[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 1001.414416] INFO: task systemd-udevd:4625 blocked for more than 140 seconds. [ 1001.421784] Not tainted 4.14.212-syzkaller #0 [ 1001.426982] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.435025] systemd-udevd D25792 4625 1 0x00000104 [ 1001.440907] Call Trace: [ 1001.443486] __schedule+0x88b/0x1de0 [ 1001.447255] ? __lock_acquire+0x5fc/0x3f20 [ 1001.451498] ? io_schedule_timeout+0x140/0x140 [ 1001.456130] ? lock_downgrade+0x740/0x740 [ 1001.460295] schedule+0x8d/0x1b0 [ 1001.463652] schedule_preempt_disabled+0xf/0x20 [ 1001.468370] __mutex_lock+0x669/0x1310 [ 1001.472259] ? __blkdev_get+0x191/0x1090 [ 1001.476403] ? __mutex_lock+0x2c0/0x1310 [ 1001.480468] ? lo_open+0x19/0xb0 [ 1001.483819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1001.489317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1001.494847] ? disk_get_part+0x95/0x140 [ 1001.498835] ? loop_unregister_transfer+0x90/0x90 [ 1001.503667] lo_open+0x19/0xb0 [ 1001.506903] __blkdev_get+0x306/0x1090 [ 1001.510803] ? lookup_fast+0x430/0xe30 [ 1001.514765] ? sb_min_blocksize+0x1d0/0x1d0 [ 1001.519081] ? fsnotify+0x974/0x11b0 [ 1001.522790] blkdev_get+0x88/0x890 [ 1001.526412] ? __blkdev_get+0x1090/0x1090 [ 1001.530560] ? lock_downgrade+0x740/0x740 [ 1001.534759] ? do_raw_spin_unlock+0x164/0x220 [ 1001.539253] ? _raw_spin_unlock+0x29/0x40 [ 1001.543381] blkdev_open+0x1cc/0x250 [ 1001.547157] ? security_file_open+0x82/0x190 [ 1001.551564] do_dentry_open+0x44b/0xec0 [ 1001.555600] ? blkdev_get_by_dev+0x70/0x70 [ 1001.559835] vfs_open+0x105/0x220 [ 1001.563271] path_openat+0x628/0x2970 [ 1001.567143] ? path_lookupat+0x780/0x780 [ 1001.571220] ? trace_hardirqs_on+0x10/0x10 [ 1001.575518] ? trace_hardirqs_on+0x10/0x10 [ 1001.579752] do_filp_open+0x179/0x3c0 [ 1001.583535] ? may_open_dev+0xe0/0xe0 [ 1001.587403] ? lock_downgrade+0x740/0x740 [ 1001.591567] ? do_raw_spin_unlock+0x164/0x220 [ 1001.596206] ? _raw_spin_unlock+0x29/0x40 [ 1001.600361] ? __alloc_fd+0x1be/0x490 [ 1001.604149] do_sys_open+0x296/0x410 [ 1001.607917] ? filp_open+0x60/0x60 [ 1001.611459] ? do_syscall_64+0x4c/0x640 [ 1001.615490] ? do_sys_open+0x410/0x410 [ 1001.619377] do_syscall_64+0x1d5/0x640 [ 1001.623251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1001.628504] RIP: 0033:0x7f23f632d840 [ 1001.632226] RSP: 002b:00007ffdacb05698 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1001.639993] RAX: ffffffffffffffda RBX: 00007ffdacb05730 RCX: 00007f23f632d840 [ 1001.647604] RDX: 000055fbeb0a2fe3 RSI: 00000000000a0800 RDI: 000055fbec11e7d0 [ 1001.654952] RBP: 00007ffdacb05c00 R08: 000055fbeb0a2670 R09: 0000000000000010 [ 1001.662223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdacb05840 [ 1001.670004] R13: 000055fbec0e3010 R14: 000055fbec10b7f0 R15: 00007ffdacb05710 [ 1001.678261] INFO: task systemd-udevd:8035 blocked for more than 140 seconds. [ 1001.685527] Not tainted 4.14.212-syzkaller #0 [ 1001.690543] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.698588] systemd-udevd D28528 8035 4625 0x00000100 [ 1001.704294] Call Trace: [ 1001.706899] __schedule+0x88b/0x1de0 [ 1001.710706] ? io_schedule_timeout+0x140/0x140 [ 1001.715394] ? lock_downgrade+0x740/0x740 [ 1001.719561] schedule+0x8d/0x1b0 [ 1001.722922] schedule_preempt_disabled+0xf/0x20 [ 1001.727657] __mutex_lock+0x669/0x1310 [ 1001.731559] ? __blkdev_get+0x191/0x1090 [ 1001.735731] ? __mutex_lock+0x2c0/0x1310 [ 1001.739805] ? lo_open+0x19/0xb0 [ 1001.743412] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1001.748945] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1001.754475] ? exact_match+0x9/0x20 [ 1001.758111] ? kobj_lookup+0x31e/0x400 [ 1001.761979] lo_open+0x19/0xb0 [ 1001.765223] ? loop_unregister_transfer+0x90/0x90 [ 1001.796916] __blkdev_get+0xa8c/0x1090 [ 1001.800806] ? lookup_fast+0x430/0xe30 [ 1001.804739] ? sb_min_blocksize+0x1d0/0x1d0 [ 1001.809057] ? fsnotify+0x974/0x11b0 [ 1001.831894] blkdev_get+0x88/0x890 [ 1001.835491] ? __blkdev_get+0x1090/0x1090 [ 1001.839649] ? lock_downgrade+0x740/0x740 [ 1001.843783] ? do_raw_spin_unlock+0x164/0x220 [ 1001.848340] ? _raw_spin_unlock+0x29/0x40 [ 1001.852506] blkdev_open+0x1cc/0x250 [ 1001.892278] ? security_file_open+0x82/0x190 [ 1001.896739] do_dentry_open+0x44b/0xec0 [ 1001.900729] ? blkdev_get_by_dev+0x70/0x70 [ 1001.940129] ? __inode_permission+0xcd/0x2f0 [ 1001.944590] vfs_open+0x105/0x220 [ 1001.948042] path_openat+0x628/0x2970 [ 1001.951827] ? path_lookupat+0x780/0x780 [ 1001.955959] ? trace_hardirqs_on+0x10/0x10 [ 1001.960196] do_filp_open+0x179/0x3c0 [ 1001.963980] ? may_open_dev+0xe0/0xe0 [ 1001.967840] ? lock_downgrade+0x740/0x740 [ 1001.971989] ? do_raw_spin_unlock+0x164/0x220 [ 1001.976555] ? _raw_spin_unlock+0x29/0x40 [ 1001.980701] ? __alloc_fd+0x1be/0x490 [ 1001.984563] do_sys_open+0x296/0x410 [ 1001.988275] ? filp_open+0x60/0x60 [ 1001.991797] ? do_syscall_64+0x4c/0x640 [ 1001.995852] ? do_sys_open+0x410/0x410 [ 1001.999744] do_syscall_64+0x1d5/0x640 [ 1002.003628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.008892] RIP: 0033:0x7f23f632d840 [ 1002.013061] RSP: 002b:00007ffdacb04fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1002.020865] RAX: ffffffffffffffda RBX: 000055fbec0f8870 RCX: 00007f23f632d840 [ 1002.028198] RDX: 000055fbeb0a2fe3 RSI: 00000000000a0800 RDI: 000055fbec0f9650 [ 1002.035533] RBP: 00007ffdacb05150 R08: 000055fbeb0a2670 R09: 0000000000000010 [ 1002.042810] R10: 000055fbeb0a2d0c R11: 0000000000000246 R12: 00007ffdacb050a0 [ 1002.050158] R13: 000055fbec0e8fd0 R14: 0000000000000003 R15: 000000000000000e [ 1002.057542] INFO: task syz-executor343:10596 blocked for more than 140 seconds. [ 1002.065057] Not tainted 4.14.212-syzkaller #0 [ 1002.070080] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.078117] syz-executor343 D28784 10596 8005 0x00000004 [ 1002.083763] Call Trace: [ 1002.086519] __schedule+0x88b/0x1de0 [ 1002.090233] ? io_schedule_timeout+0x140/0x140 [ 1002.095139] ? lock_downgrade+0x740/0x740 [ 1002.099298] schedule+0x8d/0x1b0 [ 1002.102657] schedule_preempt_disabled+0xf/0x20 [ 1002.107383] __mutex_lock+0x669/0x1310 [ 1002.111271] ? lo_release+0x1b/0x190 [ 1002.115043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.120506] ? __blkdev_put+0x330/0x800 [ 1002.124702] ? lock_downgrade+0x740/0x740 [ 1002.128849] ? loop_clr_fd+0xc20/0xc20 [ 1002.132718] lo_release+0x1b/0x190 [ 1002.154541] ? loop_clr_fd+0xc20/0xc20 [ 1002.158433] __blkdev_put+0x5aa/0x800 [ 1002.162332] ? revalidate_disk+0x1f0/0x1f0 [ 1002.166617] ? locks_remove_file+0x2cd/0x420 [ 1002.171027] ? blkdev_put+0x75/0x4c0 [ 1002.260434] ? blkdev_put+0x4c0/0x4c0 [ 1002.264350] blkdev_close+0x86/0xb0 [ 1002.267979] __fput+0x25f/0x7a0 [ 1002.271244] task_work_run+0x11f/0x190 [ 1002.275265] exit_to_usermode_loop+0x1ad/0x200 [ 1002.279864] do_syscall_64+0x4a3/0x640 [ 1002.283739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.289004] RIP: 0033:0x401300 [ 1002.292203] RSP: 002b:00007ffdebdeb678 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1002.299988] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000401300 [ 1002.307343] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000006 [ 1002.314690] RBP: 0000000000000005 R08: 0000000000000000 R09: 000000000000000c [ 1002.321960] R10: 0000000000000064 R11: 0000000000000246 R12: 000000000148e850 [ 1002.329316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.336698] INFO: task syz-executor343:10606 blocked for more than 140 seconds. [ 1002.344143] Not tainted 4.14.212-syzkaller #0 [ 1002.349236] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.358294] syz-executor343 D28704 10606 8003 0x00000004 [ 1002.363949] Call Trace: [ 1002.366616] __schedule+0x88b/0x1de0 [ 1002.370343] ? io_schedule_timeout+0x140/0x140 [ 1002.375124] ? lock_downgrade+0x740/0x740 [ 1002.379711] schedule+0x8d/0x1b0 [ 1002.383064] schedule_preempt_disabled+0xf/0x20 [ 1002.387829] __mutex_lock+0x669/0x1310 [ 1002.392608] ? blkdev_reread_part+0x1b/0x40 [ 1002.397536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.403337] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1002.409319] ? __wake_up_common+0x5d0/0x5d0 [ 1002.414276] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1002.419379] blkdev_reread_part+0x1b/0x40 [ 1002.423615] loop_set_status+0xeeb/0x12b0 [ 1002.427900] loop_set_status64+0x92/0xe0 [ 1002.432311] ? loop_set_status_old+0x200/0x200 [ 1002.436964] ? __mutex_lock+0x360/0x1310 [ 1002.441031] ? wait_for_completion_io+0x10/0x10 [ 1002.445798] ? set_blocksize+0x125/0x380 [ 1002.449872] lo_ioctl+0x587/0x1cd0 [ 1002.453395] ? loop_set_status64+0xe0/0xe0 [ 1002.457692] blkdev_ioctl+0x540/0x1830 [ 1002.463276] ? blkpg_ioctl+0x8d0/0x8d0 [ 1002.467246] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1002.472361] ? debug_check_no_obj_freed+0x2c0/0x674 [ 1002.477461] block_ioctl+0xd9/0x120 [ 1002.481311] ? blkdev_fallocate+0x3a0/0x3a0 [ 1002.485775] do_vfs_ioctl+0x75a/0xff0 [ 1002.489577] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.495285] ? ioctl_preallocate+0x1a0/0x1a0 [ 1002.499719] ? kmem_cache_free+0x23a/0x2b0 [ 1002.503974] ? putname+0xcd/0x110 [ 1002.507491] ? do_sys_open+0x208/0x410 [ 1002.511384] ? filp_open+0x60/0x60 [ 1002.514982] ? security_file_ioctl+0x83/0xb0 [ 1002.519402] SyS_ioctl+0x7f/0xb0 [ 1002.522747] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.526775] do_syscall_64+0x1d5/0x640 [ 1002.530664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.535943] RIP: 0033:0x4415f7 [ 1002.539130] RSP: 002b:00007ffdebdeb678 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 1002.547354] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004415f7 [ 1002.554734] RDX: 00007ffdebdeb710 RSI: 0000000000004c04 RDI: 0000000000000006 [ 1002.562070] RBP: 0000000000000005 R08: 000000000000000a R09: 00007ffdebdeb8d0 [ 1002.569421] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000402380 [ 1002.576802] R13: 0000000000402410 R14: 0000000000000000 R15: 0000000000000000 [ 1002.585371] INFO: task syz-executor343:10619 blocked for more than 140 seconds. [ 1002.593309] Not tainted 4.14.212-syzkaller #0 [ 1002.598413] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.606469] syz-executor343 D28536 10619 8006 0x00000004 [ 1002.612105] Call Trace: [ 1002.614754] __schedule+0x88b/0x1de0 [ 1002.618480] ? io_schedule_timeout+0x140/0x140 [ 1002.623049] ? lock_downgrade+0x740/0x740 [ 1002.627271] schedule+0x8d/0x1b0 [ 1002.630646] schedule_preempt_disabled+0xf/0x20 [ 1002.635399] __mutex_lock+0x669/0x1310 [ 1002.639307] ? lo_release+0x1b/0x190 [ 1002.643021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.648561] ? __blkdev_put+0x330/0x800 [ 1002.652540] ? lock_downgrade+0x740/0x740 [ 1002.656767] ? loop_clr_fd+0xc20/0xc20 [ 1002.660669] lo_release+0x1b/0x190 [ 1002.664200] ? loop_clr_fd+0xc20/0xc20 [ 1002.668171] __blkdev_put+0x5aa/0x800 [ 1002.671965] ? revalidate_disk+0x1f0/0x1f0 [ 1002.676291] ? locks_remove_file+0x2cd/0x420 [ 1002.680714] ? blkdev_put+0x75/0x4c0 [ 1002.691219] ? blkdev_put+0x4c0/0x4c0 [ 1002.695082] blkdev_close+0x86/0xb0 [ 1002.698728] __fput+0x25f/0x7a0 [ 1002.701995] task_work_run+0x11f/0x190 [ 1002.705965] exit_to_usermode_loop+0x1ad/0x200 [ 1002.710571] do_syscall_64+0x4a3/0x640 [ 1002.714652] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.719842] RIP: 0033:0x401300 [ 1002.723019] RSP: 002b:00007ffdebdeb678 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1002.731046] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000401300 [ 1002.738474] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000006 [ 1002.745821] RBP: 0000000000000005 R08: 0000000000000000 R09: 000000000000000c [ 1002.753273] R10: 0000000000000064 R11: 0000000000000246 R12: 000000000148e850 [ 1002.760696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.768093] INFO: task syz-executor343:10628 blocked for more than 140 seconds. [ 1002.775659] Not tainted 4.14.212-syzkaller #0 [ 1002.780667] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.788702] syz-executor343 D28912 10628 8008 0x00000004 [ 1002.794406] Call Trace: [ 1002.796993] __schedule+0x88b/0x1de0 [ 1002.800704] ? io_schedule_timeout+0x140/0x140 [ 1002.805330] ? lock_downgrade+0x740/0x740 [ 1002.809478] schedule+0x8d/0x1b0 [ 1002.812838] schedule_preempt_disabled+0xf/0x20 [ 1002.817598] __mutex_lock+0x669/0x1310 [ 1002.821520] ? loop_control_ioctl+0x181/0x3f0 [ 1002.826094] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.831548] ? loop_queue_work+0x1e80/0x1e80 [ 1002.836018] loop_control_ioctl+0x181/0x3f0 [ 1002.840341] ? loop_lookup+0x190/0x190 [ 1002.844296] ? loop_lookup+0x190/0x190 [ 1002.848182] do_vfs_ioctl+0x75a/0xff0 [ 1002.851966] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.857492] ? ioctl_preallocate+0x1a0/0x1a0 [ 1002.861917] ? kmem_cache_free+0x23a/0x2b0 [ 1002.866200] ? putname+0xcd/0x110 [ 1002.869664] ? do_sys_open+0x208/0x410 [ 1002.873549] ? filp_open+0x60/0x60 [ 1002.877155] ? security_file_ioctl+0x83/0xb0 [ 1002.881567] SyS_ioctl+0x7f/0xb0 [ 1002.884974] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.888945] do_syscall_64+0x1d5/0x640 [ 1002.892822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.898075] RIP: 0033:0x4416e9 [ 1002.901301] RSP: 002b:00007ffdebdeb8b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.909168] RAX: ffffffffffffffda RBX: 00000000004a2742 RCX: 00000000004416e9 [ 1002.916518] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 1002.923888] RBP: 00000000000bc722 R08: 0000000000000001 R09: 0000000000000001 [ 1002.931230] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000402380 [ 1002.938557] R13: 0000000000402410 R14: 0000000000000000 R15: 0000000000000000 [ 1002.945919] INFO: task syz-executor343:10629 blocked for more than 140 seconds. [ 1002.953367] Not tainted 4.14.212-syzkaller #0 [ 1002.958437] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.966474] syz-executor343 D28912 10629 8007 0x00000004 [ 1002.972114] Call Trace: [ 1002.974747] __schedule+0x88b/0x1de0 [ 1002.978471] ? wp_page_copy+0xc31/0x25c0 [ 1002.982524] ? io_schedule_timeout+0x140/0x140 [ 1002.987153] ? lock_downgrade+0x740/0x740 [ 1002.991296] schedule+0x8d/0x1b0 [ 1002.994721] schedule_preempt_disabled+0xf/0x20 [ 1002.999386] __mutex_lock+0x669/0x1310 [ 1003.003272] ? loop_control_ioctl+0x67/0x3f0 [ 1003.007748] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1003.013198] ? __lock_acquire+0x5fc/0x3f20 [ 1003.018049] ? do_wp_page+0x24d/0x1db0 [ 1003.021953] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1003.026685] loop_control_ioctl+0x67/0x3f0 [ 1003.030927] ? loop_lookup+0x190/0x190 [ 1003.034886] ? vm_insert_page+0x7c0/0x7c0 [ 1003.039044] ? loop_lookup+0x190/0x190 [ 1003.042919] do_vfs_ioctl+0x75a/0xff0 [ 1003.046764] ? ioctl_preallocate+0x1a0/0x1a0 [ 1003.051167] ? lock_downgrade+0x740/0x740 [ 1003.055390] ? security_file_ioctl+0x83/0xb0 [ 1003.059799] SyS_ioctl+0x7f/0xb0 [ 1003.063165] ? do_vfs_ioctl+0xff0/0xff0 [ 1003.067229] do_syscall_64+0x1d5/0x640 [ 1003.071118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1003.076357] RIP: 0033:0x4416e9 [ 1003.079542] RSP: 002b:00007ffdebdeb8b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.087315] RAX: ffffffffffffffda RBX: 00000000004a2742 RCX: 00000000004416e9 [ 1003.094651] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 1003.101916] RBP: 00000000000bc73f R08: 0000000000000001 R09: 0000000000000001 [ 1003.109362] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402380 [ 1003.116711] R13: 0000000000402410 R14: 0000000000000000 R15: 0000000000000000 [ 1003.124025] INFO: task syz-executor343:10630 blocked for more than 140 seconds. [ 1003.131544] Not tainted 4.14.212-syzkaller #0 [ 1003.136611] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1003.144666] syz-executor343 D28912 10630 8004 0x00000004 [ 1003.150305] Call Trace: [ 1003.152877] __schedule+0x88b/0x1de0 [ 1003.156668] ? io_schedule_timeout+0x140/0x140 [ 1003.161268] ? lock_downgrade+0x740/0x740 [ 1003.165497] schedule+0x8d/0x1b0 [ 1003.168871] schedule_preempt_disabled+0xf/0x20 [ 1003.173527] __mutex_lock+0x669/0x1310 [ 1003.177484] ? loop_control_ioctl+0x67/0x3f0 [ 1003.181897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1003.187397] ? __lock_acquire+0x5fc/0x3f20 [ 1003.191647] ? do_wp_page+0x24d/0x1db0 [ 1003.195594] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1003.200265] loop_control_ioctl+0x67/0x3f0 [ 1003.204568] ? loop_lookup+0x190/0x190 [ 1003.208454] ? vm_insert_page+0x7c0/0x7c0 [ 1003.212599] ? loop_lookup+0x190/0x190 [ 1003.216549] do_vfs_ioctl+0x75a/0xff0 [ 1003.220416] ? ioctl_preallocate+0x1a0/0x1a0 [ 1003.224908] ? lock_downgrade+0x740/0x740 [ 1003.229078] ? security_file_ioctl+0x83/0xb0 [ 1003.233472] SyS_ioctl+0x7f/0xb0 [ 1003.236902] ? do_vfs_ioctl+0xff0/0xff0 [ 1003.240927] do_syscall_64+0x1d5/0x640 [ 1003.244874] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1003.250074] RIP: 0033:0x4416e9 [ 1003.253254] RSP: 002b:00007ffdebdeb8b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.261037] RAX: ffffffffffffffda RBX: 00000000004a2742 RCX: 00000000004416e9 [ 1003.268383] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 1003.275807] RBP: 00000000000bc75d R08: 0000000000000001 R09: 0000000000000001 [ 1003.283191] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402380 [ 1003.290602] R13: 0000000000402410 R14: 0000000000000000 R15: 0000000000000000 [ 1003.297980] [ 1003.297980] Showing all locks held in the system: [ 1003.304414] 1 lock held by khungtaskd/1530: [ 1003.308830] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1003.317983] 2 locks held by systemd-udevd/4625: [ 1003.322737] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 1003.331549] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 1003.339752] 1 lock held by in:imklog/7698: [ 1003.343980] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 [ 1003.352474] 2 locks held by systemd-udevd/8035: [ 1003.357221] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 1003.365980] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 1003.374070] 2 locks held by syz-executor343/10596: [ 1003.379091] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xd8/0x800 [ 1003.387689] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1b/0x190 [ 1003.396207] 2 locks held by syz-executor343/10606: [ 1003.401138] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 [ 1003.409791] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 1003.418854] 2 locks held by syz-executor343/10619: [ 1003.423774] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xd8/0x800 [ 1003.432365] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1b/0x190 [ 1003.441962] 2 locks held by syz-executor343/10628: [ 1003.446931] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x67/0x3f0 [ 1003.456157] #1: (&lo->lo_ctl_mutex){+.+.}, at: [] loop_control_ioctl+0x181/0x3f0 [ 1003.465530] 1 lock held by syz-executor343/10629: [ 1003.470370] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x67/0x3f0 [ 1003.479593] 1 lock held by syz-executor343/10630: [ 1003.484482] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x67/0x3f0 [ 1003.493599] [ 1003.495297] ============================================= [ 1003.495297] [ 1003.502331] NMI backtrace for cpu 1 [ 1003.506014] CPU: 1 PID: 1530 Comm: khungtaskd Not tainted 4.14.212-syzkaller #0 [ 1003.513470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.522808] Call Trace: [ 1003.525398] dump_stack+0x1b2/0x283 [ 1003.529009] nmi_cpu_backtrace.cold+0x57/0x93 [ 1003.533510] ? irq_force_complete_move.cold+0x89/0x89 [ 1003.538702] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 1003.544249] watchdog+0x5b9/0xb40 [ 1003.547720] ? hungtask_pm_notify+0x50/0x50 [ 1003.552045] kthread+0x30d/0x420 [ 1003.555404] ? kthread_create_on_node+0xd0/0xd0 [ 1003.560068] ret_from_fork+0x24/0x30 [ 1003.563908] Sending NMI from CPU 1 to CPUs 0: [ 1003.569191] NMI backtrace for cpu 0 [ 1003.569196] CPU: 0 PID: 4623 Comm: systemd-journal Not tainted 4.14.212-syzkaller #0 [ 1003.569200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.569204] task: ffff8880a11b2100 task.stack: ffff8880a11b8000 [ 1003.569213] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 1003.569216] RSP: 0018:ffff8880a11bfb18 EFLAGS: 00000246 [ 1003.569221] RAX: 0000000000000007 RBX: ffff888096a8f840 RCX: 0000000000000000 [ 1003.569225] RDX: 0000000000000000 RSI: ffff8880a11b2988 RDI: ffff888096a8f840 [ 1003.569228] RBP: 0000000000000000 R08: ffffea00028b6380 R09: 0000000000000000 [ 1003.569232] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888096a8f840 [ 1003.569235] R13: ffff8880a11bfb78 R14: 0000000000000000 R15: 0000000000000286 [ 1003.569239] FS: 00007fea175978c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1003.569242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1003.569245] CR2: 00007fea1498c000 CR3: 00000000a15fe000 CR4: 00000000001406f0 [ 1003.569249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1003.569252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1003.569254] Call Trace: [ 1003.569256] __phys_addr+0xc/0xe0 [ 1003.569258] qlist_free_all+0xbb/0x140 [ 1003.569261] quarantine_reduce+0x185/0x200 [ 1003.569263] kasan_kmalloc+0xa2/0x160 [ 1003.569266] ? __lock_acquire+0x5fc/0x3f20 [ 1003.569268] ? trace_hardirqs_on+0x10/0x10 [ 1003.569271] ? seccomp_run_filters+0x151/0x540 [ 1003.569273] ? __put_cred+0x1a1/0x210 [ 1003.569275] ? SyS_faccessat+0x52a/0x680 [ 1003.569278] ? do_syscall_64+0x1d5/0x640 [ 1003.569281] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1003.569283] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1003.569286] ? trace_hardirqs_on+0x10/0x10 [ 1003.569288] ? debug_check_no_obj_freed+0x2c0/0x674 [ 1003.569291] ? cache_alloc_refill+0x2fa/0x350 [ 1003.569293] ? lock_downgrade+0x740/0x740 [ 1003.569296] ? do_raw_spin_unlock+0x164/0x220 [ 1003.569298] ? _raw_spin_unlock+0x29/0x40 [ 1003.569301] ? cache_alloc_refill+0x2fa/0x350 [ 1003.569303] ? kmem_cache_alloc+0x2c8/0x3c0 [ 1003.569306] kmem_cache_alloc+0x111/0x3c0 [ 1003.569308] getname_flags+0xc8/0x550 [ 1003.569310] SyS_mkdirat+0x83/0x270 [ 1003.569313] ? SyS_mknod+0x30/0x30 [ 1003.569315] ? do_syscall_64+0x4c/0x640 [ 1003.569317] ? SyS_mkdirat+0x270/0x270 [ 1003.569320] do_syscall_64+0x1d5/0x640 [ 1003.569323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1003.569325] RIP: 0033:0x7fea16853687 [ 1003.569328] RSP: 002b:00007ffccab2e638 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1003.569333] RAX: ffffffffffffffda RBX: 00007ffccab31550 RCX: 00007fea16853687 [ 1003.569337] RDX: 00007fea172c4a00 RSI: 00000000000001ed RDI: 000055825575c8a0 [ 1003.569340] RBP: 00007ffccab2e670 R08: 0000000000000000 R09: 0000000000000000 [ 1003.569344] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1003.569347] R13: 0000000000000000 R14: 00007ffccab31550 R15: 00007ffccab2eb60 [ 1003.569349] Code: 00 48 c7 c7 a0 69 8d 87 4c 89 3d 1c 8a 94 0a 41 bd f4 ff ff ff e8 42 8c ee ff 48 c7 05 06 8a 94 0a 00 00 00 00 e9 c6 ed ff ff 90 <65> 48 8b 04 25 80 df 01 00 48 85 c0 74 1a 65 8b 15 bb 9f aa 7e [ 1003.569470] Kernel panic - not syncing: hung_task: blocked tasks [ 1003.874049] CPU: 1 PID: 1530 Comm: khungtaskd Not tainted 4.14.212-syzkaller #0 [ 1003.881586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.890959] Call Trace: [ 1003.893545] dump_stack+0x1b2/0x283 [ 1003.897167] panic+0x1f9/0x42d [ 1003.900379] ? add_taint.cold+0x16/0x16 [ 1003.904353] ? printk_safe_flush+0xa9/0x110 [ 1003.908664] watchdog+0x5ca/0xb40 [ 1003.912101] ? hungtask_pm_notify+0x50/0x50 [ 1003.916410] kthread+0x30d/0x420 [ 1003.919765] ? kthread_create_on_node+0xd0/0xd0 [ 1003.924465] ret_from_fork+0x24/0x30 [ 1003.928905] Kernel Offset: disabled [ 1003.932526] Rebooting in 86400 seconds..