[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 906.250776] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.271569] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.364698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.379783] EXT4-fs (loop0): re-mounted. Opts: (null) [ 906.449913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.469249] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 906.549888] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.569982] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.650092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.670627] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.752819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.770696] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.824474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.846613] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.920589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.940215] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 906.981186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 906.990847] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 907.053043] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.070709] EXT4-fs (loop0): re-mounted. Opts: (null) [ 907.142516] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.164827] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 907.240910] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.255213] EXT4-fs (loop0): re-mounted. Opts: (null) [ 907.311219] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.328844] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 907.404255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.419885] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 907.490824] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.500713] EXT4-fs (loop0): re-mounted. Opts: (null) [ 907.560922] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.579408] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 907.652258] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.669765] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 907.731343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.744748] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 907.822344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.832077] EXT4-fs (loop0): re-mounted. Opts: (null) [ 907.900747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 907.910366] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 907.983404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.003796] EXT4-fs (loop0): re-mounted. Opts: (null) [ 908.069938] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.085172] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 908.161670] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.179547] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 908.233136] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.250049] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 908.320867] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.334923] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program executing program [ 908.417224] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.427029] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 908.520688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.547627] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 908.592169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.610060] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 908.702344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.722141] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 908.784743] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.797423] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 908.850263] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.874553] EXT4-fs (loop0): re-mounted. Opts: (null) [ 908.920960] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 908.940059] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 909.005210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.024086] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 909.090630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.109246] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 909.160400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.189106] EXT4-fs (loop0): re-mounted. Opts: (null) [ 909.230881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.249135] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 909.320854] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.331998] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 909.400495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.419087] EXT4-fs (loop0): re-mounted. Opts: (null) [ 909.480517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.499509] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 909.573099] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.592381] EXT4-fs (loop0): re-mounted. Opts: (null) [ 909.660842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.679374] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 909.760659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.780112] EXT4-fs (loop0): re-mounted. Opts: (null) [ 909.849781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.869462] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 909.939903] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 909.959616] EXT4-fs (loop0): re-mounted. Opts: (null) [ 910.040143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.059608] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 910.122966] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.141672] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 910.210607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.221860] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 910.280456] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.299974] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 910.382600] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.408588] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 910.451908] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.472513] EXT4-fs (loop0): re-mounted. Opts: (null) [ 910.550596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.568930] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 910.643186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.661661] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 910.739506] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.759595] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 910.831484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.856053] EXT4-fs (loop0): re-mounted. Opts: (null) [ 910.920469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 910.939043] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 911.018103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.028546] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.088561] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.109102] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.180558] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.201535] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.260642] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.270269] EXT4-fs (loop0): re-mounted. Opts: (null) [ 911.331696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.342078] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 911.418929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.443539] EXT4-fs (loop0): re-mounted. Opts: (null) [ 911.519530] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.539483] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.610486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.620344] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.692877] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 911.712839] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.778694] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 911.848606] EXT4-fs (loop0): re-mounted. Opts: (null) [ 911.920065] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 911.981572] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.077670] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.158580] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.239292] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 912.305232] EXT4-fs (loop0): re-mounted. Opts: (null) [ 912.358641] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.438584] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.502068] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 912.578600] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.638469] EXT4-fs (loop0): re-mounted. Opts: (null) [ 912.719251] EXT4-fs (loop0): re-mounted. Opts: (null) executing program executing program [ 912.792605] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 912.898408] EXT4-fs (loop0): re-mounted. Opts: (null) [ 912.948666] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 913.018628] EXT4-fs (loop0): re-mounted. Opts: (null) executing program [ 913.103677] EXT4-fs (loop0): re-mounted. Opts: (null) [ 1147.778167] INFO: task syz-executor405:8123 blocked for more than 140 seconds. [ 1147.785610] Not tainted 4.19.211-syzkaller #0 [ 1147.791946] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.800242] syz-executor405 D27656 8123 8121 0x00000000 [ 1147.805880] Call Trace: [ 1147.808841] __schedule+0x887/0x2040 [ 1147.812574] ? io_schedule_timeout+0x140/0x140 [ 1147.817144] ? mark_held_locks+0xf0/0xf0 [ 1147.821584] schedule+0x8d/0x1b0 [ 1147.824953] schedule_timeout+0x92d/0xfe0 [ 1147.829616] ? kfree+0xcc/0x210 [ 1147.832911] ? ext4_xattr_destroy_cache+0x1b/0x30 [ 1147.837751] ? ext4_put_super+0x8d6/0x1010 [ 1147.842389] ? usleep_range+0x170/0x170 [ 1147.846368] ? deactivate_super+0x174/0x1a0 [ 1147.851093] ? wait_for_common+0x294/0x470 [ 1147.855341] ? mark_held_locks+0xa6/0xf0 [ 1147.859879] ? _raw_spin_unlock_irq+0x24/0x80 [ 1147.864407] wait_for_common+0x29c/0x470 [ 1147.868830] ? try_to_wake_up+0x733/0x1050 [ 1147.873076] ? bit_wait_io_timeout+0x100/0x100 [ 1147.877643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1147.883123] ? wake_up_q+0xe0/0xe0 [ 1147.886673] kthread_stop+0x109/0x6b0 [ 1147.890827] ext4_put_super+0x93c/0x1010 [ 1147.894890] ? ext4_quota_write+0x530/0x530 [ 1147.899573] generic_shutdown_super+0x144/0x370 [ 1147.904248] kill_block_super+0x97/0xf0 [ 1147.908550] deactivate_locked_super+0x94/0x160 [ 1147.913233] deactivate_super+0x174/0x1a0 [ 1147.917386] ? deactivate_locked_super+0x160/0x160 [ 1147.922872] ? dput+0x31/0x640 [ 1147.926084] cleanup_mnt+0x1a8/0x290 [ 1147.930238] task_work_run+0x148/0x1c0 [ 1147.934136] exit_to_usermode_loop+0x251/0x2a0 [ 1147.939062] do_syscall_64+0x538/0x620 [ 1147.942959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.948659] RIP: 0033:0x7f5e9f295c97 [ 1147.952366] Code: Bad RIP value. [ 1147.955710] RSP: 002b:00007ffcfb64b848 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 1147.963768] RAX: 0000000000000000 RBX: 00000000000deee5 RCX: 00007f5e9f295c97 [ 1147.971300] RDX: 00007ffcfb64b90a RSI: 000000000000000a RDI: 00007ffcfb64b900 [ 1147.978833] RBP: 00007ffcfb64b900 R08: 00000000ffffffff R09: 00007ffcfb64b6e0 [ 1147.986100] R10: 00005555572ef633 R11: 0000000000000206 R12: 00007ffcfb64c970 [ 1147.993707] R13: 00005555572ef5f0 R14: 00007ffcfb64b870 R15: 000000000000005a [ 1148.001257] [ 1148.001257] Showing all locks held in the system: [ 1148.007582] 1 lock held by khungtaskd/1570: [ 1148.012252] #0: 00000000ca05a284 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 1148.021288] 1 lock held by in:imklog/7822: [ 1148.025513] #0: 00000000ccd8792a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 1148.033691] 1 lock held by syz-executor405/8123: [ 1148.038530] #0: 00000000cf6887b0 (&type->s_umount_key#39){++++}, at: deactivate_super+0x16c/0x1a0 [ 1148.047658] [ 1148.049335] ============================================= [ 1148.049335] [ 1148.056350] NMI backtrace for cpu 1 [ 1148.060055] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 1148.067492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1148.076827] Call Trace: [ 1148.079402] dump_stack+0x1fc/0x2ef [ 1148.083010] nmi_cpu_backtrace.cold+0x63/0xa2 [ 1148.087484] ? lapic_can_unplug_cpu+0x80/0x80 [ 1148.091960] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 1148.097218] watchdog+0x991/0xe60 [ 1148.100651] ? reset_hung_task_detector+0x30/0x30 [ 1148.105476] kthread+0x33f/0x460 [ 1148.108820] ? kthread_park+0x180/0x180 [ 1148.112776] ret_from_fork+0x24/0x30 [ 1148.116567] Sending NMI from CPU 1 to CPUs 0: [ 1148.121568] NMI backtrace for cpu 0 [ 1148.121574] CPU: 0 PID: 10 Comm: rcu_preempt Not tainted 4.19.211-syzkaller #0 [ 1148.121579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1148.121583] RIP: 0010:lockdep_hardirqs_on+0x342/0x5c0 [ 1148.121594] Code: 83 30 08 00 00 48 8d bb 48 08 00 00 48 89 fa 48 c1 ea 03 8d 68 01 48 b8 00 00 00 00 00 fc ff df 89 ab 30 08 00 00 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 38 01 00 00 89 ab 48 08 00 00 65 48 8b 1c [ 1148.121598] RSP: 0018:ffff8880b5a67b70 EFLAGS: 00000806 [ 1148.121606] RAX: 0000000000000000 RBX: ffff8880b5a4e280 RCX: 0000000000000000 [ 1148.121611] RDX: 1ffff11016b49d59 RSI: 0000000000000001 RDI: ffff8880b5a4eac8 [ 1148.121616] RBP: 0000000000011dc7 R08: 0000000000000000 R09: 0000000000000000 [ 1148.121620] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1148.121625] R13: dffffc0000000000 R14: ffff8880ba022b40 R15: 00000000ffffffff [ 1148.121631] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1148.121635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.121640] CR2: 00007f31be19d000 CR3: 00000000a13e6000 CR4: 00000000003406f0 [ 1148.121645] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1148.121650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1148.121652] Call Trace: [ 1148.121656] _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1148.121660] try_to_del_timer_sync+0xbf/0x110 [ 1148.121663] ? detach_if_pending+0x460/0x460 [ 1148.121667] ? del_timer_sync+0x75/0x270 [ 1148.121670] ? del_timer_sync+0x1cc/0x270 [ 1148.121674] del_timer_sync+0x1a4/0x270 [ 1148.121677] schedule_timeout+0x4d7/0xfe0 [ 1148.121681] ? prepare_to_swait_event+0x5b/0x540 [ 1148.121684] ? usleep_range+0x170/0x170 [ 1148.121688] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1148.121692] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1148.121696] ? collect_expired_timers+0x2a0/0x2a0 [ 1148.121699] ? swake_up_all+0x340/0x340 [ 1148.121702] rcu_gp_kthread+0xdad/0x21c0 [ 1148.121706] ? lock_acquire+0x170/0x3c0 [ 1148.121709] ? __rcu_read_unlock+0x160/0x160 [ 1148.121713] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1148.121717] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1148.121721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1148.121724] ? __kthread_parkme+0x133/0x1e0 [ 1148.121728] ? __rcu_read_unlock+0x160/0x160 [ 1148.121731] kthread+0x33f/0x460 [ 1148.121734] ? kthread_park+0x180/0x180 [ 1148.121738] ret_from_fork+0x24/0x30 [ 1148.122185] Kernel panic - not syncing: hung_task: blocked tasks [ 1148.356161] CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 1148.363583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1148.372912] Call Trace: [ 1148.375486] dump_stack+0x1fc/0x2ef [ 1148.379094] panic+0x26a/0x50e [ 1148.382264] ? __warn_printk+0xf3/0xf3 [ 1148.386132] ? lapic_can_unplug_cpu+0x80/0x80 [ 1148.390604] ? ___preempt_schedule+0x16/0x18 [ 1148.394996] ? watchdog+0x991/0xe60 [ 1148.398606] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 1148.404038] watchdog+0x9a2/0xe60 [ 1148.407472] ? reset_hung_task_detector+0x30/0x30 [ 1148.412294] kthread+0x33f/0x460 [ 1148.415639] ? kthread_park+0x180/0x180 [ 1148.419594] ret_from_fork+0x24/0x30 [ 1148.423581] Kernel Offset: disabled [ 1148.427200] Rebooting in 86400 seconds..