[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 459.607799][ T28] audit: type=1400 audit(1598249601.258:8): avc: denied { execmem } for pid=6873 comm="syz-executor498" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program [ 459.778235][ T6875] block nbd0: shutting down sockets [ 489.741818][ T2457] block nbd0: Possible stuck request 000000004c54137a: control (read@0,4096B). Runtime 30 seconds [ 519.817877][ T2457] block nbd0: Possible stuck request 000000004c54137a: control (read@0,4096B). Runtime 60 seconds [ 549.894494][ T2457] block nbd0: Possible stuck request 000000004c54137a: control (read@0,4096B). Runtime 90 seconds [ 579.971529][ T2457] block nbd0: Possible stuck request 000000004c54137a: control (read@0,4096B). Runtime 120 seconds [ 610.048896][ T2457] block nbd0: Possible stuck request 000000004c54137a: control (read@0,4096B). Runtime 150 seconds [ 617.728351][ T1174] INFO: task syz-executor498:6884 blocked for more than 143 seconds. [ 617.736512][ T1174] Not tainted 5.9.0-rc1-syzkaller #0 [ 617.744302][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.753166][ T1174] task:syz-executor498 state:D stack:27968 pid: 6884 ppid: 6873 flags:0x00004004 [ 617.762448][ T1174] Call Trace: [ 617.765789][ T1174] __schedule+0x8e5/0x21e0 [ 617.770374][ T1174] ? io_schedule_timeout+0x140/0x140 [ 617.775685][ T1174] ? mark_held_locks+0x9f/0xe0 [ 617.780523][ T1174] ? wait_on_page_bit_common+0x52c/0xca0 [ 617.786187][ T1174] schedule+0xd0/0x2a0 [ 617.790331][ T1174] io_schedule+0xb5/0x120 [ 617.794666][ T1174] wait_on_page_bit_common+0x52c/0xca0 [ 617.800254][ T1174] ? replace_page_cache_page+0x1620/0x1620 [ 617.806085][ T1174] ? filemap_fdatawait_keep_errors+0xe0/0xe0 [ 617.812499][ T1174] ? pagecache_get_page+0x22b/0xf70 [ 617.817733][ T1174] do_read_cache_page+0x257/0x1390 [ 617.823143][ T1174] read_part_sector+0xf6/0x5af [ 617.827939][ T1174] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 617.833474][ T1174] adfspart_check_ICS+0x9d/0xc90 [ 617.838489][ T1174] ? pointer+0x970/0x970 [ 617.842739][ T1174] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 617.848388][ T1174] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 617.853738][ T1174] ? snprintf+0xbb/0xf0 [ 617.857922][ T1174] ? vsprintf+0x30/0x30 [ 617.862140][ T1174] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 617.867439][ T1174] blk_add_partitions+0x44b/0xe10 [ 617.872579][ T1174] bdev_disk_changed+0x1ea/0x370 [ 617.877572][ T1174] __blkdev_get+0xee4/0x1aa0 [ 617.882223][ T1174] ? freeze_bdev+0x250/0x250 [ 617.886828][ T1174] ? do_raw_spin_unlock+0x171/0x230 [ 617.892283][ T1174] blkdev_open+0x227/0x300 [ 617.896716][ T1174] do_dentry_open+0x4b9/0x11b0 [ 617.901550][ T1174] ? blkdev_get_by_path+0x100/0x100 [ 617.906772][ T1174] path_openat+0x1b9a/0x2730 [ 617.911452][ T1174] ? path_lookupat+0x830/0x830 [ 617.916285][ T1174] ? lock_is_held_type+0xbb/0xf0 [ 617.921291][ T1174] do_filp_open+0x17e/0x3c0 [ 617.925823][ T1174] ? may_open_dev+0xf0/0xf0 [ 617.930428][ T1174] ? do_raw_spin_lock+0x120/0x2b0 [ 617.935456][ T1174] ? rwlock_bug.part.0+0x90/0x90 [ 617.940533][ T1174] ? _raw_spin_unlock+0x24/0x40 [ 617.945400][ T1174] ? __alloc_fd+0x28d/0x600 [ 617.950001][ T1174] do_sys_openat2+0x16d/0x420 [ 617.954709][ T1174] ? build_open_flags+0x650/0x650 [ 617.959804][ T1174] __x64_sys_open+0x119/0x1c0 [ 617.964489][ T1174] ? do_sys_open+0x140/0x140 [ 617.969187][ T1174] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 617.975180][ T1174] ? trace_hardirqs_on+0x5f/0x220 [ 617.980314][ T1174] ? lockdep_hardirqs_on+0x76/0xf0 [ 617.988495][ T1174] do_syscall_64+0x2d/0x70 [ 617.992898][ T1174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.998860][ T1174] RIP: 0033:0x405811 [ 618.002758][ T1174] Code: Bad RIP value. [ 618.006806][ T1174] RSP: 002b:00007f5f63ee1980 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 618.015363][ T1174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000405811 [ 618.023453][ T1174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f5f63ee1990 [ 618.031690][ T1174] RBP: 6666666666666667 R08: 000000000000000f R09: 00007f5f63ee2700 [ 618.039744][ T1174] R10: 00007f5f63ee29d0 R11: 0000000000000293 R12: 00000000006dbc4c [ 618.047718][ T1174] R13: 00007ffd5773926f R14: 00007f5f63ee29c0 R15: 20c49ba5e353f7cf [ 618.055802][ T1174] INFO: task syz-executor498:6885 blocked for more than 143 seconds. [ 618.063938][ T1174] Not tainted 5.9.0-rc1-syzkaller #0 [ 618.069844][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.079157][ T1174] task:syz-executor498 state:D stack:28744 pid: 6885 ppid: 6873 flags:0x00000004 [ 618.088759][ T1174] Call Trace: [ 618.092055][ T1174] __schedule+0x8e5/0x21e0 [ 618.096459][ T1174] ? io_schedule_timeout+0x140/0x140 [ 618.101824][ T1174] schedule+0xd0/0x2a0 [ 618.105904][ T1174] schedule_preempt_disabled+0xf/0x20 [ 618.111354][ T1174] __mutex_lock+0x3e2/0x10e0 [ 618.115950][ T1174] ? lock_acquire+0x1f1/0xad0 [ 618.120708][ T1174] ? __blkdev_get+0x4b8/0x1aa0 [ 618.125490][ T1174] ? mutex_lock_io_nested+0xf60/0xf60 [ 618.130946][ T1174] ? _down_write_nest_lock+0x150/0x150 [ 618.136406][ T1174] ? kobj_lookup+0x36f/0x460 [ 618.141148][ T1174] ? disk_block_events+0x1d/0x130 [ 618.146187][ T1174] __blkdev_get+0x4b8/0x1aa0 [ 618.150862][ T1174] ? freeze_bdev+0x250/0x250 [ 618.155458][ T1174] ? do_raw_spin_unlock+0x171/0x230 [ 618.160719][ T1174] blkdev_open+0x227/0x300 [ 618.165165][ T1174] do_dentry_open+0x4b9/0x11b0 [ 618.170066][ T1174] ? blkdev_get_by_path+0x100/0x100 [ 618.175327][ T1174] path_openat+0x1b9a/0x2730 [ 618.179977][ T1174] ? path_lookupat+0x830/0x830 [ 618.184757][ T1174] ? lock_is_held_type+0xbb/0xf0 [ 618.189767][ T1174] do_filp_open+0x17e/0x3c0 [ 618.194276][ T1174] ? may_open_dev+0xf0/0xf0 [ 618.198853][ T1174] ? do_raw_spin_lock+0x120/0x2b0 [ 618.203889][ T1174] ? rwlock_bug.part.0+0x90/0x90 [ 618.208906][ T1174] ? _raw_spin_unlock+0x24/0x40 [ 618.213773][ T1174] ? __alloc_fd+0x28d/0x600 [ 618.218336][ T1174] do_sys_openat2+0x16d/0x420 [ 618.223198][ T1174] ? lock_downgrade+0x830/0x830 [ 618.228138][ T1174] ? build_open_flags+0x650/0x650 [ 618.233217][ T1174] __x64_sys_open+0x119/0x1c0 [ 618.237877][ T1174] ? do_sys_open+0x140/0x140 [ 618.242528][ T1174] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 618.248606][ T1174] ? trace_hardirqs_on+0x5f/0x220 [ 618.253752][ T1174] ? lockdep_hardirqs_on+0x76/0xf0 [ 618.258932][ T1174] do_syscall_64+0x2d/0x70 [ 618.263361][ T1174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.269438][ T1174] RIP: 0033:0x405811 [ 618.273325][ T1174] Code: Bad RIP value. [ 618.277380][ T1174] RSP: 002b:00007f5f63ec0980 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 618.285883][ T1174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000405811 [ 618.294127][ T1174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f5f63ec0990 [ 618.302156][ T1174] RBP: 6666666666666667 R08: 000000000000000f R09: 0000000000000000 [ 618.310218][ T1174] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000006dbc5c [ 618.318316][ T1174] R13: 00007ffd5773926f R14: 00007f5f63ec19c0 R15: 20c49ba5e353f7cf [ 618.326348][ T1174] [ 618.326348][ T1174] Showing all locks held in the system: [ 618.334163][ T1174] 1 lock held by khungtaskd/1174: [ 618.339265][ T1174] #0: ffffffff89bd6900 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 618.349246][ T1174] 1 lock held by syz-executor498/6884: [ 618.354704][ T1174] #0: ffff888088e99900 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x4b8/0x1aa0 [ 618.364235][ T1174] 1 lock held by syz-executor498/6885: [ 618.369773][ T1174] #0: ffff888088e99900 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x4b8/0x1aa0 [ 618.379285][ T1174] [ 618.381632][ T1174] ============================================= [ 618.381632][ T1174] [ 618.390125][ T1174] NMI backtrace for cpu 1 [ 618.394450][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc1-syzkaller #0 [ 618.402783][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.412829][ T1174] Call Trace: [ 618.416205][ T1174] dump_stack+0x18f/0x20d [ 618.420518][ T1174] nmi_cpu_backtrace.cold+0x70/0xb1 [ 618.425701][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 618.431314][ T1174] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 618.437292][ T1174] watchdog+0xd7d/0x1000 [ 618.441524][ T1174] ? reset_hung_task_detector+0x30/0x30 [ 618.447227][ T1174] kthread+0x3b5/0x4a0 [ 618.451279][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 618.456388][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 618.461489][ T1174] ret_from_fork+0x1f/0x30 [ 618.465991][ T1174] Sending NMI from CPU 1 to CPUs 0: [ 618.471657][ C0] NMI backtrace for cpu 0 [ 618.471663][ C0] CPU: 0 PID: 3905 Comm: systemd-journal Not tainted 5.9.0-rc1-syzkaller #0 [ 618.471669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.471673][ C0] RIP: 0010:__lock_acquire+0xd63/0x5640 [ 618.471683][ C0] Code: 0a 41 bf 01 00 00 00 0f 86 83 00 00 00 89 05 44 6c be 0a eb 7b 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 57 34 00 00 48 81 3b 00 d5 ed 8b 0f 84 64 f3 ff ff 83 fe 01 [ 618.471687][ C0] RSP: 0018:ffffc9000542f938 EFLAGS: 00000046 [ 618.471694][ C0] RAX: dffffc0000000000 RBX: ffffffff8cc09198 RCX: 1ffff92000a85f39 [ 618.471699][ C0] RDX: 1ffffffff1981233 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.471704][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 618.471708][ C0] R10: fffffbfff15646d1 R11: 0000000000000000 R12: 0000000000000000 [ 618.471713][ C0] R13: 0000000000000000 R14: ffff8880a6958300 R15: 0000000000000000 [ 618.471718][ C0] FS: 00007fa5b870f8c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 618.471722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.471727][ C0] CR2: 00007fa5b5aca008 CR3: 00000000a6f8b000 CR4: 00000000001506f0 [ 618.471732][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.471737][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.471739][ C0] Call Trace: [ 618.471743][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 618.471746][ C0] ? mark_lock+0xbc/0x1710 [ 618.471749][ C0] lock_acquire+0x1f1/0xad0 [ 618.471752][ C0] ? debug_check_no_obj_freed+0xc7/0x41c [ 618.471755][ C0] ? lock_release+0x8e0/0x8e0 [ 618.471758][ C0] ? lock_downgrade+0x830/0x830 [ 618.471762][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 618.471765][ C0] ? __free_pages_ok+0x43c/0xc90 [ 618.471769][ C0] _raw_spin_lock_irqsave+0x8c/0xc0 [ 618.471772][ C0] ? debug_check_no_obj_freed+0xc7/0x41c [ 618.471776][ C0] debug_check_no_obj_freed+0xc7/0x41c [ 618.471779][ C0] __free_pages_ok+0x240/0xc90 [ 618.471782][ C0] slabs_destroy+0x89/0xc0 [ 618.471785][ C0] ___cache_free+0x510/0x740 [ 618.471788][ C0] qlist_free_all+0x98/0x160 [ 618.471791][ C0] quarantine_reduce+0x17e/0x200 [ 618.471795][ C0] __kasan_kmalloc.constprop.0+0x9e/0xd0 [ 618.471798][ C0] kmem_cache_alloc+0x138/0x3a0 [ 618.471801][ C0] getname_flags.part.0+0x50/0x4f0 [ 618.471804][ C0] getname_flags+0x9a/0xe0 [ 618.471807][ C0] do_mkdirat+0x8d/0x2d0 [ 618.471810][ C0] ? user_path_create+0xf0/0xf0 [ 618.471814][ C0] ? __secure_computing+0x104/0x360 [ 618.471816][ C0] do_syscall_64+0x2d/0x70 [ 618.471820][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.471823][ C0] RIP: 0033:0x7fa5b79cb687 [ 618.471834][ C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 618.471838][ C0] RSP: 002b:00007ffcfc5c7c58 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 618.471846][ C0] RAX: ffffffffffffffda RBX: 00007ffcfc5cab70 RCX: 00007fa5b79cb687 [ 618.471850][ C0] RDX: 00007fa5b843ca00 RSI: 00000000000001ed RDI: 0000556895b058c0 [ 618.471855][ C0] RBP: 00007ffcfc5c7c90 R08: 0000000000000000 R09: 0000000000000000 [ 618.471860][ C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 618.471864][ C0] R13: 0000000000000000 R14: 00007ffcfc5cab70 R15: 00007ffcfc5c8180 [ 618.472248][ T1174] Kernel panic - not syncing: hung_task: blocked tasks [ 618.811847][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc1-syzkaller #0 [ 618.820058][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.830090][ T1174] Call Trace: [ 618.833376][ T1174] dump_stack+0x18f/0x20d [ 618.837688][ T1174] panic+0x2e3/0x75c [ 618.841588][ T1174] ? __warn_printk+0xf3/0xf3 [ 618.846156][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 618.851771][ T1174] ? preempt_schedule_thunk+0x16/0x18 [ 618.857125][ T1174] ? watchdog.cold+0x5/0x16b [ 618.861694][ T1174] ? watchdog+0xa82/0x1000 [ 618.866125][ T1174] watchdog.cold+0x16/0x16b [ 618.870610][ T1174] ? reset_hung_task_detector+0x30/0x30 [ 618.876142][ T1174] kthread+0x3b5/0x4a0 [ 618.880193][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 618.885282][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 618.890372][ T1174] ret_from_fork+0x1f/0x30 [ 618.896329][ T1174] Kernel Offset: disabled [ 618.900660][ T1174] Rebooting in 86400 seconds..