[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 458.726200][ T27] audit: type=1400 audit(1599050369.813:8): avc: denied { execmem } for pid=6835 comm="syz-executor733" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program [ 458.899580][ T6837] block nbd0: shutting down sockets [ 488.888195][ T2451] block nbd0: Possible stuck request 0000000021ba3786: control (read@0,4096B). Runtime 30 seconds [ 518.968063][ T2451] block nbd0: Possible stuck request 0000000021ba3786: control (read@0,4096B). Runtime 60 seconds [ 549.048113][ T2451] block nbd0: Possible stuck request 0000000021ba3786: control (read@0,4096B). Runtime 90 seconds [ 579.128222][ T2451] block nbd0: Possible stuck request 0000000021ba3786: control (read@0,4096B). Runtime 120 seconds [ 609.208282][ T2451] block nbd0: Possible stuck request 0000000021ba3786: control (read@0,4096B). Runtime 150 seconds [ 616.248315][ T1157] INFO: task syz-executor733:6846 blocked for more than 143 seconds. [ 616.248340][ T1157] Not tainted 5.9.0-rc3-syzkaller #0 [ 616.263367][ T1157] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.272676][ T1157] task:syz-executor733 state:D stack:27776 pid: 6846 ppid: 6835 flags:0x00004004 [ 616.282581][ T1157] Call Trace: [ 616.285964][ T1157] __schedule+0xea9/0x2230 [ 616.291226][ T1157] ? io_schedule_timeout+0x140/0x140 [ 616.296577][ T1157] ? mark_held_locks+0x9f/0xe0 [ 616.302194][ T1157] ? wait_on_page_bit_common+0x52c/0xca0 [ 616.307819][ T1157] schedule+0xd0/0x2a0 [ 616.312708][ T1157] io_schedule+0xb5/0x120 [ 616.317047][ T1157] wait_on_page_bit_common+0x52c/0xca0 [ 616.323260][ T1157] ? replace_page_cache_page+0x1620/0x1620 [ 616.329579][ T1157] ? filemap_fdatawait_keep_errors+0xe0/0xe0 [ 616.335559][ T1157] ? pagecache_get_page+0x22b/0xf70 [ 616.341494][ T1157] do_read_cache_page+0x257/0x1390 [ 616.346732][ T1157] read_part_sector+0xf6/0x5af [ 616.352285][ T1157] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 616.357559][ T1157] adfspart_check_ICS+0x9d/0xc90 [ 616.363288][ T1157] ? pointer+0x970/0x970 [ 616.367560][ T1157] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 616.374473][ T1157] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 616.380228][ T1157] ? snprintf+0xbb/0xf0 [ 616.384386][ T1157] ? vsprintf+0x30/0x30 [ 616.389572][ T1157] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 616.394870][ T1157] blk_add_partitions+0x44b/0xe10 [ 616.400322][ T1157] bdev_disk_changed+0x1ea/0x370 [ 616.405289][ T1157] __blkdev_get+0xee4/0x1aa0 [ 616.409975][ T1157] ? freeze_bdev+0x250/0x250 [ 616.414641][ T1157] ? do_raw_spin_unlock+0x171/0x230 [ 616.419959][ T1157] blkdev_open+0x227/0x300 [ 616.424405][ T1157] do_dentry_open+0x4b9/0x11b0 [ 616.429217][ T1157] ? blkdev_get_by_path+0x100/0x100 [ 616.434486][ T1157] path_openat+0x1b9a/0x2730 [ 616.439199][ T1157] ? path_lookupat+0x830/0x830 [ 616.444032][ T1157] ? lock_is_held_type+0xbb/0xf0 [ 616.449085][ T1157] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 616.455087][ T1157] ? lock_is_held_type+0xbb/0xf0 [ 616.460287][ T1157] do_filp_open+0x17e/0x3c0 [ 616.464795][ T1157] ? may_open_dev+0xf0/0xf0 [ 616.469407][ T1157] ? do_raw_spin_lock+0x120/0x2b0 [ 616.474436][ T1157] ? rwlock_bug.part.0+0x90/0x90 [ 616.479490][ T1157] ? _raw_spin_unlock+0x24/0x40 [ 616.484420][ T1157] ? __alloc_fd+0x28d/0x600 [ 616.489150][ T1157] do_sys_openat2+0x16d/0x420 [ 616.493831][ T1157] ? build_open_flags+0x650/0x650 [ 616.498981][ T1157] __x64_sys_open+0x119/0x1c0 [ 616.503661][ T1157] ? do_sys_open+0x140/0x140 [ 616.508304][ T1157] ? check_preemption_disabled+0x50/0x130 [ 616.514147][ T1157] ? syscall_enter_from_user_mode+0x20/0x290 [ 616.521222][ T1157] ? lockdep_hardirqs_on+0x53/0x100 [ 616.526413][ T1157] do_syscall_64+0x2d/0x70 [ 616.530875][ T1157] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.536865][ T1157] RIP: 0033:0x4057a1 [ 616.540859][ T1157] Code: Bad RIP value. [ 616.544940][ T1157] RSP: 002b:00007f290cb16980 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 616.553450][ T1157] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004057a1 [ 616.561541][ T1157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f290cb16990 [ 616.569636][ T1157] RBP: 6666666666666667 R08: 000000000000000f R09: 00007f290cb17700 [ 616.577609][ T1157] R10: 00007f290cb179d0 R11: 0000000000000293 R12: 00000000006dbc2c [ 616.585716][ T1157] R13: 00007ffe20c2e1df R14: 00007f290cb179c0 R15: 20c49ba5e353f7cf [ 616.593841][ T1157] [ 616.593841][ T1157] Showing all locks held in the system: [ 616.601635][ T1157] 1 lock held by khungtaskd/1157: [ 616.606679][ T1157] #0: ffffffff89bd6a40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 616.616623][ T1157] 1 lock held by in:imklog/6532: [ 616.621885][ T1157] #0: ffff8880a780bd70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 616.631099][ T1157] 1 lock held by syz-executor733/6846: [ 616.636556][ T1157] #0: ffff888089271080 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x4b8/0x1aa0 [ 616.646777][ T1157] [ 616.649733][ T1157] ============================================= [ 616.649733][ T1157] [ 616.658289][ T1157] NMI backtrace for cpu 0 [ 616.662645][ T1157] CPU: 0 PID: 1157 Comm: khungtaskd Not tainted 5.9.0-rc3-syzkaller #0 [ 616.670863][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.681075][ T1157] Call Trace: [ 616.684420][ T1157] dump_stack+0x198/0x1fd [ 616.688864][ T1157] nmi_cpu_backtrace.cold+0x70/0xb1 [ 616.694114][ T1157] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 616.699735][ T1157] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 616.705762][ T1157] watchdog+0xd7d/0x1000 [ 616.709991][ T1157] ? reset_hung_task_detector+0x30/0x30 [ 616.715585][ T1157] kthread+0x3b5/0x4a0 [ 616.719782][ T1157] ? __kthread_bind_mask+0xc0/0xc0 [ 616.724945][ T1157] ret_from_fork+0x1f/0x30 [ 616.729487][ T1157] Sending NMI from CPU 0 to CPUs 1: [ 616.735480][ C1] NMI backtrace for cpu 1 [ 616.735486][ C1] CPU: 1 PID: 3892 Comm: systemd-journal Not tainted 5.9.0-rc3-syzkaller #0 [ 616.735493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.735497][ C1] RIP: 0010:get_stack_info+0xb2/0x154 [ 616.735508][ C1] Code: c9 74 4d 8b 34 d5 c0 a8 45 88 0f b7 14 d5 c6 a8 45 88 48 01 f0 48 01 c1 89 13 48 89 43 08 48 89 4b 10 48 8b 41 f0 48 89 43 18 <45> 31 c0 4d 85 e4 74 14 49 8b 04 24 8b 33 48 0f a3 f0 72 71 48 0f [ 616.735513][ C1] RSP: 0018:ffffc90001277980 EFLAGS: 00000002 [ 616.735521][ C1] RAX: 0000000000000001 RBX: ffffc900012779f8 RCX: ffffc90001278000 [ 616.735526][ C1] RDX: ffffc900012779f8 RSI: ffff8880a7ddc080 RDI: ffffc900012779a8 [ 616.735532][ C1] RBP: ffffc900012779a8 R08: 0000000000000001 R09: ffffc900012779f8 [ 616.735537][ C1] R10: fffff5200024ef4a R11: 0000000000000000 R12: ffffc90001277a18 [ 616.735542][ C1] R13: ffff8880a7ddc080 R14: ffffc90001277a30 R15: ffffc900012779f8 [ 616.735548][ C1] FS: 00007efdd65738c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 616.735553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.735558][ C1] CR2: 00007efdd392a000 CR3: 0000000092261000 CR4: 00000000001506e0 [ 616.735563][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.735569][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.735572][ C1] Call Trace: [ 616.735575][ C1] __unwind_start+0x4aa/0x800 [ 616.735579][ C1] ? profile_setup.cold+0xc1/0xc1 [ 616.735583][ C1] arch_stack_walk+0x5e/0xf0 [ 616.735587][ C1] ? __unwind_start+0x592/0x800 [ 616.735590][ C1] ? putname+0xe1/0x120 [ 616.735594][ C1] stack_trace_save+0x8c/0xc0 [ 616.735598][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 616.735602][ C1] ? mark_lock+0xbc/0x1710 [ 616.735606][ C1] kasan_save_stack+0x1b/0x40 [ 616.735610][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 616.735614][ C1] ? __lock_acquire+0x161b/0x5570 [ 616.735618][ C1] ? lock_is_held_type+0xbb/0xf0 [ 616.735621][ C1] ? find_held_lock+0x2d/0x110 [ 616.735626][ C1] ? debug_check_no_obj_freed+0x20c/0x41c [ 616.735629][ C1] ? lock_downgrade+0x830/0x830 [ 616.735633][ C1] ? lock_acquire+0x1f3/0xae0 [ 616.735644][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 616.735649][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 616.735653][ C1] ? debug_check_no_obj_freed+0x20c/0x41c [ 616.735657][ C1] kasan_set_track+0x1c/0x30 [ 616.735661][ C1] kasan_set_free_info+0x1b/0x30 [ 616.735665][ C1] __kasan_slab_free+0xd8/0x120 [ 616.735668][ C1] ? putname+0xe1/0x120 [ 616.735672][ C1] kmem_cache_free.part.0+0x74/0x1e0 [ 616.735676][ C1] putname+0xe1/0x120 [ 616.735679][ C1] do_sys_openat2+0x153/0x420 [ 616.735683][ C1] ? seccomp_notify_ioctl+0xd90/0xd90 [ 616.735687][ C1] ? strncpy_from_user+0x2bf/0x3e0 [ 616.735691][ C1] ? build_open_flags+0x650/0x650 [ 616.735695][ C1] ? getname_flags.part.0+0x1dd/0x4f0 [ 616.735699][ C1] __x64_sys_open+0x119/0x1c0 [ 616.735703][ C1] ? do_sys_open+0x140/0x140 [ 616.735707][ C1] ? __secure_computing+0x104/0x360 [ 616.735710][ C1] do_syscall_64+0x2d/0x70 [ 616.735715][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.735718][ C1] RIP: 0033:0x7efdd5b03840 [ 616.735730][ C1] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 616.735735][ C1] RSP: 002b:00007ffd1fbc6b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 616.735745][ C1] RAX: ffffffffffffffda RBX: 00007ffd1fbc6e70 RCX: 00007efdd5b03840 [ 616.735751][ C1] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 00005597b5ff09d0 [ 616.735756][ C1] RBP: 000000000000000d R08: 0000000000000000 R09: 00000000ffffffff [ 616.735762][ C1] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 616.735767][ C1] R13: 00005597b5fe3060 R14: 00007ffd1fbc6e30 R15: 00005597b5ff07f0 [ 616.735820][ T1157] Kernel panic - not syncing: hung_task: blocked tasks [ 617.134513][ T1157] CPU: 0 PID: 1157 Comm: khungtaskd Not tainted 5.9.0-rc3-syzkaller #0 [ 617.142735][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.152784][ T1157] Call Trace: [ 617.156059][ T1157] dump_stack+0x198/0x1fd [ 617.161138][ T1157] panic+0x347/0x7c0 [ 617.165031][ T1157] ? __warn_printk+0xf3/0xf3 [ 617.169603][ T1157] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 617.175227][ T1157] ? preempt_schedule_thunk+0x16/0x18 [ 617.180579][ T1157] ? watchdog.cold+0x5/0x16b [ 617.185158][ T1157] ? watchdog+0xa82/0x1000 [ 617.189561][ T1157] watchdog.cold+0x16/0x16b [ 617.194045][ T1157] ? reset_hung_task_detector+0x30/0x30 [ 617.199571][ T1157] kthread+0x3b5/0x4a0 [ 617.203634][ T1157] ? __kthread_bind_mask+0xc0/0xc0 [ 617.208737][ T1157] ret_from_fork+0x1f/0x30 [ 617.214415][ T1157] Kernel Offset: disabled [ 617.218741][ T1157] Rebooting in 86400 seconds..