? do_raw_spin_unlock+0xa0/0x330 [ 833.177912] ? do_raw_spin_trylock+0x270/0x270 [ 833.183498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.189058] ? blkdev_get+0xc9/0xae0 [ 833.192937] ? lookup_bdev+0xb9/0x260 [ 833.196739] ? blkdev_open+0x290/0x290 [ 833.200642] mutex_lock_nested+0x16/0x20 [ 833.204850] ? mutex_lock_nested+0x16/0x20 [ 833.209088] mount_bdev+0x93/0x3c0 [ 833.212760] ? udf_load_vrs+0xdd0/0xdd0 [ 833.216741] udf_mount+0x35/0x40 [ 833.220109] mount_fs+0x123/0x43a [ 833.223731] ? emergency_thaw_all+0x260/0x260 [ 833.228235] ? lock_release+0xc40/0xc40 [ 833.232346] ? digsig_verify.cold+0x32/0x32 [ 833.236680] vfs_kern_mount.part.0+0xdb/0x570 [ 833.241186] ? may_umount+0xb0/0xb0 [ 833.244979] ? _raw_read_unlock+0x2d/0x50 [ 833.249133] ? __get_fs_type+0x9a/0xd0 [ 833.253171] do_mount+0x58e/0x3330 [ 833.256712] ? lock_release+0xc40/0xc40 [ 833.260694] ? copy_mount_string+0x40/0x40 [ 833.265083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.270622] ? _copy_from_user+0xdd/0x150 [ 833.274901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.280445] ? copy_mount_options+0x30e/0x440 [ 833.285077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.290622] ksys_mount+0xdb/0x150 [ 833.294320] __x64_sys_mount+0xbe/0x150 [ 833.298317] do_syscall_64+0x1a3/0x800 [ 833.302339] ? syscall_return_slowpath+0x5f0/0x5f0 [ 833.307279] ? prepare_exit_to_usermode+0x232/0x3b0 [ 833.313293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.318161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.323495] RIP: 0033:0x44a349 [ 833.326700] Code: 25 70 3a 20 66 69 6c 74 65 72 4f 4b 3a 25 64 20 73 74 61 74 65 3a 25 64 20 65 78 65 63 57 68 65 6e 50 72 65 76 3a 25 64 20 70 <72> 65 76 57 61 73 53 75 73 70 3a 25 64 0a 00 49 6e 76 61 6c 69 64 [ 833.345752] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.353586] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 833.360859] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 833.368277] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 833.375682] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 833.383070] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 833.390370] INFO: task syz-executor408:7747 blocked for more than 140 seconds. [ 833.397863] Not tainted 5.0.0-rc2+ #34 [ 833.402385] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.410346] syz-executor408 D27680 7747 7738 0x00000004 [ 833.416120] Call Trace: [ 833.418723] __schedule+0x897/0x1e60 [ 833.422574] ? pci_mmcfg_check_reserved+0x170/0x170 [ 833.427597] ? mark_held_locks+0x100/0x100 [ 833.431969] ? blkdev_get+0x59c/0xae0 [ 833.435772] ? __mutex_lock+0xa36/0x1670 [ 833.439981] ? find_held_lock+0x35/0x120 [ 833.445162] schedule+0xfe/0x350 [ 833.448544] ? __schedule+0x1e60/0x1e60 [ 833.452713] ? __mutex_add_waiter+0xba/0x290 [ 833.457145] ? do_raw_spin_trylock+0x270/0x270 [ 833.461893] ? mutex_destroy+0x200/0x200 [ 833.466090] schedule_preempt_disabled+0x13/0x20 [ 833.471694] __mutex_lock+0xa3b/0x1670 [ 833.475737] ? mount_bdev+0x93/0x3c0 [ 833.479449] ? mutex_trylock+0x2d0/0x2d0 [ 833.483638] ? do_raw_spin_unlock+0xa0/0x330 [ 833.488041] ? do_raw_spin_trylock+0x270/0x270 [ 833.492748] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.498286] ? blkdev_get+0xc9/0xae0 [ 833.502117] ? lookup_bdev+0xb9/0x260 [ 833.505914] ? blkdev_open+0x290/0x290 [ 833.509825] mutex_lock_nested+0x16/0x20 [ 833.514154] ? mutex_lock_nested+0x16/0x20 [ 833.518404] mount_bdev+0x93/0x3c0 [ 833.522149] ? udf_load_vrs+0xdd0/0xdd0 [ 833.526442] udf_mount+0x35/0x40 [ 833.529802] mount_fs+0x123/0x43a [ 833.533720] ? emergency_thaw_all+0x260/0x260 [ 833.538300] ? lock_release+0xc40/0xc40 [ 833.542534] ? digsig_verify.cold+0x32/0x32 [ 833.546895] vfs_kern_mount.part.0+0xdb/0x570 [ 833.551412] ? may_umount+0xb0/0xb0 [ 833.555288] ? _raw_read_unlock+0x2d/0x50 [ 833.559446] ? __get_fs_type+0x9a/0xd0 [ 833.563506] do_mount+0x58e/0x3330 [ 833.567056] ? lock_release+0xc40/0xc40 [ 833.571036] ? copy_mount_string+0x40/0x40 [ 833.576330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.582052] ? _copy_from_user+0xdd/0x150 [ 833.586208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.591903] ? copy_mount_options+0x30e/0x440 [ 833.596401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.602077] ksys_mount+0xdb/0x150 [ 833.605626] __x64_sys_mount+0xbe/0x150 [ 833.609606] do_syscall_64+0x1a3/0x800 [ 833.613650] ? syscall_return_slowpath+0x5f0/0x5f0 [ 833.618585] ? prepare_exit_to_usermode+0x232/0x3b0 [ 833.623758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.628614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.633941] RIP: 0033:0x44a349 [ 833.637146] Code: 25 70 3a 20 66 69 6c 74 65 72 4f 4b 3a 25 64 20 73 74 61 74 65 3a 25 64 20 65 78 65 63 57 68 65 6e 50 72 65 76 3a 25 64 20 70 <72> 65 76 57 61 73 53 75 73 70 3a 25 64 0a 00 49 6e 76 61 6c 69 64 [ 833.656650] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.664689] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 833.672140] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 833.679419] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 833.686850] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 833.695009] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 833.703307] INFO: task syz-executor408:7745 blocked for more than 140 seconds. [ 833.710666] Not tainted 5.0.0-rc2+ #34 [ 833.715234] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.723335] syz-executor408 D26792 7745 7731 0x00000004 [ 833.728980] Call Trace: [ 833.731595] __schedule+0x897/0x1e60 [ 833.735486] ? pci_mmcfg_check_reserved+0x170/0x170 [ 833.740515] ? blkdev_get+0x59c/0xae0 [ 833.744468] ? __mutex_lock+0xa36/0x1670 [ 833.748537] ? find_held_lock+0x35/0x120 [ 833.752760] schedule+0xfe/0x350 [ 833.756140] ? __schedule+0x1e60/0x1e60 [ 833.760112] ? __mutex_add_waiter+0x1e3/0x290 [ 833.764766] ? do_raw_spin_trylock+0x270/0x270 [ 833.769352] ? mutex_destroy+0x200/0x200 [ 833.773565] schedule_preempt_disabled+0x13/0x20 [ 833.778330] __mutex_lock+0xa3b/0x1670 [ 833.782361] ? mount_bdev+0x93/0x3c0 [ 833.786089] ? mutex_trylock+0x2d0/0x2d0 [ 833.790163] ? do_raw_spin_unlock+0xa0/0x330 [ 833.794732] ? do_raw_spin_trylock+0x270/0x270 [ 833.799322] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.805015] ? blkdev_get+0xc9/0xae0 [ 833.808744] ? lookup_bdev+0xb9/0x260 [ 833.812688] ? blkdev_open+0x290/0x290 [ 833.816601] mutex_lock_nested+0x16/0x20 [ 833.820661] ? mutex_lock_nested+0x16/0x20 [ 833.825040] mount_bdev+0x93/0x3c0 [ 833.828590] ? udf_load_vrs+0xdd0/0xdd0 [ 833.833558] udf_mount+0x35/0x40 [ 833.836939] mount_fs+0x123/0x43a [ 833.840399] ? emergency_thaw_all+0x260/0x260 [ 833.845061] ? lock_release+0xc40/0xc40 [ 833.849046] ? digsig_verify.cold+0x32/0x32 [ 833.853510] vfs_kern_mount.part.0+0xdb/0x570 [ 833.858018] ? may_umount+0xb0/0xb0 [ 833.861648] ? _raw_read_unlock+0x2d/0x50 [ 833.865947] ? __get_fs_type+0x9a/0xd0 [ 833.869856] do_mount+0x58e/0x3330 [ 833.873546] ? lock_release+0xc40/0xc40 [ 833.877539] ? copy_mount_string+0x40/0x40 [ 833.881924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.887470] ? _copy_from_user+0xdd/0x150 [ 833.891623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.897315] ? copy_mount_options+0x30e/0x440 [ 833.901937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 833.907488] ksys_mount+0xdb/0x150 [ 833.911033] __x64_sys_mount+0xbe/0x150 [ 833.915170] do_syscall_64+0x1a3/0x800 [ 833.919066] ? syscall_return_slowpath+0x5f0/0x5f0 [ 833.924150] ? prepare_exit_to_usermode+0x232/0x3b0 [ 833.929176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.934172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.939363] RIP: 0033:0x44a349 [ 833.942917] Code: Bad RIP value. [ 833.946286] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.954156] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 833.961426] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 833.969694] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 833.977122] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 833.984524] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 833.991950] INFO: task syz-executor408:7748 blocked for more than 140 seconds. [ 833.999307] Not tainted 5.0.0-rc2+ #34 [ 834.003841] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.011942] syz-executor408 D27680 7748 7729 0x00000004 [ 834.017578] Call Trace: [ 834.020174] __schedule+0x897/0x1e60 [ 834.024047] ? pci_mmcfg_check_reserved+0x170/0x170 [ 834.029081] ? mark_held_locks+0x100/0x100 [ 834.033460] ? blkdev_get+0x59c/0xae0 [ 834.037269] ? __mutex_lock+0xa36/0x1670 [ 834.041332] ? find_held_lock+0x35/0x120 [ 834.045557] schedule+0xfe/0x350 [ 834.048928] ? __schedule+0x1e60/0x1e60 [ 834.053034] ? __mutex_add_waiter+0xba/0x290 [ 834.057451] ? do_raw_spin_trylock+0x270/0x270 [ 834.062177] ? mutex_destroy+0x200/0x200 [ 834.066254] schedule_preempt_disabled+0x13/0x20 [ 834.071013] __mutex_lock+0xa3b/0x1670 [ 834.075048] ? mount_bdev+0x93/0x3c0 [ 834.078776] ? mutex_trylock+0x2d0/0x2d0 [ 834.082988] ? do_raw_spin_unlock+0xa0/0x330 [ 834.087402] ? do_raw_spin_trylock+0x270/0x270 [ 834.092979] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.098533] ? blkdev_get+0xc9/0xae0 [ 834.102413] ? lookup_bdev+0xb9/0x260 [ 834.106219] ? blkdev_open+0x290/0x290 [ 834.110127] mutex_lock_nested+0x16/0x20 [ 834.114331] ? mutex_lock_nested+0x16/0x20 [ 834.118576] mount_bdev+0x93/0x3c0 [ 834.122262] ? udf_load_vrs+0xdd0/0xdd0 [ 834.126243] udf_mount+0x35/0x40 [ 834.129611] mount_fs+0x123/0x43a [ 834.133220] ? emergency_thaw_all+0x260/0x260 [ 834.137719] ? lock_release+0xc40/0xc40 [ 834.141830] ? digsig_verify.cold+0x32/0x32 [ 834.146161] vfs_kern_mount.part.0+0xdb/0x570 [ 834.150667] ? may_umount+0xb0/0xb0 [ 834.154460] ? _raw_read_unlock+0x2d/0x50 [ 834.158611] ? __get_fs_type+0x9a/0xd0 [ 834.162653] do_mount+0x58e/0x3330 [ 834.166199] ? lock_release+0xc40/0xc40 [ 834.170183] ? copy_mount_string+0x40/0x40 [ 834.174594] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.180137] ? _copy_from_user+0xdd/0x150 [ 834.184432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.189975] ? copy_mount_options+0x30e/0x440 [ 834.194616] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.200167] ksys_mount+0xdb/0x150 [ 834.203849] __x64_sys_mount+0xbe/0x150 [ 834.207834] do_syscall_64+0x1a3/0x800 [ 834.211861] ? syscall_return_slowpath+0x5f0/0x5f0 [ 834.216796] ? prepare_exit_to_usermode+0x232/0x3b0 [ 834.222838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 834.227700] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.233054] RIP: 0033:0x44a349 [ 834.236346] Code: 25 70 3a 20 66 69 6c 74 65 72 4f 4b 3a 25 64 20 73 74 61 74 65 3a 25 64 20 65 78 65 63 57 68 65 6e 50 72 65 76 3a 25 64 20 70 <72> 65 76 57 61 73 53 75 73 70 3a 25 64 0a 00 49 6e 76 61 6c 69 64 [ 834.255410] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 834.263249] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 834.270520] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 834.277941] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 834.285518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 834.292921] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 834.300222] [ 834.300222] Showing all locks held in the system: [ 834.306711] 1 lock held by khungtaskd/1040: [ 834.311028] #0: 000000005cef0633 (rcu_read_lock){....}, at: debug_show_all_locks+0xc6/0x41d [ 834.319833] 3 locks held by rs:main Q:Reg/7610: [ 834.324633] 1 lock held by rsyslogd/7613: [ 834.328772] #0: 0000000017e93e16 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1b3/0x1f0 [ 834.336903] 2 locks held by getty/7702: [ 834.340867] #0: 000000000776fc69 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.349250] #1: 000000000921311c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.359214] 2 locks held by getty/7703: [ 834.363323] #0: 000000006336411b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.371574] #1: 000000004b4063d2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.380600] 2 locks held by getty/7704: [ 834.384689] #0: 00000000f2eae59a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.393064] #1: 00000000d82941fc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.402059] 2 locks held by getty/7705: [ 834.406035] #0: 00000000a414b10f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.414428] #1: 000000005a1a36bf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.423447] 2 locks held by getty/7706: [ 834.427417] #0: 000000002d16479b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.435954] #1: 0000000052217145 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.445019] 2 locks held by getty/7707: [ 834.448993] #0: 00000000067a7d57 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.457406] #1: 00000000ff79236d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.466415] 2 locks held by getty/7708: [ 834.470556] #0: 00000000d62041ba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 834.479080] #1: 00000000cc0038b2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 [ 834.488934] 1 lock held by syz-executor408/7734: [ 834.493899] 2 locks held by syz-executor408/7735: [ 834.498743] #0: 00000000dc228d08 (&bdev->bd_fsfreeze_mutex){+.+.}, at: mount_bdev+0x93/0x3c0 [ 834.507569] #1: 00000000f7d96870 (&type->s_umount_key#39){+.+.}, at: grab_super+0xbf/0x410 [ 834.516243] 1 lock held by syz-executor408/7746: [ 834.520993] #0: 00000000dc228d08 (&bdev->bd_fsfreeze_mutex){+.+.}, at: mount_bdev+0x93/0x3c0 [ 834.529829] 1 lock held by syz-executor408/7747: [ 834.534703] #0: 00000000dc228d08 (&bdev->bd_fsfreeze_mutex){+.+.}, at: mount_bdev+0x93/0x3c0 [ 834.543512] 1 lock held by syz-executor408/7745: [ 834.548260] #0: 00000000dc228d08 (&bdev->bd_fsfreeze_mutex){+.+.}, at: mount_bdev+0x93/0x3c0 [ 834.557098] 1 lock held by syz-executor408/7748: [ 834.561982] #0: 00000000dc228d08 (&bdev->bd_fsfreeze_mutex){+.+.}, at: mount_bdev+0x93/0x3c0 [ 834.570680] [ 834.572445] ============================================= [ 834.572445] [ 834.579541] NMI backtrace for cpu 1 [ 834.583223] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc2+ #34 [ 834.590061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.599410] Call Trace: [ 834.602069] dump_stack+0x1db/0x2d0 [ 834.605701] ? dump_stack_print_info.cold+0x20/0x20 [ 834.610723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 834.616267] nmi_cpu_backtrace.cold+0x63/0xa4 [ 834.620816] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 834.625752] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 834.631034] arch_trigger_cpumask_backtrace+0x14/0x20 [ 834.636227] watchdog+0xbbb/0x1170 [ 834.639779] ? reset_hung_task_detector+0xd0/0xd0 [ 834.644620] ? lockdep_hardirqs_on+0x415/0x5d0 [ 834.649294] ? trace_hardirqs_on+0xbd/0x310 [ 834.653622] ? kasan_check_read+0x11/0x20 [ 834.657801] ? __kthread_parkme+0xc3/0x1b0 [ 834.662037] ? trace_hardirqs_off_caller+0x300/0x300 [ 834.667147] ? do_raw_spin_trylock+0x270/0x270 [ 834.671731] ? schedule+0x108/0x350 [ 834.675358] ? do_raw_spin_trylock+0x270/0x270 [ 834.679961] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 834.685069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.690608] ? __kthread_parkme+0xfb/0x1b0 [ 834.694851] kthread+0x357/0x430 [ 834.698215] ? reset_hung_task_detector+0xd0/0xd0 [ 834.703064] ? kthread_stop+0x920/0x920 [ 834.707058] ret_from_fork+0x3a/0x50 [ 834.710866] Sending NMI from CPU 1 to CPUs 0: [ 834.716581] NMI backtrace for cpu 0 [ 834.716587] CPU: 0 PID: 7734 Comm: syz-executor408 Not tainted 5.0.0-rc2+ #34 [ 834.716593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.716597] RIP: 0010:match_held_lock+0x23/0x780 [ 834.716607] Code: 1f 84 00 00 00 00 00 48 b9 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 48 8d 95 58 ff ff ff 41 56 41 55 4c 8d 75 d8 48 c1 ea 03 <49> 89 fd 41 54 48 8d 04 0a 48 83 c7 10 49 89 d4 53 48 81 ec a0 00 [ 834.716611] RSP: 0018:ffff88809637eec0 EFLAGS: 00000806 [ 834.716618] RAX: 0000000000000005 RBX: ffff888089f7e3c0 RCX: dffffc0000000000 [ 834.716623] RDX: 1ffff11012c6fdc6 RSI: ffffffff899a3f40 RDI: ffff888089f7ec68 [ 834.716627] RBP: ffff88809637eed8 R08: ffff888089f7e3c0 R09: ffffed1015cc5b90 [ 834.716632] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: ffffffff899a3f40 [ 834.716637] R13: ffffed10113efd87 R14: ffff88809637eeb0 R15: ffff888089f7ec68 [ 834.716642] FS: 00007fbe14ac7700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 834.716645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.716650] CR2: ffffffffff600400 CR3: 000000008da5b000 CR4: 00000000001406f0 [ 834.716654] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 834.716659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 834.716661] Call Trace: [ 834.716664] __lock_is_held+0xb6/0x140 [ 834.716667] lock_is_held_type+0x110/0x210 [ 834.716671] rcu_read_lock_held+0xa3/0xd0 [ 834.716674] find_get_entry+0xbeb/0x10a0 [ 834.716677] ? filemap_map_pages+0x1cb0/0x1cb0 [ 834.716681] ? add_lock_to_list.isra.0+0x450/0x450 [ 834.716684] ? pagecache_get_page+0x2a4/0x1020 [ 834.716687] ? print_usage_bug+0xd0/0xd0 [ 834.716690] ? find_held_lock+0x35/0x120 [ 834.716693] ? lock_acquire+0x1db/0x570 [ 834.716696] pagecache_get_page+0xe6/0x1020 [ 834.716699] ? do_raw_spin_trylock+0x270/0x270 [ 834.716703] ? add_to_page_cache_lru+0xd20/0xd20 [ 834.716707] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 834.716710] ? __find_get_block+0x3a9/0xf20 [ 834.716713] ? end_buffer_async_read+0xb50/0xb50 [ 834.716717] ? mark_buffer_dirty+0x8b0/0x8b0 [ 834.716720] ? __getblk_gfp+0x49f/0xd20 [ 834.716722] __getblk_gfp+0x38a/0xd20 [ 834.716726] ? __find_get_block+0xf20/0xf20 [ 834.716729] ? ___might_sleep+0x1e7/0x310 [ 834.716731] ? _udf_err+0x113/0x170 [ 834.716735] ? lvid_get_unique_id+0x190/0x190 [ 834.716738] ? kasan_check_write+0x14/0x20 [ 834.716741] __bread_gfp+0x2f/0x300 [ 834.716743] udf_tread+0xf1/0x140 [ 834.716746] udf_read_tagged+0x50/0x530 [ 834.716750] udf_check_anchor_block+0x1d5/0x640 [ 834.716753] ? udf_process_sequence+0x3dd0/0x3dd0 [ 834.716756] udf_scan_anchors+0x4b5/0x850 [ 834.716760] ? udf_check_anchor_block+0x640/0x640 [ 834.716763] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.716767] ? udf_get_last_session+0x1b0/0x1b0 [ 834.716770] udf_load_vrs+0x968/0xdd0 [ 834.716773] ? udf_scan_anchors+0x850/0x850 [ 834.716776] ? udf_bread+0x320/0x320 [ 834.716779] ? lockdep_init_map+0x10c/0x5b0 [ 834.716782] udf_fill_super+0xbac/0x2383 [ 834.716785] ? udf_load_vrs+0xdd0/0xdd0 [ 834.716788] ? vsprintf+0x40/0x40 [ 834.716791] ? set_blocksize+0x2bf/0x340 [ 834.716795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 834.716797] mount_bdev+0x307/0x3c0 [ 834.716800] ? udf_load_vrs+0xdd0/0xdd0 [ 834.716803] udf_mount+0x35/0x40 [ 834.716806] mount_fs+0x123/0x43a [ 834.716809] ? emergency_thaw_all+0x260/0x260 [ 834.716812] ? lock_release+0xc40/0xc40 [ 834.716815] ? digsig_verify.cold+0x32/0x32 [ 834.716819] vfs_kern_mount.part.0+0xdb/0x570 [ 834.716822] ? may_umount+0xb0/0xb0 [ 834.716825] ? _raw_read_unlock+0x2d/0x50 [ 834.716828] ? __get_fs_type+0x9a/0xd0 [ 834.716830] do_mount+0x58e/0x3330 [ 834.716833] ? lock_release+0xc40/0xc40 [ 834.716836] ? copy_mount_string+0x40/0x40 [ 834.716840] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.716843] ? _copy_from_user+0xdd/0x150 [ 834.716847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.716851] ? copy_mount_options+0x30e/0x440 [ 834.716854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 834.716857] ksys_mount+0xdb/0x150 [ 834.716860] __x64_sys_mount+0xbe/0x150 [ 834.716863] do_syscall_64+0x1a3/0x800 [ 834.716867] ? syscall_return_slowpath+0x5f0/0x5f0 [ 834.716870] ? prepare_exit_to_usermode+0x232/0x3b0 [ 834.716874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 834.716877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.716880] RIP: 0033:0x44a349 [ 834.716890] Code: 6d cc fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b cc fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.716893] RSP: 002b:00007fbe14ac6db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 834.716901] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044a349 [ 834.716906] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 00000000200002c0 [ 834.716910] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 834.716915] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 834.716919] R13: 00007ffca0d0335f R14: 00007fbe14ac79c0 R15: 00000000006dbc20 [ 834.718747] Kernel panic - not syncing: hung_task: blocked tasks [ 835.204692] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc2+ #34 [ 835.211529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.220879] Call Trace: [ 835.223479] dump_stack+0x1db/0x2d0 [ 835.227108] ? dump_stack_print_info.cold+0x20/0x20 [ 835.232220] panic+0x2cb/0x65c [ 835.235419] ? add_taint.cold+0x16/0x16 [ 835.239404] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 835.244341] ? ___preempt_schedule+0x16/0x18 [ 835.248754] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 835.254211] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 835.259664] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 835.265117] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 835.270575] watchdog+0xbcc/0x1170 [ 835.274131] ? reset_hung_task_detector+0xd0/0xd0 [ 835.278973] ? lockdep_hardirqs_on+0x415/0x5d0 [ 835.283563] ? trace_hardirqs_on+0xbd/0x310 [ 835.287887] ? kasan_check_read+0x11/0x20 [ 835.292038] ? __kthread_parkme+0xc3/0x1b0 [ 835.296277] ? trace_hardirqs_off_caller+0x300/0x300 [ 835.301379] ? do_raw_spin_trylock+0x270/0x270 [ 835.305959] ? schedule+0x108/0x350 [ 835.309589] ? do_raw_spin_trylock+0x270/0x270 [ 835.314185] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 835.319292] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 835.324828] ? __kthread_parkme+0xfb/0x1b0 [ 835.329071] kthread+0x357/0x430 [ 835.332548] ? reset_hung_task_detector+0xd0/0xd0 [ 835.337393] ? kthread_stop+0x920/0x920 [ 835.341375] ret_from_fork+0x3a/0x50 [ 835.346552] Kernel Offset: disabled [ 835.350233] Rebooting in 86400 seconds..