[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 486.464576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 717.770854] INFO: task syz-executor366:8097 blocked for more than 140 seconds. [ 717.778323] Not tainted 4.19.211-syzkaller #0 [ 717.784236] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.792849] syz-executor366 D26224 8097 8095 0x00000004 [ 717.798497] Call Trace: [ 717.801459] __schedule+0x887/0x2040 [ 717.805189] ? io_schedule_timeout+0x140/0x140 [ 717.809761] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 717.814749] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 717.819880] ? prepare_to_wait_exclusive+0x121/0x2d0 [ 717.825571] schedule+0x8d/0x1b0 [ 717.828953] io_schedule+0xb5/0x120 [ 717.833020] bit_wait_io+0x12/0x90 [ 717.836661] __wait_on_bit_lock+0xb5/0x170 [ 717.841267] ? bit_wait+0x90/0x90 [ 717.844733] out_of_line_wait_on_bit_lock+0xd2/0x100 [ 717.849853] ? __wait_on_bit_lock+0x170/0x170 [ 717.854714] ? lock_acquire+0x170/0x3c0 [ 717.858694] ? init_wait_var_entry+0x1a0/0x1a0 [ 717.863731] __lock_buffer+0x52/0x60 [ 717.867462] __sync_dirty_buffer+0x2a6/0x320 [ 717.872210] __ext4_handle_dirty_metadata+0x234/0x590 [ 717.877418] ext4_convert_inline_data_nolock+0x5c9/0xd10 [ 717.883430] ? ext4_read_inline_page+0x6f0/0x6f0 [ 717.888234] ext4_convert_inline_data+0x347/0x3a0 [ 717.893564] ? ext4_inline_data_truncate+0xa30/0xa30 [ 717.898693] ? ext4_page_mkwrite+0x201/0x1320 [ 717.903548] ext4_page_mkwrite+0x209/0x1320 [ 717.907890] ? do_wp_page+0x978/0x2210 [ 717.912132] ? ext4_change_inode_journal_flag+0x3c0/0x3c0 [ 717.917681] ? _vm_normal_page+0x132/0x510 [ 717.922288] ? lock_downgrade+0x720/0x720 [ 717.926459] do_page_mkwrite+0xd4/0x410 [ 717.930530] do_wp_page+0x980/0x2210 [ 717.934624] ? finish_mkwrite_fault+0x640/0x640 [ 717.939310] ? __handle_mm_fault+0x15f6/0x41c0 [ 717.944249] ? mark_held_locks+0xf0/0xf0 [ 717.948322] __handle_mm_fault+0x258b/0x41c0 [ 717.953031] ? do_mmap+0x59c/0x1080 [ 717.956670] ? vm_insert_page+0x9c0/0x9c0 [ 717.961177] ? check_preemption_disabled+0x41/0x280 [ 717.966205] handle_mm_fault+0x436/0xb10 [ 717.970258] __do_page_fault+0x68e/0xd60 [ 717.974668] ? trace_hardirqs_off_caller+0x6e/0x210 [ 717.979711] ? spurious_fault+0x840/0x840 [ 717.984210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.989062] ? page_fault+0x8/0x30 [ 717.992916] page_fault+0x1e/0x30 [ 717.996368] RIP: 0033:0x7f13da26ac7f [ 718.000092] Code: Bad RIP value. [ 718.003815] RSP: 002b:00007ffe46935580 EFLAGS: 00010217 [ 718.009269] RAX: 00000000200006c2 RBX: 0030656c69662f2e RCX: 000000000000001b [ 718.016961] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 718.024615] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 718.032170] R10: 0000000000028011 R11: 0000000000000246 R12: 00007ffe469355b0 [ 718.039445] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 718.047111] [ 718.047111] Showing all locks held in the system: [ 718.053703] 1 lock held by khungtaskd/1571: [ 718.058019] #0: 0000000081733372 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 718.067203] 1 lock held by in:imklog/7799: [ 718.071703] #0: 000000000aa34253 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 718.079847] 4 locks held by syz-executor366/8097: [ 718.085047] #0: 00000000d5e78498 (&mm->mmap_sem){++++}, at: __do_page_fault+0x398/0xd60 [ 718.094036] #1: 000000007ae07de9 (sb_pagefaults){.+.+}, at: ext4_page_mkwrite+0x1c4/0x1320 [ 718.102993] #2: 000000006083755c (&ei->i_mmap_sem){++++}, at: ext4_page_mkwrite+0x201/0x1320 [ 718.112069] #3: 00000000eda7daa8 (&ei->xattr_sem){++++}, at: ext4_convert_inline_data+0x20a/0x3a0 [ 718.121548] [ 718.123180] ============================================= [ 718.123180] [ 718.130182] NMI backtrace for cpu 1 [ 718.133874] CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 718.141478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.150833] Call Trace: [ 718.153556] dump_stack+0x1fc/0x2ef [ 718.157181] nmi_cpu_backtrace.cold+0x63/0xa2 [ 718.161762] ? lapic_can_unplug_cpu+0x80/0x80 [ 718.166256] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 718.171539] watchdog+0x991/0xe60 [ 718.175009] ? reset_hung_task_detector+0x30/0x30 [ 718.180242] kthread+0x33f/0x460 [ 718.183606] ? kthread_park+0x180/0x180 [ 718.187573] ret_from_fork+0x24/0x30 [ 718.191417] Sending NMI from CPU 1 to CPUs 0: [ 718.196726] NMI backtrace for cpu 0 [ 718.196732] CPU: 0 PID: 8046 Comm: kworker/u4:5 Not tainted 4.19.211-syzkaller #0 [ 718.196738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.196742] Workqueue: writeback wb_workfn (flush-7:0) [ 718.196751] RIP: 0010:__lock_acquire+0xbb3/0x3ff0 [ 718.196762] Code: 80 46 86 c8 61 48 b8 00 00 00 00 00 fc ff df 49 0f af cc 48 c1 e9 31 4c 8d 04 cd 40 75 d1 8c 4c 89 c2 48 c1 ea 03 80 3c 02 00 <0f> 85 83 25 00 00 48 8b 1c cd 40 75 d1 8c 48 85 db 74 55 48 83 eb [ 718.196765] RSP: 0018:ffff88808db1f150 EFLAGS: 00000046 [ 718.196773] RAX: dffffc0000000000 RBX: c9451baf6145ee4d RCX: 00000000000047e3 [ 718.196777] RDX: 1ffffffff19a768b RSI: 00000000c9bc1f8d RDI: 0000000000000000 [ 718.196782] RBP: 0000000000000000 R08: ffffffff8cd3b458 R09: 0000000000000005 [ 718.196787] R10: ffff888098400ed0 R11: 0000000000000000 R12: 89cc5296d6d49c4e [ 718.196792] R13: ffff888098400580 R14: ffff888098400ee8 R15: 0000000000000000 [ 718.196798] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 718.196802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.196807] CR2: 00007fa29916e000 CR3: 00000000a1629000 CR4: 00000000003406f0 [ 718.196812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 718.196817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 718.196819] Call Trace: [ 718.196823] ? __lock_acquire+0x6de/0x3ff0 [ 718.196826] ? mark_held_locks+0xf0/0xf0 [ 718.196830] ? mark_held_locks+0xf0/0xf0 [ 718.196833] ? mark_held_locks+0xf0/0xf0 [ 718.196837] ? mark_held_locks+0xf0/0xf0 [ 718.196840] ? mark_held_locks+0xf0/0xf0 [ 718.196844] ? percpu_counter_add_batch+0xa8/0x180 [ 718.196848] ? mark_held_locks+0xf0/0xf0 [ 718.196851] ? __lock_acquire+0x6de/0x3ff0 [ 718.196854] lock_acquire+0x170/0x3c0 [ 718.196858] ? sb_mark_inode_writeback+0x8e/0x490 [ 718.196862] _raw_spin_lock_irqsave+0x8c/0xc0 [ 718.196871] ? sb_mark_inode_writeback+0x8e/0x490 [ 718.196874] sb_mark_inode_writeback+0x8e/0x490 [ 718.196878] ? percpu_counter_add_batch+0x126/0x180 [ 718.196882] __test_set_page_writeback+0xf76/0x1750 [ 718.196886] __block_write_full_page+0x651/0xf60 [ 718.196890] ? bh_uptodate_or_lock+0x100/0x100 [ 718.196893] ? block_llseek+0xc0/0xc0 [ 718.196897] block_write_full_page+0x1f3/0x260 [ 718.196901] ? block_llseek+0xc0/0xc0 [ 718.196904] __writepage+0x5e/0xe0 [ 718.196907] write_cache_pages+0x802/0x12d0 [ 718.196911] ? tag_pages_for_writeback+0x2f0/0x2f0 [ 718.196915] ? clear_page_dirty_for_io+0xee0/0xee0 [ 718.196918] ? mark_held_locks+0xf0/0xf0 [ 718.196921] ? mark_held_locks+0xf0/0xf0 [ 718.196924] ? __lock_acquire+0x6de/0x3ff0 [ 718.196927] ? blkdev_readpages+0x30/0x30 [ 718.196930] generic_writepages+0xdb/0x150 [ 718.196933] ? dirty_poll_interval.part.0+0x30/0x30 [ 718.196936] ? mark_held_locks+0xf0/0xf0 [ 718.196939] ? __lock_acquire+0x6de/0x3ff0 [ 718.196942] do_writepages+0xe5/0x290 [ 718.196946] ? page_writeback_cpu_online+0x10/0x10 [ 718.196949] ? lock_downgrade+0x720/0x720 [ 718.196952] ? check_preemption_disabled+0x41/0x280 [ 718.196955] __writeback_single_inode+0x10c/0x11d0 [ 718.196959] writeback_sb_inodes+0x537/0xef0 [ 718.196962] ? wbc_detach_inode+0x840/0x840 [ 718.196965] ? down_read_trylock+0x4e/0x90 [ 718.196968] ? trylock_super+0x1d/0x100 [ 718.196971] __writeback_inodes_wb+0xc6/0x280 [ 718.196974] wb_writeback+0x841/0xcc0 [ 718.196978] ? writeback_inodes_wb.constprop.0+0x1d0/0x1d0 [ 718.196980] ? cpumask_next+0x3c/0x40 [ 718.196983] ? get_nr_dirty_inodes+0x19e/0x210 [ 718.196986] wb_workfn+0x8ba/0x1250 [ 718.196989] ? inode_wait_for_writeback+0x30/0x30 [ 718.196992] process_one_work+0x864/0x1570 [ 718.196995] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 718.196998] worker_thread+0x64c/0x1130 [ 718.197001] ? __kthread_parkme+0x133/0x1e0 [ 718.197005] ? process_one_work+0x1570/0x1570 [ 718.197007] kthread+0x33f/0x460 [ 718.197010] ? kthread_park+0x180/0x180 [ 718.197013] ret_from_fork+0x24/0x30 [ 718.197059] Kernel panic - not syncing: hung_task: blocked tasks [ 718.579569] CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 [ 718.587010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.596363] Call Trace: [ 718.598957] dump_stack+0x1fc/0x2ef [ 718.602588] panic+0x26a/0x50e [ 718.605782] ? __warn_printk+0xf3/0xf3 [ 718.609674] ? lapic_can_unplug_cpu+0x80/0x80 [ 718.614259] ? ___preempt_schedule+0x16/0x18 [ 718.618678] ? watchdog+0x991/0xe60 [ 718.622319] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 718.627775] watchdog+0x9a2/0xe60 [ 718.631238] ? reset_hung_task_detector+0x30/0x30 [ 718.636084] kthread+0x33f/0x460 [ 718.639452] ? kthread_park+0x180/0x180 [ 718.643426] ret_from_fork+0x24/0x30 [ 718.647448] Kernel Offset: disabled [ 718.651073] Rebooting in 86400 seconds..