[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 636.843219][ T1174] INFO: task syz-executor047:6853 blocked for more than 143 seconds. [ 636.851406][ T1174] Not tainted 5.9.0-rc3-next-20200902-syzkaller #0 [ 636.860052][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.869620][ T1174] task:syz-executor047 state:D stack:28104 pid: 6853 ppid: 6847 flags:0x00004000 [ 636.878908][ T1174] Call Trace: [ 636.882289][ T1174] __schedule+0xea9/0x2230 [ 636.886792][ T1174] ? io_schedule_timeout+0x140/0x140 [ 636.892092][ T1174] schedule+0xd0/0x2a0 [ 636.896212][ T1174] schedule_timeout+0x1d8/0x250 [ 636.901072][ T1174] ? usleep_range+0x170/0x170 [ 636.905824][ T1174] ? lock_downgrade+0x830/0x830 [ 636.910705][ T1174] ? do_raw_spin_lock+0x120/0x2b0 [ 636.915799][ T1174] ? _raw_spin_unlock_irq+0x1f/0x80 [ 636.921005][ T1174] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 636.927059][ T1174] ? _raw_spin_unlock_irq+0x1f/0x80 [ 636.932284][ T1174] wait_for_completion+0x163/0x260 [ 636.937461][ T1174] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 636.943531][ T1174] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 636.950050][ T1174] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 636.955924][ T1174] ? __kthread_bind_mask+0xa1/0xc0 [ 636.961043][ T1174] io_uring_setup+0x1495/0x29a0 [ 636.965990][ T1174] ? io_connect+0x510/0x510 [ 636.970499][ T1174] ? io_sq_thread+0xe00/0xe00 [ 636.975221][ T1174] ? io_wake_function+0x2e0/0x2e0 [ 636.980274][ T1174] ? check_preemption_disabled+0x50/0x130 [ 636.986116][ T1174] ? syscall_enter_from_user_mode+0x20/0x290 [ 636.992128][ T1174] ? lockdep_hardirqs_on+0x53/0x100 [ 636.998397][ T1174] do_syscall_64+0x2d/0x70 [ 637.002837][ T1174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.008840][ T1174] RIP: 0033:0x440299 [ 637.012736][ T1174] Code: Bad RIP value. [ 637.016900][ T1174] RSP: 002b:00007ffc57cff668 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 637.025399][ T1174] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440299 [ 637.033441][ T1174] RDX: 0000000000400b40 RSI: 0000000020000100 RDI: 0000000000003ffe [ 637.041421][ T1174] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 637.049480][ T1174] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401aa0 [ 637.057576][ T1174] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 637.065655][ T1174] INFO: task io_uring-sq:6854 blocked for more than 143 seconds. [ 637.073438][ T1174] Not tainted 5.9.0-rc3-next-20200902-syzkaller #0 [ 637.080472][ T1174] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.089251][ T1174] task:io_uring-sq state:D stack:31200 pid: 6854 ppid: 2 flags:0x00004000 [ 637.098540][ T1174] Call Trace: [ 637.101843][ T1174] __schedule+0xea9/0x2230 [ 637.106350][ T1174] ? io_schedule_timeout+0x140/0x140 [ 637.111693][ T1174] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 637.117577][ T1174] schedule+0xd0/0x2a0 [ 637.121658][ T1174] ? __do_sys_io_uring_enter+0x1b00/0x1b00 [ 637.128484][ T1174] schedule_preempt_disabled+0xf/0x20 [ 637.134006][ T1174] kthread+0x2ac/0x4a0 [ 637.138089][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 637.143274][ T1174] ret_from_fork+0x1f/0x30 [ 637.147739][ T1174] [ 637.147739][ T1174] Showing all locks held in the system: [ 637.155545][ T1174] 1 lock held by khungtaskd/1174: [ 637.160590][ T1174] #0: ffffffff89c67980 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 637.170550][ T1174] 3 locks held by in:imklog/6525: [ 637.175626][ T1174] #0: ffff8880a3de2df0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 637.184848][ T1174] #1: ffff8880907d8968 (&mm->mmap_lock#2){++++}-{3:3}, at: try_to_wake_up+0x52b/0x12b0 [ 637.194682][ T1174] #2: ffff8880ae620ec8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2fb/0x400 [ 637.206162][ T1174] [ 637.208500][ T1174] ============================================= [ 637.208500][ T1174] [ 637.216976][ T1174] NMI backtrace for cpu 1 [ 637.221315][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200902-syzkaller #0 [ 637.230746][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.240781][ T1174] Call Trace: [ 637.244055][ T1174] dump_stack+0x198/0x1fd [ 637.248365][ T1174] nmi_cpu_backtrace.cold+0x44/0xd7 [ 637.253551][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 637.259162][ T1174] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 637.265120][ T1174] watchdog+0xd89/0xf30 [ 637.269256][ T1174] ? trace_sched_process_hang+0x2e0/0x2e0 [ 637.274955][ T1174] kthread+0x3b5/0x4a0 [ 637.279003][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 637.284149][ T1174] ret_from_fork+0x1f/0x30 [ 637.288684][ T1174] Sending NMI from CPU 1 to CPUs 0: [ 637.294698][ C0] NMI backtrace for cpu 0 [ 637.294706][ C0] CPU: 0 PID: 3901 Comm: systemd-journal Not tainted 5.9.0-rc3-next-20200902-syzkaller #0 [ 637.294713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.294718][ C0] RIP: 0010:unwind_next_frame+0x139a/0x1f90 [ 637.294730][ C0] Code: 49 39 47 28 0f 85 3e f0 ff ff 80 3d df 2c 84 09 00 0f 85 31 f0 ff ff e9 06 18 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 <48> c1 ea 03 80 3c 02 00 0f 85 02 08 00 00 49 8d 7f 08 49 8b 6f 38 [ 637.294735][ C0] RSP: 0018:ffffc900040475f8 EFLAGS: 00000246 [ 637.294744][ C0] RAX: dffffc0000000000 RBX: 1ffff92000808ec7 RCX: 1ffff92000808ee2 [ 637.294750][ C0] RDX: ffffc90004047708 RSI: ffffc90004047aa8 RDI: ffffc90004047aa8 [ 637.294756][ C0] RBP: 0000000000000001 R08: ffffffff8b32a670 R09: 0000000000000001 [ 637.294762][ C0] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90004047ac8 [ 637.294768][ C0] R13: ffffc90004047705 R14: ffffc90004047720 R15: ffffc900040476d0 [ 637.294774][ C0] FS: 00007efc659ac8c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 637.294780][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.294785][ C0] CR2: 00007efc62d51000 CR3: 0000000093d6a000 CR4: 00000000001506f0 [ 637.294791][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.294797][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.294801][ C0] Call Trace: [ 637.294805][ C0] ? __alloc_file+0x21/0x350 [ 637.294809][ C0] ? deref_stack_reg+0x150/0x150 [ 637.294814][ C0] ? __unwind_start+0x517/0x800 [ 637.294825][ C0] ? profile_setup.cold+0xc1/0xc1 [ 637.294829][ C0] arch_stack_walk+0x81/0xf0 [ 637.294834][ C0] ? alloc_empty_file+0x6d/0x170 [ 637.294838][ C0] stack_trace_save+0x8c/0xc0 [ 637.294842][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 637.294847][ C0] ? __lock_acquire+0x161b/0x5570 [ 637.294851][ C0] kasan_save_stack+0x1b/0x40 [ 637.294855][ C0] ? kasan_save_stack+0x1b/0x40 [ 637.294860][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 637.294864][ C0] ? kmem_cache_alloc+0x13a/0x3a0 [ 637.294869][ C0] ? __alloc_file+0x21/0x350 [ 637.294873][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.294877][ C0] ? find_held_lock+0x2d/0x110 [ 637.294882][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.294886][ C0] ? lock_downgrade+0x830/0x830 [ 637.294891][ C0] ? lock_acquire+0x1f3/0xae0 [ 637.294895][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.294899][ C0] ? find_held_lock+0x2d/0x110 [ 637.294903][ C0] ? fs_reclaim_release+0x90/0xd0 [ 637.294908][ C0] ? lock_downgrade+0x830/0x830 [ 637.294912][ C0] ? unwind_get_return_address+0x51/0x90 [ 637.294917][ C0] ? profile_setup.cold+0xc1/0xc1 [ 637.294921][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.294926][ C0] ? check_preemption_disabled+0x50/0x130 [ 637.294931][ C0] ? kasan_unpoison_shadow+0x33/0x40 [ 637.294936][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 637.294940][ C0] kmem_cache_alloc+0x13a/0x3a0 [ 637.294945][ C0] __alloc_file+0x21/0x350 [ 637.294949][ C0] alloc_empty_file+0x6d/0x170 [ 637.294953][ C0] path_openat+0xe3/0x2730 [ 637.294958][ C0] ? __lock_acquire+0x161b/0x5570 [ 637.294962][ C0] ? path_lookupat+0x830/0x830 [ 637.294967][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.294972][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.294976][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.294981][ C0] do_filp_open+0x17e/0x3c0 [ 637.294985][ C0] ? may_open_dev+0xf0/0xf0 [ 637.294989][ C0] ? __alloc_fd+0x28d/0x600 [ 637.294994][ C0] ? lock_downgrade+0x830/0x830 [ 637.294999][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 637.295003][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 637.295008][ C0] ? _raw_spin_unlock+0x24/0x40 [ 637.295012][ C0] ? __alloc_fd+0x28d/0x600 [ 637.295016][ C0] do_sys_openat2+0x16d/0x420 [ 637.295021][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 637.295026][ C0] ? strncpy_from_user+0x2bf/0x3e0 [ 637.295030][ C0] ? build_open_flags+0x650/0x650 [ 637.295040][ C0] ? getname_flags.part.0+0x1dd/0x4f0 [ 637.295045][ C0] __x64_sys_open+0x119/0x1c0 [ 637.295049][ C0] ? do_sys_open+0x140/0x140 [ 637.295054][ C0] ? __secure_computing+0x104/0x360 [ 637.295058][ C0] do_syscall_64+0x2d/0x70 [ 637.295063][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.295067][ C0] RIP: 0033:0x7efc64f3c840 [ 637.295080][ C0] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 637.295085][ C0] RSP: 002b:00007ffc45e60f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 637.295096][ C0] RAX: ffffffffffffffda RBX: 00007ffc45e61220 RCX: 00007efc64f3c840 [ 637.295102][ C0] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 00005626d683e6d0 [ 637.295108][ C0] RBP: 000000000000000d R08: 000000000000c0ff R09: 00000000ffffffff [ 637.295114][ C0] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 637.295121][ C0] R13: 00005626d6831040 R14: 00007ffc45e611e0 R15: 00005626d683e720 [ 637.296171][ T1174] Kernel panic - not syncing: hung_task: blocked tasks [ 637.788985][ T1174] CPU: 1 PID: 1174 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200902-syzkaller #0 [ 637.798413][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.808445][ T1174] Call Trace: [ 637.811744][ T1174] dump_stack+0x198/0x1fd [ 637.816057][ T1174] panic+0x347/0x7c0 [ 637.819938][ T1174] ? __warn_printk+0xf3/0xf3 [ 637.824512][ T1174] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 637.830139][ T1174] ? preempt_schedule_thunk+0x16/0x18 [ 637.835497][ T1174] ? watchdog.cold+0x22d/0x24b [ 637.840241][ T1174] ? watchdog+0xc59/0xf30 [ 637.844553][ T1174] watchdog.cold+0x23e/0x24b [ 637.849128][ T1174] ? trace_sched_process_hang+0x2e0/0x2e0 [ 637.854842][ T1174] kthread+0x3b5/0x4a0 [ 637.858892][ T1174] ? __kthread_bind_mask+0xc0/0xc0 [ 637.864002][ T1174] ret_from_fork+0x1f/0x30 [ 637.869595][ T1174] Kernel Offset: disabled [ 637.873920][ T1174] Rebooting in 86400 seconds..