[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.143' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 905.567639] print_req_error: I/O error, dev loop3, sector 64 [ 905.574276] print_req_error: I/O error, dev loop3, sector 256 [ 905.580918] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 905.597247] print_req_error: I/O error, dev loop3, sector 512 [ 905.603304] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1144.685390] INFO: task syz-executor646:8040 blocked for more than 140 seconds. [ 1144.692855] Not tainted 4.14.216-syzkaller #0 [ 1144.699876] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1144.708600] syz-executor646 D29920 8040 8030 0x00000004 [ 1144.714233] Call Trace: [ 1144.717835] __schedule+0x88b/0x1de0 [ 1144.721556] ? io_schedule_timeout+0x140/0x140 [ 1144.727228] ? lock_downgrade+0x740/0x740 [ 1144.731408] schedule+0x8d/0x1b0 [ 1144.734763] schedule_preempt_disabled+0xf/0x20 [ 1144.740731] __mutex_lock+0x669/0x1310 [ 1144.744633] ? mount_bdev+0x71/0x360 [ 1144.749304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1144.754753] ? __blkdev_get+0x1090/0x1090 [ 1144.759893] ? mntput+0x5c/0x80 [ 1144.763170] ? lookup_bdev+0x8c/0x1c0 [ 1144.768563] ? bdev_read_only+0x6a/0x90 [ 1144.772539] mount_bdev+0x71/0x360 [ 1144.776999] ? udf_load_vrs+0xa90/0xa90 [ 1144.780971] mount_fs+0x92/0x2a0 [ 1144.784328] vfs_kern_mount.part.0+0x5b/0x470 [ 1144.790083] do_mount+0xe53/0x2a00 [ 1144.793621] ? lock_acquire+0x170/0x3f0 [ 1144.799299] ? lock_downgrade+0x740/0x740 [ 1144.803455] ? copy_mount_string+0x40/0x40 [ 1144.808593] ? __might_fault+0x177/0x1b0 [ 1144.812653] ? _copy_from_user+0x96/0x100 [ 1144.817721] ? copy_mount_options+0x1fa/0x2f0 [ 1144.822218] ? copy_mnt_ns+0xa30/0xa30 [ 1144.827011] SyS_mount+0xa8/0x120 [ 1144.830479] ? copy_mnt_ns+0xa30/0xa30 [ 1144.834353] do_syscall_64+0x1d5/0x640 [ 1144.839524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1144.844725] RIP: 0033:0x44ab69 [ 1144.848846] RSP: 002b:00007fb903417db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1144.857138] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab69 [ 1144.864403] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000020000380 [ 1144.872639] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 1144.880525] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 1144.888399] R13: 00007ffda2934f9f R14: 00007fb9034189c0 R15: 0000000000000000 [ 1144.896873] INFO: task syz-executor646:8035 blocked for more than 140 seconds. [ 1144.904226] Not tainted 4.14.216-syzkaller #0 [ 1144.910341] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1144.919006] syz-executor646 D29920 8035 8028 0x00000004 [ 1144.924643] Call Trace: [ 1144.929198] __schedule+0x88b/0x1de0 [ 1144.932934] ? io_schedule_timeout+0x140/0x140 [ 1144.938696] ? mark_held_locks+0xa6/0xf0 [ 1144.942753] ? _raw_spin_unlock_irq+0x24/0x80 [ 1144.948302] ? rwsem_down_write_failed+0x33e/0x6d0 [ 1144.953236] schedule+0x8d/0x1b0 [ 1144.957683] rwsem_down_write_failed+0x343/0x6d0 [ 1144.962443] ? rwsem_down_read_failed_killable+0x520/0x520 [ 1144.969154] ? retint_kernel+0x2d/0x2d [ 1144.973048] ? lock_acquire+0x1ec/0x3f0 [ 1144.977982] call_rwsem_down_write_failed+0x13/0x20 [ 1144.982998] down_write+0x4f/0x90 [ 1144.987352] ? grab_super+0x55/0x140 [ 1144.991063] grab_super+0x55/0x140 [ 1144.994592] ? set_bdev_super+0x110/0x110 [ 1145.000886] sget_userns+0x2b1/0xc10 [ 1145.004604] ? set_bdev_super+0x110/0x110 [ 1145.009756] ? ns_test_super+0x50/0x50 [ 1145.013646] ? set_bdev_super+0x110/0x110 [ 1145.018792] ? ns_test_super+0x50/0x50 [ 1145.022678] sget+0xd1/0x110 [ 1145.027162] mount_bdev+0xcd/0x360 [ 1145.030710] ? udf_load_vrs+0xa90/0xa90 [ 1145.034681] mount_fs+0x92/0x2a0 [ 1145.039572] vfs_kern_mount.part.0+0x5b/0x470 [ 1145.044078] do_mount+0xe53/0x2a00 [ 1145.048600] ? lock_acquire+0x170/0x3f0 [ 1145.052572] ? lock_downgrade+0x740/0x740 [ 1145.057717] ? copy_mount_string+0x40/0x40 [ 1145.061948] ? __might_fault+0x177/0x1b0 [ 1145.066937] ? _copy_from_user+0x96/0x100 [ 1145.071104] ? copy_mount_options+0x1fa/0x2f0 [ 1145.076741] ? copy_mnt_ns+0xa30/0xa30 [ 1145.080635] SyS_mount+0xa8/0x120 [ 1145.084104] ? copy_mnt_ns+0xa30/0xa30 [ 1145.089498] do_syscall_64+0x1d5/0x640 [ 1145.093410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1145.099657] RIP: 0033:0x44ab69 [ 1145.102848] RSP: 002b:00007fb903417db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.111509] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab69 [ 1145.119454] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000020000380 [ 1145.127306] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.134575] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 1145.142791] R13: 00007ffda2934f9f R14: 00007fb9034189c0 R15: 0000000000000000 [ 1145.150853] INFO: task syz-executor646:8038 blocked for more than 140 seconds. [ 1145.159384] Not tainted 4.14.216-syzkaller #0 [ 1145.164391] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.173264] syz-executor646 D29920 8038 8025 0x00000004 [ 1145.180061] Call Trace: [ 1145.182655] __schedule+0x88b/0x1de0 [ 1145.188096] ? io_schedule_timeout+0x140/0x140 [ 1145.192680] ? lock_downgrade+0x740/0x740 [ 1145.197833] schedule+0x8d/0x1b0 [ 1145.201200] schedule_preempt_disabled+0xf/0x20 [ 1145.206775] __mutex_lock+0x669/0x1310 [ 1145.210664] ? mount_bdev+0x71/0x360 [ 1145.214385] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1145.221293] ? __blkdev_get+0x1090/0x1090 [ 1145.226065] ? mntput+0x5c/0x80 [ 1145.229346] ? lookup_bdev+0x8c/0x1c0 [ 1145.233137] ? bdev_read_only+0x6a/0x90 [ 1145.238364] mount_bdev+0x71/0x360 [ 1145.241915] ? udf_load_vrs+0xa90/0xa90 [ 1145.246815] mount_fs+0x92/0x2a0 [ 1145.250182] vfs_kern_mount.part.0+0x5b/0x470 [ 1145.254668] do_mount+0xe53/0x2a00 [ 1145.259437] ? lock_acquire+0x170/0x3f0 [ 1145.263413] ? lock_downgrade+0x740/0x740 [ 1145.268442] ? copy_mount_string+0x40/0x40 [ 1145.272675] ? __might_fault+0x177/0x1b0 [ 1145.277670] ? _copy_from_user+0x96/0x100 [ 1145.281815] ? copy_mount_options+0x1fa/0x2f0 [ 1145.287750] ? copy_mnt_ns+0xa30/0xa30 [ 1145.291634] SyS_mount+0xa8/0x120 [ 1145.295073] ? copy_mnt_ns+0xa30/0xa30 [ 1145.300203] do_syscall_64+0x1d5/0x640 [ 1145.304182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1145.310332] RIP: 0033:0x44ab69 [ 1145.313625] RSP: 002b:00007fb903417db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.322314] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab69 [ 1145.330176] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000020000380 [ 1145.338078] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.345996] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 1145.353261] R13: 00007ffda2934f9f R14: 00007fb9034189c0 R15: 0000000000000000 [ 1145.361694] INFO: task syz-executor646:8043 blocked for more than 140 seconds. [ 1145.369629] Not tainted 4.14.216-syzkaller #0 [ 1145.374634] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.383571] syz-executor646 D29920 8043 8029 0x00000004 [ 1145.391302] Call Trace: [ 1145.393901] __schedule+0x88b/0x1de0 [ 1145.398532] ? io_schedule_timeout+0x140/0x140 [ 1145.403113] ? lock_downgrade+0x740/0x740 [ 1145.408149] schedule+0x8d/0x1b0 [ 1145.411511] schedule_preempt_disabled+0xf/0x20 [ 1145.417706] __mutex_lock+0x669/0x1310 [ 1145.421599] ? mount_bdev+0x71/0x360 [ 1145.426209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1145.431655] ? __blkdev_get+0x1090/0x1090 [ 1145.436701] ? mntput+0x5c/0x80 [ 1145.439979] ? lookup_bdev+0x8c/0x1c0 [ 1145.443770] ? bdev_read_only+0x6a/0x90 [ 1145.449036] mount_bdev+0x71/0x360 [ 1145.452571] ? udf_load_vrs+0xa90/0xa90 [ 1145.457439] mount_fs+0x92/0x2a0 [ 1145.460806] vfs_kern_mount.part.0+0x5b/0x470 [ 1145.466245] do_mount+0xe53/0x2a00 [ 1145.469783] ? lock_acquire+0x170/0x3f0 [ 1145.473746] ? lock_downgrade+0x740/0x740 [ 1145.479229] ? copy_mount_string+0x40/0x40 [ 1145.483463] ? __might_fault+0x177/0x1b0 [ 1145.488496] ? _copy_from_user+0x96/0x100 [ 1145.492646] ? copy_mount_options+0x1fa/0x2f0 [ 1145.498023] ? copy_mnt_ns+0xa30/0xa30 [ 1145.501904] SyS_mount+0xa8/0x120 [ 1145.506197] ? copy_mnt_ns+0xa30/0xa30 [ 1145.510080] do_syscall_64+0x1d5/0x640 [ 1145.513962] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1145.520368] RIP: 0033:0x44ab69 [ 1145.523548] RSP: 002b:00007fb903417db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.532138] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab69 [ 1145.540125] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000020000380 [ 1145.548541] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.556872] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 1145.564141] R13: 00007ffda2934f9f R14: 00007fb9034189c0 R15: 0000000000000000 [ 1145.573341] INFO: task syz-executor646:8045 blocked for more than 140 seconds. [ 1145.582385] Not tainted 4.14.216-syzkaller #0 [ 1145.587930] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.596933] syz-executor646 D29920 8045 8027 0x00000004 [ 1145.602565] Call Trace: [ 1145.605143] __schedule+0x88b/0x1de0 [ 1145.610135] ? io_schedule_timeout+0x140/0x140 [ 1145.614729] ? lock_downgrade+0x740/0x740 [ 1145.619813] schedule+0x8d/0x1b0 [ 1145.623179] schedule_preempt_disabled+0xf/0x20 [ 1145.628722] __mutex_lock+0x669/0x1310 [ 1145.632608] ? mount_bdev+0x71/0x360 [ 1145.637192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1145.642643] ? __blkdev_get+0x1090/0x1090 [ 1145.647658] ? mntput+0x5c/0x80 [ 1145.650934] ? lookup_bdev+0x8c/0x1c0 [ 1145.654726] ? bdev_read_only+0x6a/0x90 [ 1145.659894] mount_bdev+0x71/0x360 [ 1145.663429] ? udf_load_vrs+0xa90/0xa90 [ 1145.668265] mount_fs+0x92/0x2a0 [ 1145.671628] vfs_kern_mount.part.0+0x5b/0x470 [ 1145.677600] do_mount+0xe53/0x2a00 [ 1145.681137] ? lock_acquire+0x170/0x3f0 [ 1145.685099] ? lock_downgrade+0x740/0x740 [ 1145.690447] ? copy_mount_string+0x40/0x40 [ 1145.694675] ? __might_fault+0x177/0x1b0 [ 1145.699684] ? _copy_from_user+0x96/0x100 [ 1145.703829] ? copy_mount_options+0x1fa/0x2f0 [ 1145.709185] ? copy_mnt_ns+0xa30/0xa30 [ 1145.713079] SyS_mount+0xa8/0x120 [ 1145.717516] ? copy_mnt_ns+0xa30/0xa30 [ 1145.721405] do_syscall_64+0x1d5/0x640 [ 1145.726190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1145.731376] RIP: 0033:0x44ab69 [ 1145.734554] RSP: 002b:00007fb903417db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.743615] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab69 [ 1145.752327] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000020000380 [ 1145.760175] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.767983] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 1145.775951] R13: 00007ffda2934f9f R14: 00007fb9034189c0 R15: 0000000000000000 [ 1145.783279] [ 1145.783279] Showing all locks held in the system: [ 1145.790548] 1 lock held by khungtaskd/1527: [ 1145.794937] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1145.804134] 1 lock held by syz-executor646/8040: [ 1145.808894] #0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [] mount_bdev+0x71/0x360 [ 1145.818051] 2 locks held by syz-executor646/8035: [ 1145.822885] #0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [] mount_bdev+0x71/0x360 [ 1145.832058] #1: (&type->s_umount_key#47){+.+.}, at: [] grab_super+0x55/0x140 [ 1145.841039] 1 lock held by syz-executor646/8038: [ 1145.845815] #0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [] mount_bdev+0x71/0x360 [ 1145.854930] 1 lock held by syz-executor646/8043: [ 1145.859698] #0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [] mount_bdev+0x71/0x360 [ 1145.868866] 1 lock held by syz-executor646/8045: [ 1145.873604] #0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [] mount_bdev+0x71/0x360 [ 1145.882789] [ 1145.884406] ============================================= [ 1145.884406] [ 1145.893054] NMI backtrace for cpu 1 [ 1145.896786] CPU: 1 PID: 1527 Comm: khungtaskd Not tainted 4.14.216-syzkaller #0 [ 1145.904223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.913566] Call Trace: [ 1145.916152] dump_stack+0x1b2/0x281 [ 1145.919772] nmi_cpu_backtrace.cold+0x57/0x93 [ 1145.924258] ? irq_force_complete_move+0x350/0x350 [ 1145.929222] nmi_trigger_cpumask_backtrace+0x13a/0x180 [ 1145.934496] watchdog+0x5b9/0xb40 [ 1145.937948] ? hungtask_pm_notify+0x50/0x50 [ 1145.942274] kthread+0x30d/0x420 [ 1145.945630] ? kthread_create_on_node+0xd0/0xd0 [ 1145.950291] ret_from_fork+0x24/0x30 [ 1145.954100] Sending NMI from CPU 1 to CPUs 0: [ 1145.958923] NMI backtrace for cpu 0 [ 1145.958926] CPU: 0 PID: 8 Comm: rcu_preempt Not tainted 4.14.216-syzkaller #0 [ 1145.958930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.958933] task: ffff8880b5414200 task.stack: ffff8880b5418000 [ 1145.958935] RIP: 0010:rcu_gp_kthread+0x1032/0x1e60 [ 1145.958937] RSP: 0018:ffff8880b541fdc0 EFLAGS: 00000246 [ 1145.958942] RAX: ffffffff88f7a060 RBX: 0000000100014a7f RCX: 0000000000000005 [ 1145.958945] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001 [ 1145.958948] RBP: 0000000000000001 R08: ffffffff8b9bf5b0 R09: 0000000000000000 [ 1145.958951] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1145.958954] R13: ffffffff88f799c0 R14: ffffffff88f79da0 R15: ffffffff88f799c0 [ 1145.958957] FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1145.958960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1145.958963] CR2: 00007fe434d1a028 CR3: 00000000af127000 CR4: 00000000001406f0 [ 1145.958966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1145.958969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1145.958970] Call Trace: [ 1145.958972] ? force_qs_rnp+0x4f0/0x4f0 [ 1145.958974] ? force_qs_rnp+0x4f0/0x4f0 [ 1145.958976] kthread+0x30d/0x420 [ 1145.958978] ? kthread_create_on_node+0xd0/0xd0 [ 1145.958980] ret_from_fork+0x24/0x30 [ 1145.958982] Code: b9 05 00 00 00 4d 89 ef 48 c1 e8 03 66 41 89 8d 2a 04 00 00 42 80 3c 20 00 0f 85 0c 0e 00 00 48 8b 44 24 10 48 8b 1d 7e c9 99 07 <48> c1 e8 03 42 80 3c 20 00 0f 85 e2 0d 00 00 49 89 9f a0 06 00 [ 1145.960215] Kernel panic - not syncing: hung_task: blocked tasks [ 1146.114979] CPU: 1 PID: 1527 Comm: khungtaskd Not tainted 4.14.216-syzkaller #0 [ 1146.122410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.131750] Call Trace: [ 1146.134335] dump_stack+0x1b2/0x281 [ 1146.137957] panic+0x1f9/0x42d [ 1146.141154] ? add_taint.cold+0x16/0x16 [ 1146.145135] watchdog+0x5ca/0xb40 [ 1146.148581] ? hungtask_pm_notify+0x50/0x50 [ 1146.152893] kthread+0x30d/0x420 [ 1146.156266] ? kthread_create_on_node+0xd0/0xd0 [ 1146.160925] ret_from_fork+0x24/0x30 [ 1146.165439] Kernel Offset: disabled [ 1146.169070] Rebooting in 86400 seconds..