[ 44.308351][ T6541] sshd (6541) used greatest stack depth: 23256 bytes left [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 477.767770][ T6857] block nbd0: shutting down sockets [ 508.150818][ T2457] block nbd0: Possible stuck request 00000000c20742d7: control (read@0,4096B). Runtime 30 seconds [ 538.230759][ T2457] block nbd0: Possible stuck request 00000000c20742d7: control (read@0,4096B). Runtime 60 seconds [ 568.310796][ T2457] block nbd0: Possible stuck request 00000000c20742d7: control (read@0,4096B). Runtime 90 seconds [ 598.390718][ T2457] block nbd0: Possible stuck request 00000000c20742d7: control (read@0,4096B). Runtime 120 seconds [ 628.470774][ T2457] block nbd0: Possible stuck request 00000000c20742d7: control (read@0,4096B). Runtime 150 seconds [ 636.790821][ T1173] INFO: task syz-executor147:6866 can't die for more than 143 seconds. [ 636.799158][ T1173] task:syz-executor147 state:D stack:28224 pid: 6866 ppid: 6855 flags:0x00000004 [ 636.809498][ T1173] Call Trace: [ 636.813475][ T1173] __schedule+0xea9/0x2230 [ 636.817899][ T1173] ? io_schedule_timeout+0x140/0x140 [ 636.824191][ T1173] ? mark_held_locks+0x9f/0xe0 [ 636.829016][ T1173] ? wait_on_page_bit_common+0x52c/0xca0 [ 636.835537][ T1173] schedule+0xd0/0x2a0 [ 636.839605][ T1173] io_schedule+0xb5/0x120 [ 636.844717][ T1173] wait_on_page_bit_common+0x52c/0xca0 [ 636.850306][ T1173] ? replace_page_cache_page+0x1620/0x1620 [ 636.856938][ T1173] ? filemap_fdatawait_keep_errors+0xe0/0xe0 [ 636.863590][ T1173] ? pagecache_get_page+0x22b/0xf70 [ 636.868794][ T1173] do_read_cache_page+0x257/0x1390 [ 636.874893][ T1173] read_part_sector+0xf6/0x5af [ 636.879663][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 636.886355][ T1173] adfspart_check_ICS+0x9d/0xc90 [ 636.891918][ T1173] ? pointer+0x970/0x970 [ 636.896213][ T1173] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 636.902584][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 636.907892][ T1173] ? snprintf+0xbb/0xf0 [ 636.913453][ T1173] ? vsprintf+0x30/0x30 [ 636.917623][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 636.923723][ T1173] blk_add_partitions+0x445/0xe00 [ 636.928855][ T1173] bdev_disk_changed+0x208/0x390 [ 636.934685][ T1173] __blkdev_get+0xee4/0x1870 [ 636.939289][ T1173] ? lock_downgrade+0x830/0x830 [ 636.944965][ T1173] ? freeze_bdev+0x250/0x250 [ 636.949618][ T1173] ? devcgroup_check_permission+0x1a8/0x420 [ 636.956366][ T1173] blkdev_get+0xd1/0x240 [ 636.961067][ T1173] blkdev_open+0x21d/0x2b0 [ 636.965560][ T1173] do_dentry_open+0x4b9/0x11b0 [ 636.970316][ T1173] ? blkdev_get_by_dev+0x70/0x70 [ 636.975638][ T1173] path_openat+0x1b9a/0x2730 [ 636.980252][ T1173] ? path_lookupat+0x830/0x830 [ 636.985177][ T1173] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 636.991234][ T1173] ? lock_is_held_type+0xbb/0xf0 [ 636.996178][ T1173] do_filp_open+0x17e/0x3c0 [ 637.000829][ T1173] ? may_open_dev+0xf0/0xf0 [ 637.005347][ T1173] ? do_raw_spin_lock+0x120/0x2b0 [ 637.010360][ T1173] ? rwlock_bug.part.0+0x90/0x90 [ 637.015379][ T1173] ? _raw_spin_unlock+0x24/0x40 [ 637.020276][ T1173] ? __alloc_fd+0x28d/0x600 [ 637.024943][ T1173] do_sys_openat2+0x16d/0x420 [ 637.029653][ T1173] ? build_open_flags+0x650/0x650 [ 637.034880][ T1173] __x64_sys_open+0x119/0x1c0 [ 637.039580][ T1173] ? do_sys_open+0x140/0x140 [ 637.044304][ T1173] ? check_preemption_disabled+0x50/0x130 [ 637.050035][ T1173] ? syscall_enter_from_user_mode+0x20/0x290 [ 637.056101][ T1173] ? lockdep_hardirqs_on+0x53/0x100 [ 637.061474][ T1173] do_syscall_64+0x2d/0x70 [ 637.065910][ T1173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.072562][ T1173] RIP: 0033:0x4057a1 [ 637.076464][ T1173] Code: Bad RIP value. [ 637.080516][ T1173] RSP: 002b:00007f8a98881980 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 637.089004][ T1173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004057a1 [ 637.097071][ T1173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f8a98881990 [ 637.105130][ T1173] RBP: 6666666666666667 R08: 000000000000000f R09: 00007f8a98882700 [ 637.113206][ T1173] R10: 00007f8a988829d0 R11: 0000000000000293 R12: 00000000006dbc2c [ 637.121278][ T1173] R13: 00007ffff1c59b8f R14: 00007f8a988829c0 R15: 20c49ba5e353f7cf [ 637.129282][ T1173] INFO: task syz-executor147:6866 blocked for more than 143 seconds. [ 637.137430][ T1173] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 637.144520][ T1173] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.153269][ T1173] task:syz-executor147 state:D stack:28224 pid: 6866 ppid: 6855 flags:0x00000004 [ 637.162582][ T1173] Call Trace: [ 637.165896][ T1173] __schedule+0xea9/0x2230 [ 637.170325][ T1173] ? io_schedule_timeout+0x140/0x140 [ 637.175712][ T1173] ? mark_held_locks+0x9f/0xe0 [ 637.180503][ T1173] ? wait_on_page_bit_common+0x52c/0xca0 [ 637.186220][ T1173] schedule+0xd0/0x2a0 [ 637.190321][ T1173] io_schedule+0xb5/0x120 [ 637.194727][ T1173] wait_on_page_bit_common+0x52c/0xca0 [ 637.200220][ T1173] ? replace_page_cache_page+0x1620/0x1620 [ 637.206146][ T1173] ? filemap_fdatawait_keep_errors+0xe0/0xe0 [ 637.212214][ T1173] ? pagecache_get_page+0x22b/0xf70 [ 637.217425][ T1173] do_read_cache_page+0x257/0x1390 [ 637.222622][ T1173] read_part_sector+0xf6/0x5af [ 637.227420][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 637.232800][ T1173] adfspart_check_ICS+0x9d/0xc90 [ 637.237752][ T1173] ? pointer+0x970/0x970 [ 637.242065][ T1173] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 637.247620][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 637.252973][ T1173] ? snprintf+0xbb/0xf0 [ 637.257232][ T1173] ? vsprintf+0x30/0x30 [ 637.261482][ T1173] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 637.266814][ T1173] blk_add_partitions+0x445/0xe00 [ 637.271919][ T1173] bdev_disk_changed+0x208/0x390 [ 637.276869][ T1173] __blkdev_get+0xee4/0x1870 [ 637.281523][ T1173] ? lock_downgrade+0x830/0x830 [ 637.286391][ T1173] ? freeze_bdev+0x250/0x250 [ 637.291040][ T1173] ? devcgroup_check_permission+0x1a8/0x420 [ 637.296950][ T1173] blkdev_get+0xd1/0x240 [ 637.301343][ T1173] blkdev_open+0x21d/0x2b0 [ 637.305781][ T1173] do_dentry_open+0x4b9/0x11b0 [ 637.310559][ T1173] ? blkdev_get_by_dev+0x70/0x70 [ 637.315611][ T1173] path_openat+0x1b9a/0x2730 [ 637.320201][ T1173] ? path_lookupat+0x830/0x830 [ 637.325065][ T1173] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 637.331135][ T1173] ? lock_is_held_type+0xbb/0xf0 [ 637.336784][ T1173] do_filp_open+0x17e/0x3c0 [ 637.341351][ T1173] ? may_open_dev+0xf0/0xf0 [ 637.345877][ T1173] ? do_raw_spin_lock+0x120/0x2b0 [ 637.350987][ T1173] ? rwlock_bug.part.0+0x90/0x90 [ 637.355981][ T1173] ? _raw_spin_unlock+0x24/0x40 [ 637.360916][ T1173] ? __alloc_fd+0x28d/0x600 [ 637.365553][ T1173] do_sys_openat2+0x16d/0x420 [ 637.370218][ T1173] ? build_open_flags+0x650/0x650 [ 637.375328][ T1173] __x64_sys_open+0x119/0x1c0 [ 637.380022][ T1173] ? do_sys_open+0x140/0x140 [ 637.384701][ T1173] ? check_preemption_disabled+0x50/0x130 [ 637.390432][ T1173] ? syscall_enter_from_user_mode+0x20/0x290 [ 637.396486][ T1173] ? lockdep_hardirqs_on+0x53/0x100 [ 637.402639][ T1173] do_syscall_64+0x2d/0x70 [ 637.407062][ T1173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.413021][ T1173] RIP: 0033:0x4057a1 [ 637.416919][ T1173] Code: Bad RIP value. [ 637.421028][ T1173] RSP: 002b:00007f8a98881980 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 637.429452][ T1173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004057a1 [ 637.437528][ T1173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f8a98881990 [ 637.445737][ T1173] RBP: 6666666666666667 R08: 000000000000000f R09: 00007f8a98882700 [ 637.453800][ T1173] R10: 00007f8a988829d0 R11: 0000000000000293 R12: 00000000006dbc2c [ 637.461878][ T1173] R13: 00007ffff1c59b8f R14: 00007f8a988829c0 R15: 20c49ba5e353f7cf [ 637.469901][ T1173] [ 637.469901][ T1173] Showing all locks held in the system: [ 637.477785][ T1173] 1 lock held by khungtaskd/1173: [ 637.482890][ T1173] #0: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 637.492862][ T1173] 2 locks held by in:imklog/6545: [ 637.497881][ T1173] #0: ffff8880a12ce130 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 637.507099][ T1173] #1: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: is_bpf_text_address+0x0/0x160 [ 637.517245][ T1173] 1 lock held by syz-executor147/6866: [ 637.522761][ T1173] #0: ffff88808a7cd280 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 [ 637.532408][ T1173] [ 637.534738][ T1173] ============================================= [ 637.534738][ T1173] [ 637.543219][ T1173] NMI backtrace for cpu 1 [ 637.547553][ T1173] CPU: 1 PID: 1173 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 637.557100][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.567161][ T1173] Call Trace: [ 637.570446][ T1173] dump_stack+0x198/0x1fd [ 637.574778][ T1173] nmi_cpu_backtrace.cold+0x44/0xd7 [ 637.580040][ T1173] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 637.585663][ T1173] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 637.591696][ T1173] watchdog+0xd89/0xf30 [ 637.595841][ T1173] ? trace_sched_process_hang+0x2e0/0x2e0 [ 637.601593][ T1173] kthread+0x3b5/0x4a0 [ 637.605664][ T1173] ? __kthread_bind_mask+0xc0/0xc0 [ 637.610817][ T1173] ret_from_fork+0x1f/0x30 [ 637.615318][ T1173] Sending NMI from CPU 1 to CPUs 0: [ 637.620923][ C0] NMI backtrace for cpu 0 [ 637.620931][ C0] CPU: 0 PID: 3899 Comm: systemd-journal Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 637.620938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.620943][ C0] RIP: 0010:write_comp_data+0x2f/0x80 [ 637.620955][ C0] Code: 05 36 20 8d 7e 65 48 8b 34 25 c0 fe 01 00 a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 86 4c 14 00 00 85 c0 74 4f 8b 86 28 14 00 00 <83> f8 03 75 44 48 8b 86 30 14 00 00 8b b6 2c 14 00 00 4c 8b 00 48 [ 637.620959][ C0] RSP: 0018:ffffc90005317d90 EFLAGS: 00000246 [ 637.620969][ C0] RAX: 0000000000000000 RBX: ffff888096cd5000 RCX: ffffffff81755db3 [ 637.620975][ C0] RDX: 0000000080000000 RSI: ffff888093f50340 RDI: 0000000000000005 [ 637.620980][ C0] RBP: 0000000080000000 R08: 0000000000000001 R09: 0000000000000001 [ 637.620986][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 637.620992][ C0] R13: 000000007fff0000 R14: 000000007fff0000 R15: ffffc90005317e40 [ 637.620998][ C0] FS: 00007f202b1628c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 637.621003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.621009][ C0] CR2: 00007f202850e000 CR3: 0000000093904000 CR4: 00000000001506f0 [ 637.621015][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.621020][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.621024][ C0] Call Trace: [ 637.621028][ C0] __seccomp_filter+0x173/0x1520 [ 637.621032][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 637.621037][ C0] ? security_file_permission+0x248/0x560 [ 637.621041][ C0] ? lock_is_held_type+0xbb/0xf0 [ 637.621046][ C0] __secure_computing+0xfc/0x360 [ 637.621050][ C0] syscall_enter_from_user_mode+0xb7/0x290 [ 637.621054][ C0] do_syscall_64+0xf/0x70 [ 637.621059][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.621063][ C0] RIP: 0033:0x7f202a3fbf17 [ 637.621074][ C0] Code: ff ff ff 48 8b 4d a0 0f b7 51 fe 48 8b 4d a8 66 89 54 08 fe e9 1a ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 637.621078][ C0] RSP: 002b:00007ffcc4f1be38 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 637.621088][ C0] RAX: ffffffffffffffda RBX: 000055570fd191e0 RCX: 00007f202a3fbf17 [ 637.621094][ C0] RDX: 00007ffcc4f1bef0 RSI: 0000000000000000 RDI: 000055570fd191e0 [ 637.621099][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.621105][ C0] R10: 0000000000000069 R11: 0000000000000206 R12: 00007ffcc4f1bef0 [ 637.621111][ C0] R13: 0000000000000f3b R14: 00007ffcc4f1ece0 R15: 00007ffcc4f1c2f0 [ 637.621538][ T1173] Kernel panic - not syncing: hung_task: blocked tasks [ 637.880084][ T1173] CPU: 1 PID: 1173 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 637.889537][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.899590][ T1173] Call Trace: [ 637.902870][ T1173] dump_stack+0x198/0x1fd [ 637.907239][ T1173] panic+0x347/0x7c0 [ 637.911150][ T1173] ? __warn_printk+0xf3/0xf3 [ 637.915726][ T1173] ? cpumask_next+0x3c/0x40 [ 637.921047][ T1173] ? printk_safe_flush+0xd6/0x120 [ 637.926073][ T1173] ? watchdog.cold+0x22d/0x24b [ 637.930818][ T1173] ? watchdog+0xc59/0xf30 [ 637.935138][ T1173] watchdog.cold+0x23e/0x24b [ 637.939713][ T1173] ? trace_sched_process_hang+0x2e0/0x2e0 [ 637.945422][ T1173] kthread+0x3b5/0x4a0 [ 637.949472][ T1173] ? __kthread_bind_mask+0xc0/0xc0 [ 637.954582][ T1173] ret_from_fork+0x1f/0x30 [ 637.961001][ T1173] Kernel Offset: disabled [ 637.965342][ T1173] Rebooting in 86400 seconds..