[ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 717.589169] INFO: task syz-executor501:8121 blocked for more than 140 seconds. [ 717.596678] Not tainted 4.19.205-syzkaller #0 [ 717.602028] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.610071] syz-executor501 D28184 8121 8110 0x00000004 [ 717.615718] Call Trace: [ 717.618298] __schedule+0x887/0x2040 [ 717.622113] ? io_schedule_timeout+0x140/0x140 [ 717.626708] ? _raw_spin_unlock+0x29/0x40 [ 717.630926] schedule+0x8d/0x1b0 [ 717.634306] fuse_wait_on_page_writeback.isra.0+0x11b/0x170 [ 717.640099] ? fuse_do_ioctl+0x1850/0x1850 [ 717.644339] ? wait_woken+0x250/0x250 [ 717.648257] ? fuse_writepage_locked+0xb63/0x1010 [ 717.653172] ? fuse_writepage_locked+0x1010/0x1010 [ 717.658119] fuse_launder_page+0xb6/0xe0 [ 717.662300] invalidate_inode_pages2_range+0x795/0x1110 [ 717.667799] ? clear_shadow_entry+0x170/0x170 [ 717.672402] ? fuse_file_alloc+0x1d9/0x270 [ 717.676759] ? do_raw_spin_unlock+0x171/0x230 [ 717.681419] ? _raw_spin_unlock+0x29/0x40 [ 717.685590] ? fuse_do_open+0x1c4/0x500 [ 717.689649] fuse_finish_open+0x2e2/0x590 [ 717.693943] fuse_open_common+0x254/0x2c0 [ 717.698082] do_dentry_open+0x4aa/0x1160 [ 717.702258] ? fuse_open_common+0x2c0/0x2c0 [ 717.706675] ? inode_permission.part.0+0x10c/0x450 [ 717.712297] ? chown_common+0x550/0x550 [ 717.716288] ? inode_permission+0x3d/0x140 [ 717.720687] path_openat+0x793/0x2df0 [ 717.724489] ? path_lookupat+0x8d0/0x8d0 [ 717.728931] ? mark_held_locks+0xf0/0xf0 [ 717.733184] do_filp_open+0x18c/0x3f0 [ 717.736991] ? may_open_dev+0xf0/0xf0 [ 717.740903] ? lock_downgrade+0x720/0x720 [ 717.745062] ? lock_acquire+0x170/0x3c0 [ 717.749094] ? __alloc_fd+0x34/0x570 [ 717.752813] ? do_raw_spin_unlock+0x171/0x230 [ 717.757294] ? _raw_spin_unlock+0x29/0x40 [ 717.761522] ? __alloc_fd+0x28d/0x570 [ 717.765329] do_sys_open+0x3b3/0x520 [ 717.769251] ? filp_open+0x70/0x70 [ 717.772792] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 717.778143] ? trace_hardirqs_off_caller+0x6e/0x210 [ 717.783250] ? do_syscall_64+0x21/0x620 [ 717.787232] do_syscall_64+0xf9/0x620 [ 717.791106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 717.796299] RIP: 0033:0x4463f9 [ 717.799559] Code: Bad RIP value. [ 717.802915] RSP: 002b:00007f67944122f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 717.810680] RAX: ffffffffffffffda RBX: 00000000004d34e0 RCX: 00000000004463f9 [ 717.817949] RDX: 00000000004463f9 RSI: 0000000000000000 RDI: 0000000020000280 [ 717.825296] RBP: 00000000004a3164 R08: 0000000000000000 R09: 0000000000000000 [ 717.832640] R10: 0000000000000000 R11: 0000000000000246 R12: 0030656c69662f2e [ 717.840470] R13: 000000000049f158 R14: 00000000004a1160 R15: 00000000004d34e8 [ 717.847772] INFO: task syz-executor501:8126 blocked for more than 140 seconds. [ 717.855213] Not tainted 4.19.205-syzkaller #0 [ 717.860320] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.868378] syz-executor501 D28264 8126 8110 0x00000004 [ 717.874101] Call Trace: [ 717.876697] __schedule+0x887/0x2040 [ 717.880506] ? io_schedule_timeout+0x140/0x140 [ 717.885090] ? mark_held_locks+0xa6/0xf0 [ 717.889217] ? rwsem_down_write_failed+0x3a5/0x760 [ 717.894148] schedule+0x8d/0x1b0 [ 717.897502] rwsem_down_write_failed+0x3aa/0x760 [ 717.902355] ? rwsem_down_read_failed_killable+0x580/0x580 [ 717.907981] ? mark_held_locks+0xf0/0xf0 [ 717.912631] call_rwsem_down_write_failed+0x13/0x20 [ 717.917659] down_write+0x4f/0x90 [ 717.921217] ? fuse_open_common+0x1bc/0x2c0 [ 717.925549] fuse_open_common+0x1bc/0x2c0 [ 717.929752] do_dentry_open+0x4aa/0x1160 [ 717.933818] ? fuse_open_common+0x2c0/0x2c0 [ 717.938127] ? inode_permission.part.0+0x10c/0x450 [ 717.943287] ? chown_common+0x550/0x550 [ 717.947267] ? inode_permission+0x3d/0x140 [ 717.951571] path_openat+0x793/0x2df0 [ 717.955383] ? path_lookupat+0x8d0/0x8d0 [ 717.959525] ? mark_held_locks+0xf0/0xf0 [ 717.963589] do_filp_open+0x18c/0x3f0 [ 717.967376] ? may_open_dev+0xf0/0xf0 [ 717.971816] ? lock_downgrade+0x720/0x720 [ 717.975974] ? lock_acquire+0x170/0x3c0 [ 717.980174] ? __alloc_fd+0x34/0x570 [ 717.983895] ? do_raw_spin_unlock+0x171/0x230 [ 717.988377] ? _raw_spin_unlock+0x29/0x40 [ 717.992674] ? __alloc_fd+0x28d/0x570 [ 717.996481] do_sys_open+0x3b3/0x520 [ 718.000580] ? filp_open+0x70/0x70 [ 718.004129] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 718.009671] ? trace_hardirqs_off_caller+0x6e/0x210 [ 718.014698] ? do_syscall_64+0x21/0x620 [ 718.018664] do_syscall_64+0xf9/0x620 [ 718.022572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.027898] RIP: 0033:0x4463f9 [ 718.031177] Code: Bad RIP value. [ 718.034544] RSP: 002b:00007f67943af2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 718.042349] RAX: ffffffffffffffda RBX: 00000000004d3510 RCX: 00000000004463f9 [ 718.049689] RDX: 00000000004463f9 RSI: 0000000000000000 RDI: 0000000020000280 [ 718.056957] RBP: 00000000004a3164 R08: 0000000000000000 R09: 0000000000000000 [ 718.064301] R10: 0000000000000000 R11: 0000000000000246 R12: 0030656c69662f2e [ 718.071650] R13: 000000000049f158 R14: 00000000004a1160 R15: 00000000004d3518 [ 718.079042] [ 718.079042] Showing all locks held in the system: [ 718.085379] 1 lock held by khungtaskd/1571: [ 718.089777] #0: 00000000f3c5e44d (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 718.098426] 1 lock held by in:imklog/7802: [ 718.103454] #0: 00000000750ba9f4 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 718.111568] 2 locks held by syz-executor501/8121: [ 718.116405] #0: 000000000d1e72dd (sb_writers#11){.+.+}, at: mnt_want_write+0x3a/0xb0 [ 718.124497] #1: 000000003d8e57d9 (&sb->s_type->i_mutex_key#17){+.+.}, at: fuse_open_common+0x1bc/0x2c0 [ 718.134129] 2 locks held by syz-executor501/8126: [ 718.139051] #0: 000000000d1e72dd (sb_writers#11){.+.+}, at: mnt_want_write+0x3a/0xb0 [ 718.147044] #1: 000000003d8e57d9 (&sb->s_type->i_mutex_key#17){+.+.}, at: fuse_open_common+0x1bc/0x2c0 [ 718.156688] [ 718.158308] ============================================= [ 718.158308] [ 718.165409] NMI backtrace for cpu 1 [ 718.169133] CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.205-syzkaller #0 [ 718.176572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.185922] Call Trace: [ 718.188508] dump_stack+0x1fc/0x2ef [ 718.192133] nmi_cpu_backtrace.cold+0x63/0xa2 [ 718.196759] ? lapic_can_unplug_cpu+0x80/0x80 [ 718.201269] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 718.206620] watchdog+0x991/0xe60 [ 718.210078] ? reset_hung_task_detector+0x30/0x30 [ 718.215051] kthread+0x33f/0x460 [ 718.218410] ? kthread_park+0x180/0x180 [ 718.222676] ret_from_fork+0x24/0x30 [ 718.226624] Sending NMI from CPU 1 to CPUs 0: [ 718.231913] NMI backtrace for cpu 0 [ 718.231920] CPU: 0 PID: 10 Comm: rcu_preempt Not tainted 4.19.205-syzkaller #0 [ 718.231927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.231931] RIP: 0010:__lock_acquire+0xbed/0x3ff0 [ 718.231943] Code: db 74 55 48 83 eb 08 74 4f 48 bd 00 00 00 00 00 fc ff df eb 06 48 83 eb 08 74 3d 48 8d 7b 18 48 89 f8 48 c1 e8 03 80 3c 28 00 <0f> 85 8c 1e 00 00 4c 3b 63 18 0f 84 f1 fc ff ff 48 8d 7b 08 48 89 [ 718.231947] RSP: 0018:ffff8880b5a679e0 EFLAGS: 00000046 [ 718.231955] RAX: 1ffffffff18e27a7 RBX: ffffffff8c713d20 RCX: 0000000000005d11 [ 718.231960] RDX: 1ffffffff19a89b9 RSI: 00000000f59a8c27 RDI: ffffffff8c713d38 [ 718.231965] RBP: dffffc0000000000 R08: ffffffff8cd44dc8 R09: 0000000000000000 [ 718.231971] R10: ffff8880b5a4eb08 R11: 0000000000000000 R12: 577f4c272808619f [ 718.231976] R13: ffff8880b5a4e280 R14: ffff8880b5a4eb20 R15: 0000000000000001 [ 718.231994] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 718.231999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.232004] CR2: 00007f3ddee66010 CR3: 00000000a15a1000 CR4: 00000000001406f0 [ 718.232009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 718.232014] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 718.232017] Call Trace: [ 718.232021] ? retint_kernel+0x2d/0x2d [ 718.232024] ? mark_held_locks+0xf0/0xf0 [ 718.232028] ? _raw_spin_unlock_irq+0x50/0x80 [ 718.232032] ? _raw_spin_unlock_irq+0x5a/0x80 [ 718.232035] ? finish_task_switch+0x146/0x760 [ 718.232039] ? finish_task_switch+0x118/0x760 [ 718.232043] ? switch_mm_irqs_off+0x2e5/0x1340 [ 718.232047] ? __schedule+0x88f/0x2040 [ 718.232050] lock_acquire+0x170/0x3c0 [ 718.232054] ? del_timer_sync+0x75/0x270 [ 718.232057] del_timer_sync+0xab/0x270 [ 718.232061] ? del_timer_sync+0x75/0x270 [ 718.232065] schedule_timeout+0x4d7/0xfe0 [ 718.232069] ? prepare_to_swait_event+0x5b/0x540 [ 718.232072] ? usleep_range+0x170/0x170 [ 718.232076] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 718.232080] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 718.232084] ? collect_expired_timers+0x2a0/0x2a0 [ 718.232088] ? swake_up_all+0x340/0x340 [ 718.232091] rcu_gp_kthread+0xdad/0x21c0 [ 718.232095] ? lock_acquire+0x170/0x3c0 [ 718.232099] ? __rcu_read_unlock+0x160/0x160 [ 718.232103] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 718.232107] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 718.232111] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 718.232114] ? __kthread_parkme+0x133/0x1e0 [ 718.232118] ? __rcu_read_unlock+0x160/0x160 [ 718.232121] kthread+0x33f/0x460 [ 718.232125] ? kthread_park+0x180/0x180 [ 718.232128] ret_from_fork+0x24/0x30 [ 718.232879] Kernel panic - not syncing: hung_task: blocked tasks [ 718.491001] CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.205-syzkaller #0 [ 718.498494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.507831] Call Trace: [ 718.510412] dump_stack+0x1fc/0x2ef [ 718.514024] panic+0x26a/0x50e [ 718.517220] ? __warn_printk+0xf3/0xf3 [ 718.521131] ? lapic_can_unplug_cpu+0x80/0x80 [ 718.525645] ? ___preempt_schedule+0x16/0x18 [ 718.530041] ? watchdog+0x991/0xe60 [ 718.533658] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 718.539115] watchdog+0x9a2/0xe60 [ 718.542561] ? reset_hung_task_detector+0x30/0x30 [ 718.547407] kthread+0x33f/0x460 [ 718.550763] ? kthread_park+0x180/0x180 [ 718.554734] ret_from_fork+0x24/0x30 [ 718.559883] Kernel Offset: disabled [ 718.563513] Rebooting in 86400 seconds..