[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.99' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 1288.018049] INFO: task syz-executor313:9036 blocked for more than 140 seconds. [ 1288.025509] Not tainted 4.14.298-syzkaller #0 [ 1288.030926] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.038960] syz-executor313 D28920 9036 8000 0x00000004 [ 1288.044586] Call Trace: [ 1288.047165] __schedule+0x88b/0x1de0 [ 1288.050923] ? lock_acquire+0x170/0x3f0 [ 1288.054906] ? io_schedule_timeout+0x140/0x140 [ 1288.059532] ? _raw_spin_unlock+0x29/0x40 [ 1288.063684] ? fuse_writepage_locked+0xe80/0xe80 [ 1288.068508] schedule+0x8d/0x1b0 [ 1288.071878] fuse_wait_on_page_writeback.isra.0+0xdc/0x120 [ 1288.077485] ? fuse_do_ioctl+0x1570/0x1570 [ 1288.081765] ? end_page_writeback+0xe3/0x1c0 [ 1288.086173] ? wait_woken+0x230/0x230 [ 1288.090036] fuse_launder_page+0xa2/0xd0 [ 1288.094099] invalidate_inode_pages2_range+0x547/0xc00 [ 1288.099420] ? clear_shadow_entry+0x160/0x160 [ 1288.103914] ? fuse_range_is_writeback+0x1f0/0x1f0 [ 1288.108889] ? fuse_file_alloc+0x1ca/0x260 [ 1288.113125] ? _raw_spin_unlock+0x29/0x40 [ 1288.117257] ? fuse_do_open+0x18e/0x460 [ 1288.121301] fuse_finish_open+0x262/0x500 [ 1288.125479] fuse_open_common+0x234/0x290 [ 1288.129678] do_dentry_open+0x44b/0xec0 [ 1288.133646] ? fuse_open_common+0x290/0x290 [ 1288.138022] ? __inode_permission+0xcd/0x2f0 [ 1288.142428] vfs_open+0x105/0x220 [ 1288.145868] path_openat+0x628/0x2970 [ 1288.149723] ? path_lookupat+0x780/0x780 [ 1288.153781] ? trace_hardirqs_on+0x10/0x10 [ 1288.158064] do_filp_open+0x179/0x3c0 [ 1288.161863] ? may_open_dev+0xe0/0xe0 [ 1288.165651] ? lock_downgrade+0x740/0x740 [ 1288.169918] ? do_raw_spin_unlock+0x164/0x220 [ 1288.174413] ? _raw_spin_unlock+0x29/0x40 [ 1288.178594] ? __alloc_fd+0x1be/0x490 [ 1288.182396] do_sys_open+0x296/0x410 [ 1288.186092] ? filp_open+0x60/0x60 [ 1288.189688] ? do_syscall_64+0x4c/0x640 [ 1288.193656] ? compat_SyS_openat+0x30/0x30 [ 1288.197935] do_syscall_64+0x1d5/0x640 [ 1288.201832] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.207029] INFO: task syz-executor313:9060 blocked for more than 140 seconds. [ 1288.214428] Not tainted 4.14.298-syzkaller #0 [ 1288.219473] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.227430] syz-executor313 D29112 9060 7999 0x00000004 [ 1288.233102] Call Trace: [ 1288.235677] __schedule+0x88b/0x1de0 [ 1288.239597] ? io_schedule_timeout+0x140/0x140 [ 1288.244187] ? mark_held_locks+0xa6/0xf0 [ 1288.248318] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.252812] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1288.257726] schedule+0x8d/0x1b0 [ 1288.261139] rwsem_down_write_failed+0x343/0x6d0 [ 1288.265897] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1288.271565] ? trace_hardirqs_on+0x10/0x10 [ 1288.275797] ? fsnotify+0x974/0x11b0 [ 1288.279551] ? trace_hardirqs_on+0x10/0x10 [ 1288.283791] call_rwsem_down_write_failed+0x13/0x20 [ 1288.288845] down_write+0x4f/0x90 [ 1288.292321] ? fuse_open_common+0x1a4/0x290 [ 1288.296632] fuse_open_common+0x1a4/0x290 [ 1288.300809] do_dentry_open+0x44b/0xec0 [ 1288.304788] ? fuse_open_common+0x290/0x290 [ 1288.309155] ? __inode_permission+0xcd/0x2f0 [ 1288.313562] vfs_open+0x105/0x220 [ 1288.317029] path_openat+0x628/0x2970 [ 1288.320871] ? path_lookupat+0x780/0x780 [ 1288.324932] ? trace_hardirqs_on+0x10/0x10 [ 1288.329219] ? _raw_spin_unlock+0x29/0x40 [ 1288.333370] ? do_huge_pmd_anonymous_page+0x72e/0x1700 [ 1288.338687] do_filp_open+0x179/0x3c0 [ 1288.342513] ? may_open_dev+0xe0/0xe0 [ 1288.346323] ? lock_downgrade+0x740/0x740 [ 1288.350508] ? do_raw_spin_unlock+0x164/0x220 [ 1288.355004] ? _raw_spin_unlock+0x29/0x40 [ 1288.359181] ? __alloc_fd+0x1be/0x490 [ 1288.362987] do_sys_open+0x296/0x410 [ 1288.366687] ? filp_open+0x60/0x60 [ 1288.370282] ? __do_page_fault+0x159/0xad0 [ 1288.374527] ? do_syscall_64+0x4c/0x640 [ 1288.378554] ? compat_SyS_openat+0x30/0x30 [ 1288.382795] do_syscall_64+0x1d5/0x640 [ 1288.386672] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.391928] INFO: task syz-executor313:9072 blocked for more than 140 seconds. [ 1288.399334] Not tainted 4.14.298-syzkaller #0 [ 1288.404332] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.412358] syz-executor313 D28360 9072 7999 0x00000004 [ 1288.418031] Call Trace: [ 1288.420619] __schedule+0x88b/0x1de0 [ 1288.424323] ? io_schedule_timeout+0x140/0x140 [ 1288.428952] ? mark_held_locks+0xa6/0xf0 [ 1288.433012] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.437487] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1288.442525] schedule+0x8d/0x1b0 [ 1288.445925] rwsem_down_write_failed+0x343/0x6d0 [ 1288.450899] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1288.456528] ? trace_hardirqs_on+0x10/0x10 [ 1288.460806] call_rwsem_down_write_failed+0x13/0x20 [ 1288.465825] down_write+0x4f/0x90 [ 1288.469340] ? lock_mount+0xbb/0x450 [ 1288.473068] lock_mount+0xbb/0x450 [ 1288.476593] ? lookup_mnt+0x3b0/0x3b0 [ 1288.480444] ? do_mount+0x1693/0x2a30 [ 1288.484246] do_add_mount+0x63/0x4f0 [ 1288.488006] ? graft_tree+0x1c0/0x1c0 [ 1288.491811] do_mount+0x1540/0x2a30 [ 1288.495430] ? copy_mount_string+0x40/0x40 [ 1288.499704] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1288.504730] ? copy_mnt_ns+0xa30/0xa30 [ 1288.508660] ? copy_mount_options+0x1fa/0x2f0 [ 1288.513155] ? copy_mnt_ns+0xa30/0xa30 [ 1288.517114] SyS_mount+0xa8/0x120 [ 1288.520608] ? copy_mnt_ns+0xa30/0xa30 [ 1288.524500] do_syscall_64+0x1d5/0x640 [ 1288.528441] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.533646] INFO: task syz-executor313:9097 blocked for more than 140 seconds. [ 1288.541059] Not tainted 4.14.298-syzkaller #0 [ 1288.546069] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.554076] syz-executor313 D29480 9097 7999 0x00000004 [ 1288.559762] Call Trace: [ 1288.562352] __schedule+0x88b/0x1de0 [ 1288.566072] ? io_schedule_timeout+0x140/0x140 [ 1288.570731] ? mark_held_locks+0xa6/0xf0 [ 1288.574795] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.579343] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1288.584269] schedule+0x8d/0x1b0 [ 1288.587620] rwsem_down_write_failed+0x343/0x6d0 [ 1288.592440] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1288.598106] ? trace_hardirqs_on+0x10/0x10 [ 1288.602337] ? fsnotify+0x974/0x11b0 [ 1288.606036] ? trace_hardirqs_on+0x10/0x10 [ 1288.610331] call_rwsem_down_write_failed+0x13/0x20 [ 1288.615365] down_write+0x4f/0x90 [ 1288.618845] ? fuse_open_common+0x1a4/0x290 [ 1288.623159] fuse_open_common+0x1a4/0x290 [ 1288.627305] do_dentry_open+0x44b/0xec0 [ 1288.631333] ? fuse_open_common+0x290/0x290 [ 1288.635658] ? __inode_permission+0xcd/0x2f0 [ 1288.640108] vfs_open+0x105/0x220 [ 1288.643561] path_openat+0x628/0x2970 [ 1288.647348] ? path_lookupat+0x780/0x780 [ 1288.651592] ? trace_hardirqs_on+0x10/0x10 [ 1288.655837] ? trace_hardirqs_on+0x10/0x10 [ 1288.660282] do_filp_open+0x179/0x3c0 [ 1288.664084] ? may_open_dev+0xe0/0xe0 [ 1288.667950] ? lock_downgrade+0x740/0x740 [ 1288.672096] ? do_raw_spin_unlock+0x164/0x220 [ 1288.676581] ? _raw_spin_unlock+0x29/0x40 [ 1288.680762] ? __alloc_fd+0x1be/0x490 [ 1288.684569] do_sys_open+0x296/0x410 [ 1288.688332] ? filp_open+0x60/0x60 [ 1288.691871] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1288.696350] ? do_syscall_64+0x4c/0x640 [ 1288.700379] ? compat_SyS_openat+0x30/0x30 [ 1288.704614] do_syscall_64+0x1d5/0x640 [ 1288.708551] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.713771] INFO: task syz-executor313:9059 blocked for more than 140 seconds. [ 1288.721231] Not tainted 4.14.298-syzkaller #0 [ 1288.726268] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.734285] syz-executor313 D29864 9059 8001 0x00000004 [ 1288.739976] Call Trace: [ 1288.742563] __schedule+0x88b/0x1de0 [ 1288.746265] ? io_schedule_timeout+0x140/0x140 [ 1288.750903] ? mark_held_locks+0xa6/0xf0 [ 1288.754961] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.759486] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1288.764432] schedule+0x8d/0x1b0 [ 1288.767785] rwsem_down_write_failed+0x343/0x6d0 [ 1288.772608] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1288.778284] ? trace_hardirqs_on+0x10/0x10 [ 1288.782537] ? fsnotify+0x974/0x11b0 [ 1288.786231] ? trace_hardirqs_on+0x10/0x10 [ 1288.790521] call_rwsem_down_write_failed+0x13/0x20 [ 1288.795538] down_write+0x4f/0x90 [ 1288.799038] ? fuse_open_common+0x1a4/0x290 [ 1288.803359] fuse_open_common+0x1a4/0x290 [ 1288.807499] do_dentry_open+0x44b/0xec0 [ 1288.811520] ? fuse_open_common+0x290/0x290 [ 1288.815845] ? __inode_permission+0xcd/0x2f0 [ 1288.820291] vfs_open+0x105/0x220 [ 1288.823745] path_openat+0x628/0x2970 [ 1288.827536] ? path_lookupat+0x780/0x780 [ 1288.831643] ? trace_hardirqs_on+0x10/0x10 [ 1288.835876] ? _raw_spin_unlock+0x29/0x40 [ 1288.840054] ? do_huge_pmd_anonymous_page+0x72e/0x1700 [ 1288.845329] do_filp_open+0x179/0x3c0 [ 1288.849165] ? may_open_dev+0xe0/0xe0 [ 1288.852973] ? lock_downgrade+0x740/0x740 [ 1288.857121] ? do_raw_spin_unlock+0x164/0x220 [ 1288.861649] ? _raw_spin_unlock+0x29/0x40 [ 1288.865794] ? __alloc_fd+0x1be/0x490 [ 1288.869830] do_sys_open+0x296/0x410 [ 1288.873542] ? filp_open+0x60/0x60 [ 1288.877062] ? __do_page_fault+0x159/0xad0 [ 1288.881334] ? do_syscall_64+0x4c/0x640 [ 1288.885309] ? compat_SyS_openat+0x30/0x30 [ 1288.890973] do_syscall_64+0x1d5/0x640 [ 1288.894857] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.900103] INFO: task syz-executor313:9066 blocked for more than 140 seconds. [ 1288.907456] Not tainted 4.14.298-syzkaller #0 [ 1288.912507] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.920505] syz-executor313 D28936 9066 8001 0x00000004 [ 1288.926125] Call Trace: [ 1288.928755] __schedule+0x88b/0x1de0 [ 1288.932469] ? io_schedule_timeout+0x140/0x140 [ 1288.937030] ? mark_held_locks+0xa6/0xf0 [ 1288.941134] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.945626] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1288.950599] schedule+0x8d/0x1b0 [ 1288.953962] rwsem_down_write_failed+0x343/0x6d0 [ 1288.958772] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1288.964418] ? trace_hardirqs_on+0x10/0x10 [ 1288.968724] call_rwsem_down_write_failed+0x13/0x20 [ 1288.973740] down_write+0x4f/0x90 [ 1288.977176] ? lock_mount+0xbb/0x450 [ 1288.981301] lock_mount+0xbb/0x450 [ 1288.984846] ? lookup_mnt+0x3b0/0x3b0 [ 1288.988691] ? do_mount+0x1693/0x2a30 [ 1288.992505] do_add_mount+0x63/0x4f0 [ 1288.996206] ? graft_tree+0x1c0/0x1c0 [ 1289.000062] do_mount+0x1540/0x2a30 [ 1289.003690] ? retint_kernel+0x2d/0x2d [ 1289.007566] ? copy_mount_string+0x40/0x40 [ 1289.011855] ? copy_mount_options+0x197/0x2f0 [ 1289.016356] ? copy_mount_options+0x1fa/0x2f0 [ 1289.020889] ? copy_mnt_ns+0xa30/0xa30 [ 1289.024779] SyS_mount+0xa8/0x120 [ 1289.028270] ? copy_mnt_ns+0xa30/0xa30 [ 1289.032161] do_syscall_64+0x1d5/0x640 [ 1289.036055] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1289.041314] INFO: task syz-executor313:9095 blocked for more than 140 seconds. [ 1289.048725] Not tainted 4.14.298-syzkaller #0 [ 1289.053853] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.061858] syz-executor313 D29608 9095 8001 0x00000004 [ 1289.067493] Call Trace: [ 1289.070124] __schedule+0x88b/0x1de0 [ 1289.073841] ? io_schedule_timeout+0x140/0x140 [ 1289.078625] ? mark_held_locks+0xa6/0xf0 [ 1289.082684] ? _raw_spin_unlock_irq+0x24/0x80 [ 1289.087196] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1289.092178] schedule+0x8d/0x1b0 [ 1289.095548] rwsem_down_write_failed+0x343/0x6d0 [ 1289.100341] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1289.105962] ? trace_hardirqs_on+0x10/0x10 [ 1289.110241] ? fsnotify+0x974/0x11b0 [ 1289.113950] ? trace_hardirqs_on+0x10/0x10 [ 1289.118229] call_rwsem_down_write_failed+0x13/0x20 [ 1289.123246] down_write+0x4f/0x90 [ 1289.126683] ? fuse_open_common+0x1a4/0x290 [ 1289.131043] fuse_open_common+0x1a4/0x290 [ 1289.135198] do_dentry_open+0x44b/0xec0 [ 1289.139206] ? fuse_open_common+0x290/0x290 [ 1289.143532] ? __inode_permission+0xcd/0x2f0 [ 1289.147987] vfs_open+0x105/0x220 [ 1289.151444] path_openat+0x628/0x2970 [ 1289.155234] ? path_lookupat+0x780/0x780 [ 1289.159347] ? trace_hardirqs_on+0x10/0x10 [ 1289.163577] ? trace_hardirqs_on+0x10/0x10 [ 1289.167864] do_filp_open+0x179/0x3c0 [ 1289.171677] ? may_open_dev+0xe0/0xe0 [ 1289.175466] ? lock_downgrade+0x740/0x740 [ 1289.179650] ? do_raw_spin_unlock+0x164/0x220 [ 1289.184139] ? _raw_spin_unlock+0x29/0x40 [ 1289.188337] ? __alloc_fd+0x1be/0x490 [ 1289.192136] do_sys_open+0x296/0x410 [ 1289.195835] ? filp_open+0x60/0x60 [ 1289.199418] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1289.203911] ? do_syscall_64+0x4c/0x640 [ 1289.207932] ? compat_SyS_openat+0x30/0x30 [ 1289.212163] do_syscall_64+0x1d5/0x640 [ 1289.216038] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1289.221288] INFO: task syz-executor313:9061 blocked for more than 140 seconds. [ 1289.228706] Not tainted 4.14.298-syzkaller #0 [ 1289.233710] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.241703] syz-executor313 D29864 9061 7997 0x00000004 [ 1289.247344] Call Trace: [ 1289.249989] __schedule+0x88b/0x1de0 [ 1289.253705] ? io_schedule_timeout+0x140/0x140 [ 1289.258335] ? mark_held_locks+0xa6/0xf0 [ 1289.262394] ? _raw_spin_unlock_irq+0x24/0x80 [ 1289.266871] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1289.271849] schedule+0x8d/0x1b0 [ 1289.275214] rwsem_down_write_failed+0x343/0x6d0 [ 1289.280046] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1289.285667] ? trace_hardirqs_on+0x10/0x10 [ 1289.290112] ? fsnotify+0x974/0x11b0 [ 1289.293831] ? trace_hardirqs_on+0x10/0x10 [ 1289.298130] call_rwsem_down_write_failed+0x13/0x20 [ 1289.303145] down_write+0x4f/0x90 [ 1289.306580] ? fuse_open_common+0x1a4/0x290 [ 1289.310944] fuse_open_common+0x1a4/0x290 [ 1289.315091] do_dentry_open+0x44b/0xec0 [ 1289.319107] ? fuse_open_common+0x290/0x290 [ 1289.323423] ? __inode_permission+0xcd/0x2f0 [ 1289.327883] vfs_open+0x105/0x220 [ 1289.331339] path_openat+0x628/0x2970 [ 1289.335130] ? path_lookupat+0x780/0x780 [ 1289.339223] ? trace_hardirqs_on+0x10/0x10 [ 1289.343453] ? _raw_spin_unlock+0x29/0x40 [ 1289.347584] ? do_huge_pmd_anonymous_page+0x72e/0x1700 [ 1289.352911] do_filp_open+0x179/0x3c0 [ 1289.356709] ? may_open_dev+0xe0/0xe0 [ 1289.360549] ? lock_downgrade+0x740/0x740 [ 1289.364693] ? do_raw_spin_unlock+0x164/0x220 [ 1289.369217] ? _raw_spin_unlock+0x29/0x40 [ 1289.373355] ? __alloc_fd+0x1be/0x490 [ 1289.377154] do_sys_open+0x296/0x410 [ 1289.380917] ? filp_open+0x60/0x60 [ 1289.384456] ? __do_page_fault+0x159/0xad0 [ 1289.388728] ? do_syscall_64+0x4c/0x640 [ 1289.392697] ? compat_SyS_openat+0x30/0x30 [ 1289.396914] do_syscall_64+0x1d5/0x640 [ 1289.400836] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1289.406038] INFO: task syz-executor313:9067 blocked for more than 140 seconds. [ 1289.413446] Not tainted 4.14.298-syzkaller #0 [ 1289.418501] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.426481] syz-executor313 D28720 9067 7997 0x00000004 [ 1289.432160] Call Trace: [ 1289.434747] __schedule+0x88b/0x1de0 [ 1289.438506] ? io_schedule_timeout+0x140/0x140 [ 1289.443096] ? mark_held_locks+0xa6/0xf0 [ 1289.447138] ? _raw_spin_unlock_irq+0x24/0x80 [ 1289.451693] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1289.456619] schedule+0x8d/0x1b0 [ 1289.460035] rwsem_down_write_failed+0x343/0x6d0 [ 1289.464821] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1289.470557] ? trace_hardirqs_on+0x10/0x10 [ 1289.474812] call_rwsem_down_write_failed+0x13/0x20 [ 1289.479871] down_write+0x4f/0x90 [ 1289.483327] ? lock_mount+0xbb/0x450 [ 1289.487026] lock_mount+0xbb/0x450 [ 1289.490614] ? lookup_mnt+0x3b0/0x3b0 [ 1289.494417] ? do_mount+0x1693/0x2a30 [ 1289.498594] do_add_mount+0x63/0x4f0 [ 1289.502315] ? graft_tree+0x1c0/0x1c0 [ 1289.506104] do_mount+0x1540/0x2a30 [ 1289.509786] ? copy_mount_string+0x40/0x40 [ 1289.514026] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1289.519092] ? copy_mnt_ns+0xa30/0xa30 [ 1289.522986] ? copy_mount_options+0x1fa/0x2f0 [ 1289.527465] ? copy_mnt_ns+0xa30/0xa30 [ 1289.531412] SyS_mount+0xa8/0x120 [ 1289.534862] ? copy_mnt_ns+0xa30/0xa30 [ 1289.538786] do_syscall_64+0x1d5/0x640 [ 1289.542675] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1289.547936] INFO: task syz-executor313:9096 blocked for more than 140 seconds. [ 1289.555289] Not tainted 4.14.298-syzkaller #0 [ 1289.560336] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.568354] syz-executor313 D29816 9096 7997 0x00000004 [ 1289.574004] Call Trace: [ 1289.576578] __schedule+0x88b/0x1de0 [ 1289.580348] ? io_schedule_timeout+0x140/0x140 [ 1289.584931] ? mark_held_locks+0xa6/0xf0 [ 1289.589036] ? _raw_spin_unlock_irq+0x24/0x80 [ 1289.593547] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1289.598531] schedule+0x8d/0x1b0 [ 1289.601900] rwsem_down_write_failed+0x343/0x6d0 [ 1289.606642] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1289.612323] ? trace_hardirqs_on+0x10/0x10 [ 1289.616560] ? fsnotify+0x974/0x11b0 [ 1289.620317] ? trace_hardirqs_on+0x10/0x10 [ 1289.624562] call_rwsem_down_write_failed+0x13/0x20 [ 1289.629624] down_write+0x4f/0x90 [ 1289.633078] ? fuse_open_common+0x1a4/0x290 [ 1289.637385] fuse_open_common+0x1a4/0x290 [ 1289.641574] do_dentry_open+0x44b/0xec0 [ 1289.645550] ? fuse_open_common+0x290/0x290 [ 1289.649922] ? __inode_permission+0xcd/0x2f0 [ 1289.654328] vfs_open+0x105/0x220 [ 1289.657825] path_openat+0x628/0x2970 [ 1289.663113] ? path_lookupat+0x780/0x780 [ 1289.667171] ? trace_hardirqs_on+0x10/0x10 [ 1289.671475] ? trace_hardirqs_on+0x10/0x10 [ 1289.675720] do_filp_open+0x179/0x3c0 [ 1289.679566] ? may_open_dev+0xe0/0xe0 [ 1289.683379] ? lock_downgrade+0x740/0x740 [ 1289.687517] ? do_raw_spin_unlock+0x164/0x220 [ 1289.692067] ? _raw_spin_unlock+0x29/0x40 [ 1289.696221] ? __alloc_fd+0x1be/0x490 [ 1289.700074] do_sys_open+0x296/0x410 [ 1289.703792] ? filp_open+0x60/0x60 [ 1289.707317] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1289.712033] ? do_syscall_64+0x4c/0x640 [ 1289.716009] ? compat_SyS_openat+0x30/0x30 [ 1289.720292] do_syscall_64+0x1d5/0x640 [ 1289.724188] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1289.729514] [ 1289.729514] Showing all locks held in the system: [ 1289.735848] 1 lock held by khungtaskd/1534: [ 1289.740344] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1289.749504] 1 lock held by in:imklog/7700: [ 1289.753734] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 [ 1289.762223] 2 locks held by syz-executor313/9036: [ 1289.767069] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.775563] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.785648] 2 locks held by syz-executor313/9060: [ 1289.790550] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.799033] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.809088] 1 lock held by syz-executor313/9072: [ 1289.813835] #0: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] lock_mount+0xbb/0x450 [ 1289.823260] 2 locks held by syz-executor313/9097: [ 1289.828178] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.836701] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.846743] 2 locks held by syz-executor313/9059: [ 1289.851663] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.860135] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.870213] 1 lock held by syz-executor313/9066: [ 1289.874960] #0: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] lock_mount+0xbb/0x450 [ 1289.884379] 2 locks held by syz-executor313/9095: [ 1289.889300] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.897782] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.907871] 2 locks held by syz-executor313/9061: [ 1289.912701] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.921207] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.931371] 1 lock held by syz-executor313/9067: [ 1289.936126] #0: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] lock_mount+0xbb/0x450 [ 1289.945577] 2 locks held by syz-executor313/9096: [ 1289.950510] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.958999] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.969091] 2 locks held by syz-executor313/9063: [ 1289.973923] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1289.982424] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1289.992519] 1 lock held by syz-executor313/9073: [ 1289.997269] #0: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] lock_mount+0xbb/0x450 [ 1290.006711] 2 locks held by syz-executor313/9098: [ 1290.011751] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1290.020315] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1290.030397] 2 locks held by syz-executor313/9065: [ 1290.035238] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1290.043697] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1290.053823] 1 lock held by syz-executor313/9074: [ 1290.058620] #0: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] lock_mount+0xbb/0x450 [ 1290.068106] 2 locks held by syz-executor313/9099: [ 1290.072937] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1290.081392] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] fuse_open_common+0x1a4/0x290 [ 1290.091472] [ 1290.093091] ============================================= [ 1290.093091] [ 1290.100363] NMI backtrace for cpu 0 [ 1290.103994] CPU: 0 PID: 1534 Comm: khungtaskd Not tainted 4.14.298-syzkaller #0 [ 1290.111423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1290.120757] Call Trace: [ 1290.123330] dump_stack+0x1b2/0x281 [ 1290.126946] nmi_cpu_backtrace.cold+0x57/0x93 [ 1290.131424] ? irq_force_complete_move+0x350/0x350 [ 1290.136340] nmi_trigger_cpumask_backtrace+0x13a/0x180 [ 1290.141602] watchdog+0x5b9/0xb40 [ 1290.145040] ? hungtask_pm_notify+0x50/0x50 [ 1290.149346] kthread+0x30d/0x420 [ 1290.152697] ? kthread_create_on_node+0xd0/0xd0 [ 1290.157349] ret_from_fork+0x24/0x30 [ 1290.161172] Sending NMI from CPU 0 to CPUs 1: [ 1290.166222] NMI backtrace for cpu 1 [ 1290.166229] CPU: 1 PID: 4626 Comm: systemd-journal Not tainted 4.14.298-syzkaller #0 [ 1290.166235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1290.166240] task: ffff8880a12761c0 task.stack: ffff8880a1278000 [ 1290.166244] RIP: 0010:deref_stack_reg+0xc/0x1a0 [ 1290.166247] RSP: 0018:ffff8880a127f7b0 EFLAGS: 00000297 [ 1290.166255] RAX: dffffc0000000000 RBX: 1ffff1101424feff RCX: ffffffff8a66fd6e [ 1290.166260] RDX: ffff8880a127f8c0 RSI: ffff8880a127ff30 RDI: ffff8880a127f880 [ 1290.166265] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 1290.166270] R10: ffff8880a127ff58 R11: 0000000000000001 R12: ffff8880a127f8b5 [ 1290.166275] R13: ffff8880a127f8b8 R14: ffff8880a127f8d0 R15: ffff8880a127f880 [ 1290.166281] FS: 00007fb1b396b8c0(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 1290.166285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1290.166290] CR2: 00007fb1b0d5b000 CR3: 00000000a215e000 CR4: 00000000003406e0 [ 1290.166295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1290.166301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1290.166303] Call Trace: [ 1290.166306] unwind_next_frame+0xfcc/0x17d0 [ 1290.166309] ? do_syscall_64+0x1d5/0x640 [ 1290.166313] ? deref_stack_reg+0x1a0/0x1a0 [ 1290.166316] ? do_syscall_64+0x1d5/0x640 [ 1290.166319] __save_stack_trace+0x90/0x160 [ 1290.166323] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1290.166326] kasan_kmalloc+0xeb/0x160 [ 1290.166341] ? kasan_kmalloc+0xeb/0x160 [ 1290.166345] ? kmem_cache_alloc+0x124/0x3c0 [ 1290.166348] ? get_empty_filp+0x86/0x3f0 [ 1290.166351] ? path_openat+0x84/0x2970 [ 1290.166354] ? do_filp_open+0x179/0x3c0 [ 1290.166357] ? do_sys_open+0x296/0x410 [ 1290.166360] ? do_syscall_64+0x1d5/0x640 [ 1290.166363] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1290.166367] ? unwind_next_frame+0xe54/0x17d0 [ 1290.166370] ? trace_hardirqs_on+0x10/0x10 [ 1290.166374] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1290.166377] ? unwind_next_frame+0x404/0x17d0 [ 1290.166380] ? do_syscall_64+0x1d5/0x640 [ 1290.166384] ? deref_stack_reg+0x1a0/0x1a0 [ 1290.166387] ? fs_reclaim_release+0xd0/0x110 [ 1290.166390] ? kmem_cache_alloc+0x2c8/0x3c0 [ 1290.166393] kmem_cache_alloc+0x124/0x3c0 [ 1290.166396] get_empty_filp+0x86/0x3f0 [ 1290.166399] path_openat+0x84/0x2970 [ 1290.166403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1290.166405] ? putname+0xcd/0x110 [ 1290.166408] ? path_lookupat+0x780/0x780 [ 1290.166412] ? trace_hardirqs_on+0x10/0x10 [ 1290.166414] ? getname+0x20/0x20 [ 1290.166417] do_filp_open+0x179/0x3c0 [ 1290.166420] ? may_open_dev+0xe0/0xe0 [ 1290.166423] ? __alloc_fd+0x1be/0x490 [ 1290.166426] ? lock_downgrade+0x740/0x740 [ 1290.166429] ? do_raw_spin_unlock+0x164/0x220 [ 1290.166433] ? _raw_spin_unlock+0x29/0x40 [ 1290.166435] ? __alloc_fd+0x1be/0x490 [ 1290.166438] do_sys_open+0x296/0x410 [ 1290.166441] ? filp_open+0x60/0x60 [ 1290.166444] ? do_syscall_64+0x4c/0x640 [ 1290.166447] ? do_sys_open+0x410/0x410 [ 1290.166450] do_syscall_64+0x1d5/0x640 [ 1290.166454] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1290.166456] Code: 00 eb c4 48 89 ef e8 b4 97 5b 00 eb de 66 90 48 8b 07 48 89 06 c3 66 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 56 <41> 55 49 89 d5 41 54 49 89 fc 55 48 89 f5 53 48 83 ec 48 48 c7 [ 1290.166710] Kernel panic - not syncing: hung_task: blocked tasks [ 1290.486447] CPU: 0 PID: 1534 Comm: khungtaskd Not tainted 4.14.298-syzkaller #0 [ 1290.493873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1290.503229] Call Trace: [ 1290.505804] dump_stack+0x1b2/0x281 [ 1290.509417] panic+0x1f9/0x42d [ 1290.512592] ? add_taint.cold+0x16/0x16 [ 1290.516553] watchdog+0x5ca/0xb40 [ 1290.519997] ? hungtask_pm_notify+0x50/0x50 [ 1290.524302] kthread+0x30d/0x420 [ 1290.527650] ? kthread_create_on_node+0xd0/0xd0 [ 1290.532311] ret_from_fork+0x24/0x30 [ 1290.536266] Kernel Offset: disabled [ 1290.540005] Rebooting in 86400 seconds..