[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 490.353103] block nbd0: shutting down sockets [ 717.695230] INFO: task syz-executor494:8106 blocked for more than 140 seconds. [ 717.702716] Not tainted 4.19.211-syzkaller #0 [ 717.708790] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.717313] syz-executor494 D28248 8106 8105 0x80000006 [ 717.722940] Call Trace: [ 717.726221] __schedule+0x887/0x2040 [ 717.729940] ? io_schedule_timeout+0x140/0x140 [ 717.734519] ? lock_downgrade+0x720/0x720 [ 717.739696] ? __mutex_lock+0x418/0x1190 [ 717.743758] schedule+0x8d/0x1b0 [ 717.747808] schedule_preempt_disabled+0xf/0x20 [ 717.752474] __mutex_lock+0x5f0/0x1190 [ 717.757071] ? blkdev_put+0x30/0x520 [ 717.760820] ? mutex_trylock+0x1a0/0x1a0 [ 717.765005] ? lock_downgrade+0x720/0x720 [ 717.769903] ? locks_remove_file+0x286/0x450 [ 717.774337] ? locks_check_ctx_file_list+0x1d/0x110 [ 717.779843] ? _raw_spin_unlock+0x29/0x40 [ 717.784097] ? locks_remove_file+0x2cd/0x450 [ 717.788821] ? blkdev_put+0x520/0x520 [ 717.792624] blkdev_put+0x30/0x520 [ 717.796530] ? check_preemption_disabled+0x41/0x280 [ 717.801544] ? blkdev_put+0x520/0x520 [ 717.805737] blkdev_close+0x86/0xb0 [ 717.809368] __fput+0x2ce/0x890 [ 717.812641] task_work_run+0x148/0x1c0 [ 717.816953] do_exit+0xbf3/0x2be0 [ 717.820411] ? mm_update_next_owner+0x650/0x650 [ 717.825367] ? get_signal+0x388/0x1f70 [ 717.829256] ? lock_downgrade+0x720/0x720 [ 717.833906] ? lock_acquire+0x170/0x3c0 [ 717.837958] do_group_exit+0x125/0x310 [ 717.841841] get_signal+0x3f2/0x1f70 [ 717.845605] do_signal+0x8f/0x1670 [ 717.849141] ? block_ioctl+0xe9/0x130 [ 717.852925] ? blkdev_fallocate+0x3f0/0x3f0 [ 717.857421] ? do_vfs_ioctl+0x110/0x12e0 [ 717.861480] ? setup_sigcontext+0x820/0x820 [ 717.865844] ? lock_downgrade+0x720/0x720 [ 717.869991] ? ioctl_preallocate+0x200/0x200 [ 717.874383] ? check_preemption_disabled+0x41/0x280 [ 717.879481] ? __fd_install+0x1eb/0x610 [ 717.883452] ? __sys_socketpair+0x3ee/0x570 [ 717.887814] ? __ia32_sys_socket+0xb0/0xb0 [ 717.892050] ? filp_open+0x70/0x70 [ 717.895666] ? exit_to_usermode_loop+0x36/0x2a0 [ 717.900333] exit_to_usermode_loop+0x204/0x2a0 [ 717.904901] do_syscall_64+0x538/0x620 [ 717.908833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 717.914024] RIP: 0033:0x7f43022cf3e9 [ 717.917817] Code: Bad RIP value. [ 717.921173] RSP: 002b:00007ffddc013d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.928919] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f43022cf3e9 [ 717.936272] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 717.943533] RBP: 0000000000000000 R08: 00007ffddc013ee8 R09: 00007ffddc013ee8 [ 717.950836] R10: 00007ffddc013ee8 R11: 0000000000000246 R12: 00007f430228e700 [ 717.958178] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 717.965517] INFO: task systemd-udevd:8110 blocked for more than 140 seconds. [ 717.972695] Not tainted 4.19.211-syzkaller #0 [ 717.977753] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.985771] systemd-udevd D26624 8110 4695 0x00000104 [ 717.991479] Call Trace: [ 717.994072] __schedule+0x887/0x2040 [ 717.997825] ? io_schedule_timeout+0x140/0x140 [ 718.002413] schedule+0x8d/0x1b0 [ 718.005827] io_schedule+0xb5/0x120 [ 718.009458] wait_on_page_bit+0x2c5/0x3f0 [ 718.013592] ? wake_page_function+0x1b0/0x1b0 [ 718.018141] ? __bread_gfp+0x300/0x300 [ 718.022035] ? add_to_page_cache_lru+0x680/0x680 [ 718.026860] do_read_cache_page+0x8ed/0x1170 [ 718.031269] ? blkdev_writepages+0x20/0x20 [ 718.035547] read_dev_sector+0xbf/0x500 [ 718.039522] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 718.044086] adfspart_check_ICS+0x114/0xe70 [ 718.048449] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 718.053032] ? snprintf+0xbb/0xf0 [ 718.056534] ? vsprintf+0x30/0x30 [ 718.059989] ? _raw_spin_unlock+0x29/0x40 [ 718.064211] ? __get_vm_area_node+0x2e2/0x3a0 [ 718.068751] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 718.073336] check_partition+0x390/0x690 [ 718.077442] rescan_partitions+0x1b5/0x970 [ 718.081686] ? nbd_open+0x4cc/0x6f0 [ 718.085373] ? nbd_add_socket+0x840/0x840 [ 718.089524] bdev_disk_changed+0x179/0x1b0 [ 718.093760] __blkdev_get+0x1282/0x1480 [ 718.097952] ? bdev_disk_changed+0x1b0/0x1b0 [ 718.102363] ? mark_held_locks+0xf0/0xf0 [ 718.106473] ? mark_held_locks+0xf0/0xf0 [ 718.110538] blkdev_get+0xb0/0x940 [ 718.114062] ? bd_acquire+0x245/0x440 [ 718.117906] ? __blkdev_get+0x1480/0x1480 [ 718.122054] ? lock_downgrade+0x720/0x720 [ 718.126239] ? lock_acquire+0x170/0x3c0 [ 718.130209] ? bd_acquire+0x21/0x440 [ 718.133906] ? do_raw_spin_unlock+0x171/0x230 [ 718.138452] blkdev_open+0x202/0x290 [ 718.142167] do_dentry_open+0x4aa/0x1160 [ 718.146284] ? blkdev_get_by_dev+0x70/0x70 [ 718.150525] ? chown_common+0x550/0x550 [ 718.154484] ? inode_permission+0x3d/0x140 [ 718.158773] path_openat+0x793/0x2df0 [ 718.162654] ? path_lookupat+0x8d0/0x8d0 [ 718.166755] ? __put_seccomp_filter+0xa0/0xa0 [ 718.171256] ? mark_held_locks+0xf0/0xf0 [ 718.175429] do_filp_open+0x18c/0x3f0 [ 718.179251] ? may_open_dev+0xf0/0xf0 [ 718.183062] ? lock_downgrade+0x720/0x720 [ 718.187337] ? lock_acquire+0x170/0x3c0 [ 718.191308] ? __alloc_fd+0x34/0x570 [ 718.195012] ? do_raw_spin_unlock+0x171/0x230 [ 718.199551] ? _raw_spin_unlock+0x29/0x40 [ 718.203705] ? __alloc_fd+0x28d/0x570 [ 718.207570] do_sys_open+0x3b3/0x520 [ 718.211289] ? filp_open+0x70/0x70 [ 718.214849] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 718.220307] ? trace_hardirqs_off_caller+0x6e/0x210 [ 718.225390] ? do_syscall_64+0x21/0x620 [ 718.229365] do_syscall_64+0xf9/0x620 [ 718.233165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.238414] RIP: 0033:0x7f53cd82c840 [ 718.242129] Code: Bad RIP value. [ 718.245551] RSP: 002b:00007ffd38c089f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 718.253272] RAX: ffffffffffffffda RBX: 000055a2cceaa6e0 RCX: 00007f53cd82c840 [ 718.260581] RDX: 000055a2cb862fe3 RSI: 00000000000a0800 RDI: 000055a2cceaf1b0 [ 718.267906] RBP: 00007ffd38c08b70 R08: 000055a2cb862670 R09: 0000000000000010 [ 718.275226] R10: 000055a2cb862d0c R11: 0000000000000246 R12: 00007ffd38c08ac0 [ 718.282497] R13: 000055a2ccead880 R14: 0000000000000003 R15: 000000000000000e [ 718.289851] [ 718.289851] Showing all locks held in the system: [ 718.296228] 1 lock held by khungtaskd/1570: [ 718.300551] #0: 000000008b9a76dd (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 718.309204] 1 lock held by in:imklog/7804: [ 718.313422] #0: 0000000072a43e60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 718.321446] 1 lock held by syz-executor494/8106: [ 718.326243] #0: 0000000026cdae3f (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x30/0x520 [ 718.334147] 1 lock held by systemd-udevd/8110: [ 718.338785] #0: 0000000026cdae3f (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x1d0/0x1480 [ 718.347094] [ 718.348709] ============================================= [ 718.348709] [ 718.355764] NMI backtrace for cpu 0 [ 718.359392] CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 718.366818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 718.376159] Call Trace: [ 718.378734] dump_stack+0x1fc/0x2ef [ 718.382356] nmi_cpu_backtrace.cold+0x63/0xa2 [ 718.386840] ? lapic_can_unplug_cpu+0x80/0x80 [ 718.391354] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 718.396622] watchdog+0x991/0xe60 [ 718.400246] ? reset_hung_task_detector+0x30/0x30 [ 718.405087] kthread+0x33f/0x460 [ 718.408445] ? kthread_park+0x180/0x180 [ 718.412411] ret_from_fork+0x24/0x30 [ 718.416178] Sending NMI from CPU 0 to CPUs 1: [ 718.421270] NMI backtrace for cpu 1 [ 718.421276] CPU: 1 PID: 4684 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 718.421282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 718.421286] RIP: 0010:unwind_next_frame+0x425/0x1400 [ 718.421297] Code: f9 4c 89 c7 e8 3c f2 ff ff 48 85 c0 49 89 c7 74 6a 4d 8d 47 04 48 b8 00 00 00 00 00 fc ff df 4c 89 c2 48 c1 ea 03 0f b6 04 02 <4c> 89 c2 83 e2 07 38 d0 7f 08 84 c0 0f 85 23 0c 00 00 41 0f b6 47 [ 718.421301] RSP: 0018:ffff8880a176f9a8 EFLAGS: 00000a02 [ 718.421308] RAX: 0000000000000000 RBX: 1ffff110142edf3e RCX: ffffffff81a6b6cd [ 718.421313] RDX: 1ffffffff173614c RSI: ffffffff8b9b0a34 RDI: ffffffff8b39c92c [ 718.421318] RBP: 0000000000000001 R08: ffffffff8b9b0a62 R09: ffffffff8b9b0a34 [ 718.421323] R10: ffff8880a176fb37 R11: 0000000000074071 R12: ffff8880a176fb20 [ 718.421328] R13: ffff8880a176fb0d R14: ffff8880a176fad8 R15: ffffffff8b9b0a5e [ 718.421334] FS: 00007f11697668c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 718.421338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.421343] CR2: 00007f1166b43000 CR3: 00000000a17cf000 CR4: 00000000003406e0 [ 718.421349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 718.421354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 718.421356] Call Trace: [ 718.421360] ? getname_flags+0xce/0x590 [ 718.421363] ? deref_stack_reg+0x1d0/0x1d0 [ 718.421367] ? __unwind_start+0x5b8/0x960 [ 718.421370] ? should_fail+0x142/0x7b0 [ 718.421374] ? unwind_next_frame+0x1400/0x1400 [ 718.421378] ? check_preemption_disabled+0x41/0x280 [ 718.421381] ? getname_flags+0xce/0x590 [ 718.421385] __save_stack_trace+0x9f/0x190 [ 718.421388] ? __lock_acquire+0x6de/0x3ff0 [ 718.421392] ? getname_flags+0xce/0x590 [ 718.421395] kasan_kmalloc+0xeb/0x160 [ 718.421399] ? kmem_cache_alloc+0x110/0x370 [ 718.421402] ? getname_flags+0xce/0x590 [ 718.421406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 718.421409] ? kmem_cache_alloc+0x122/0x370 [ 718.421413] ? prepare_creds+0x39/0x510 [ 718.421416] ? do_faccessat+0x94/0x7a0 [ 718.421420] ? mark_held_locks+0xf0/0xf0 [ 718.421423] ? cache_alloc_refill+0x2f8/0x340 [ 718.421427] ? lock_downgrade+0x720/0x720 [ 718.421430] ? do_raw_spin_lock+0xcb/0x220 [ 718.421434] ? do_raw_spin_unlock+0x171/0x230 [ 718.421437] ? _raw_spin_unlock+0x29/0x40 [ 718.421441] ? cache_alloc_refill+0x2f8/0x340 [ 718.421445] ? kmem_cache_alloc+0x2b1/0x370 [ 718.421448] kmem_cache_alloc+0x110/0x370 [ 718.421452] getname_flags+0xce/0x590 [ 718.421455] user_path_at_empty+0x2a/0x50 [ 718.421458] do_faccessat+0x248/0x7a0 [ 718.421462] ? __ia32_sys_fallocate+0x140/0x140 [ 718.421466] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 718.421470] ? trace_hardirqs_off_caller+0x6e/0x210 [ 718.421474] ? do_syscall_64+0x21/0x620 [ 718.421477] do_syscall_64+0xf9/0x620 [ 718.421481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.421484] RIP: 0033:0x7f1168a219c7 [ 718.421495] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 718.421499] RSP: 002b:00007ffe8bd70d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 718.421508] RAX: ffffffffffffffda RBX: 00007ffe8bd73ca0 RCX: 00007f1168a219c7 [ 718.421518] RDX: 00007f1169492a00 RSI: 0000000000000000 RDI: 000056455f2599a3 [ 718.421523] RBP: 00007ffe8bd70dc0 R08: 0000000000000000 R09: 0000000000000000 [ 718.421528] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 718.421533] R13: 0000000000000000 R14: 00007ffe8bd73ca0 R15: 00007ffe8bd712b0 [ 718.421684] Kernel panic - not syncing: hung_task: blocked tasks [ 718.767620] CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 718.775046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 718.784384] Call Trace: [ 718.786959] dump_stack+0x1fc/0x2ef [ 718.790575] panic+0x26a/0x50e [ 718.793749] ? __warn_printk+0xf3/0xf3 [ 718.797644] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 718.802728] ? cpumask_next+0x3c/0x40 [ 718.806508] ? printk_safe_flush+0xd6/0x120 [ 718.810808] ? watchdog+0x991/0xe60 [ 718.814411] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 718.819842] watchdog+0x9a2/0xe60 [ 718.823278] ? reset_hung_task_detector+0x30/0x30 [ 718.828098] kthread+0x33f/0x460 [ 718.831442] ? kthread_park+0x180/0x180 [ 718.835396] ret_from_fork+0x24/0x30 [ 718.839355] Kernel Offset: disabled [ 718.842969] Rebooting in 86400 seconds..