[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.210' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 449.556460][ T28] audit: type=1400 audit(1598694073.938:8): avc: denied { execmem } for pid=6861 comm="syz-executor463" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 596.697778][ T1171] INFO: task syz-executor463:6861 blocked for more than 143 seconds. [ 596.705989][ T1171] Not tainted 5.9.0-rc2-syzkaller #0 [ 596.712131][ T1171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.720889][ T1171] task:syz-executor463 state:D stack:26864 pid: 6861 ppid: 6855 flags:0x00000000 [ 596.730956][ T1171] Call Trace: [ 596.734421][ T1171] __schedule+0x8e5/0x21e0 [ 596.738912][ T1171] ? io_schedule_timeout+0x140/0x140 [ 596.744203][ T1171] schedule+0xd0/0x2a0 [ 596.748382][ T1171] schedule_timeout+0x1d8/0x250 [ 596.753239][ T1171] ? usleep_range+0x170/0x170 [ 596.758099][ T1171] ? lock_downgrade+0x830/0x830 [ 596.762956][ T1171] ? do_raw_spin_lock+0x120/0x2b0 [ 596.768035][ T1171] ? _raw_spin_unlock_irq+0x1f/0x80 [ 596.773256][ T1171] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 596.779457][ T1171] ? trace_hardirqs_on+0x5f/0x220 [ 596.784515][ T1171] wait_for_completion_timeout+0x15e/0x270 [ 596.790388][ T1171] ? wait_for_completion_io+0x260/0x260 [ 596.796024][ T1171] ? usb_submit_urb+0xb56/0x1320 [ 596.801146][ T1171] ? lockdep_init_map_waits+0x1b3/0x8a0 [ 596.806699][ T1171] usb_start_wait_urb+0x144/0x2b0 [ 596.811779][ T1171] ? usb_api_blocking_completion+0xa0/0xa0 [ 596.817819][ T1171] ? memset+0x20/0x40 [ 596.821799][ T1171] usb_bulk_msg+0x226/0x550 [ 596.826308][ T1171] do_proc_bulk+0x39b/0x710 [ 596.830860][ T1171] ? do_proc_control+0x930/0x930 [ 596.835841][ T1171] ? __might_fault+0x190/0x1d0 [ 596.840709][ T1171] usbdev_ioctl+0x586/0x3360 [ 596.845307][ T1171] ? processcompl_compat+0x670/0x670 [ 596.850866][ T1171] ? lock_is_held_type+0xbb/0xf0 [ 596.855935][ T1171] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 596.862843][ T1171] ? do_vfs_ioctl+0x27d/0x1090 [ 596.867699][ T1171] ? generic_block_fiemap+0x60/0x60 [ 596.873013][ T1171] ? selinux_inode_getsecctx+0x90/0x90 [ 596.878548][ T1171] ? io_schedule_timeout+0x140/0x140 [ 596.883924][ T1171] ? bpf_lsm_file_ioctl+0x5/0x10 [ 596.888910][ T1171] ? processcompl_compat+0x670/0x670 [ 596.894199][ T1171] __x64_sys_ioctl+0x193/0x200 [ 596.899078][ T1171] do_syscall_64+0x2d/0x70 [ 596.903493][ T1171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 596.909461][ T1171] RIP: 0033:0x443f89 [ 596.913357][ T1171] Code: Bad RIP value. [ 596.917411][ T1171] RSP: 002b:00007ffe8124ff08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.925893][ T1171] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443f89 [ 596.933936][ T1171] RDX: 0000000020000000 RSI: 00000000c0185502 RDI: 0000000000000003 [ 596.941986][ T1171] RBP: 00000000006ce018 R08: 00000000004002e0 R09: 00000000004002e0 [ 596.950025][ T1171] R10: 00000000004002e0 R11: 0000000000000246 R12: 0000000000401c10 [ 596.958072][ T1171] R13: 0000000000401ca0 R14: 0000000000000000 R15: 0000000000000000 [ 596.966072][ T1171] [ 596.966072][ T1171] Showing all locks held in the system: [ 596.973875][ T1171] 1 lock held by khungtaskd/1171: [ 596.978983][ T1171] #0: ffffffff89bd6900 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 596.989655][ T1171] 1 lock held by in:imklog/6546: [ 596.994606][ T1171] #0: ffff8880a67ffaf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 597.003944][ T1171] [ 597.006267][ T1171] ============================================= [ 597.006267][ T1171] [ 597.014738][ T1171] NMI backtrace for cpu 0 [ 597.019159][ T1171] CPU: 0 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc2-syzkaller #0 [ 597.027475][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.037536][ T1171] Call Trace: [ 597.040900][ T1171] dump_stack+0x18f/0x20d [ 597.045271][ T1171] nmi_cpu_backtrace.cold+0x70/0xb1 [ 597.050504][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 597.056145][ T1171] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 597.062130][ T1171] watchdog+0xd7d/0x1000 [ 597.066354][ T1171] ? reset_hung_task_detector+0x30/0x30 [ 597.072048][ T1171] kthread+0x3b5/0x4a0 [ 597.076106][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 597.081196][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 597.086319][ T1171] ret_from_fork+0x1f/0x30 [ 597.090841][ T1171] Sending NMI from CPU 0 to CPUs 1: [ 597.096392][ C1] NMI backtrace for cpu 1 [ 597.096398][ C1] CPU: 1 PID: 3901 Comm: systemd-journal Not tainted 5.9.0-rc2-syzkaller #0 [ 597.096404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.096408][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 597.096418][ C1] Code: 48 89 ef 5d e9 a1 a3 3f 00 5d be 03 00 00 00 e9 36 27 27 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 48 8b 14 25 c0 fe 01 00 65 8b 05 60 bf 8d 7e a9 00 01 ff 00 48 [ 597.096421][ C1] RSP: 0018:ffffc90005387d60 EFLAGS: 00000246 [ 597.096428][ C1] RAX: 0000000000000000 RBX: ffff88808e8bade0 RCX: ffffffff81bd1aab [ 597.096433][ C1] RDX: ffff8880a64d8380 RSI: ffffffff81bd1ab9 RDI: ffff88808e8bade0 [ 597.096438][ C1] RBP: 0000000080000000 R08: 0000000000000001 R09: ffff88808e8bbdbf [ 597.096442][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 597.096447][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8ab264c8 [ 597.096451][ C1] FS: 00007f99b1df88c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 597.096456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.096460][ C1] CR2: 00007f99af1ac000 CR3: 00000000a71c1000 CR4: 00000000001506e0 [ 597.096465][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.096469][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.096472][ C1] Call Trace: [ 597.096475][ C1] __virt_addr_valid+0x18/0x2b0 [ 597.096478][ C1] __check_object_size+0xc1/0x3e4 [ 597.096481][ C1] strncpy_from_user+0xaf/0x3e0 [ 597.096484][ C1] getname_flags.part.0+0x95/0x4f0 [ 597.096487][ C1] getname_flags+0x9a/0xe0 [ 597.096490][ C1] do_mkdirat+0x8d/0x2d0 [ 597.096493][ C1] ? user_path_create+0xf0/0xf0 [ 597.096496][ C1] ? __secure_computing+0x104/0x360 [ 597.096499][ C1] do_syscall_64+0x2d/0x70 [ 597.096503][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 597.096506][ C1] RIP: 0033:0x7f99b10b4687 [ 597.096516][ C1] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 597.096520][ C1] RSP: 002b:00007ffefe4e5b08 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 597.096528][ C1] RAX: ffffffffffffffda RBX: 00007ffefe4e8b70 RCX: 00007f99b10b4687 [ 597.096532][ C1] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000564a771358c0 [ 597.096537][ C1] RBP: 00007ffefe4e5b40 R08: 0000564a76dcd3e5 R09: 0000000000000018 [ 597.096541][ C1] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 597.096545][ C1] R13: 0000000000000001 R14: 0000564a771358c0 R15: 00007ffefe4e6180 [ 597.097099][ T1171] Kernel panic - not syncing: hung_task: blocked tasks [ 597.370957][ T1171] CPU: 0 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc2-syzkaller #0 [ 597.379258][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.389292][ T1171] Call Trace: [ 597.392583][ T1171] dump_stack+0x18f/0x20d [ 597.396944][ T1171] panic+0x2e3/0x75c [ 597.400819][ T1171] ? __warn_printk+0xf3/0xf3 [ 597.405386][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 597.410992][ T1171] ? preempt_schedule_thunk+0x16/0x18 [ 597.416351][ T1171] ? watchdog.cold+0x5/0x16b [ 597.420913][ T1171] ? watchdog+0xa82/0x1000 [ 597.425303][ T1171] watchdog.cold+0x16/0x16b [ 597.429784][ T1171] ? reset_hung_task_detector+0x30/0x30 [ 597.435311][ T1171] kthread+0x3b5/0x4a0 [ 597.439353][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 597.444446][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 597.449560][ T1171] ret_from_fork+0x1f/0x30 [ 597.455304][ T1171] Kernel Offset: disabled [ 597.459629][ T1171] Rebooting in 86400 seconds..