[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.986568][ T26] audit: type=1800 audit(1560020452.439:25): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 76.022148][ T26] audit: type=1800 audit(1560020452.439:26): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 76.087046][ T26] audit: type=1800 audit(1560020452.439:27): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 562.812096][ T1044] INFO: task syz-executor787:8891 blocked for more than 143 seconds. [ 562.820372][ T1044] Not tainted 5.2.0-rc3+ #23 [ 562.825923][ T1044] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.834847][ T1044] syz-executor787 D28128 8891 8879 0x00000004 [ 562.841229][ T1044] Call Trace: [ 562.844790][ T1044] __schedule+0x7cb/0x1560 [ 562.849238][ T1044] ? __sched_text_start+0x8/0x8 [ 562.854311][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 562.859549][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 562.865062][ T1044] ? lockdep_hardirqs_on+0x418/0x5d0 [ 562.870385][ T1044] schedule+0xa8/0x260 [ 562.874716][ T1044] rwsem_down_read_failed+0x213/0x460 [ 562.880111][ T1044] ? rwsem_down_write_failed+0xc60/0xc60 [ 562.885957][ T1044] ? __do_page_fault+0x9e9/0xda0 [ 562.890922][ T1044] down_read+0xa5/0x1e0 [ 562.895294][ T1044] __do_page_fault+0x9e9/0xda0 [ 562.900100][ T1044] ? trace_hardirqs_off_caller+0x65/0x220 [ 562.905997][ T1044] do_page_fault+0x71/0x57d [ 562.910519][ T1044] ? page_fault+0x8/0x30 [ 562.914950][ T1044] page_fault+0x1e/0x30 [ 562.919121][ T1044] RIP: 0033:0x4ab7ed [ 562.923195][ T1044] Code: Bad RIP value. [ 562.927272][ T1044] RSP: 002b:00007ffd81a62d90 EFLAGS: 00010202 [ 562.933540][ T1044] RAX: 00000000004ab910 RBX: 0000000000000001 RCX: 00000000006e0330 [ 562.941527][ T1044] RDX: 0000000000407670 RSI: 0000000000000000 RDI: 00000000004ccc10 [ 562.949694][ T1044] RBP: 00007ffd81a62db0 R08: 000000037ffffa00 R09: 000000037ffffa00 [ 562.957860][ T1044] R10: 00007ffd81a62e20 R11: 0000000000000000 R12: 0000000000000001 [ 562.966020][ T1044] R13: 00000000006e0320 R14: 000000000000002d R15: 20c49ba5e353f7cf [ 562.974192][ T1044] INFO: task syz-executor787:8893 blocked for more than 143 seconds. [ 562.982412][ T1044] Not tainted 5.2.0-rc3+ #23 [ 562.987529][ T1044] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.996402][ T1044] syz-executor787 D29072 8893 8879 0x80004004 [ 563.002946][ T1044] Call Trace: [ 563.006290][ T1044] __schedule+0x7cb/0x1560 [ 563.010728][ T1044] ? __sched_text_start+0x8/0x8 [ 563.015780][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.020996][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.026369][ T1044] ? lockdep_hardirqs_on+0x418/0x5d0 [ 563.031675][ T1044] schedule+0xa8/0x260 [ 563.035957][ T1044] rwsem_down_read_failed+0x213/0x460 [ 563.041360][ T1044] ? rwsem_down_write_failed+0xc60/0xc60 [ 563.047187][ T1044] ? do_exit+0x443/0x2fa0 [ 563.051546][ T1044] down_read+0xa5/0x1e0 [ 563.055902][ T1044] do_exit+0x443/0x2fa0 [ 563.060080][ T1044] ? get_signal+0x387/0x24b0 [ 563.064845][ T1044] ? find_held_lock+0x35/0x130 [ 563.069631][ T1044] ? mm_update_next_owner+0x640/0x640 [ 563.075249][ T1044] ? kasan_check_write+0x14/0x20 [ 563.080208][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.085579][ T1044] ? get_signal+0x387/0x24b0 [ 563.090184][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.095575][ T1044] do_group_exit+0x135/0x370 [ 563.100274][ T1044] get_signal+0x471/0x24b0 [ 563.104893][ T1044] ? exit_robust_list+0x2c0/0x2c0 [ 563.109958][ T1044] ? vm_mmap_pgoff+0x107/0x230 [ 563.114935][ T1044] do_signal+0x87/0x1900 [ 563.119203][ T1044] ? vma_is_stack_for_current+0xd0/0xd0 [ 563.124944][ T1044] ? ksys_dup3+0x3e0/0x3e0 [ 563.129384][ T1044] ? setup_sigcontext+0x7d0/0x7d0 [ 563.134630][ T1044] ? fput_many+0x12c/0x1a0 [ 563.139116][ T1044] ? exit_to_usermode_loop+0x43/0x2c0 [ 563.144675][ T1044] ? do_syscall_64+0x58e/0x680 [ 563.149459][ T1044] ? exit_to_usermode_loop+0x43/0x2c0 [ 563.155052][ T1044] ? lockdep_hardirqs_on+0x418/0x5d0 [ 563.160368][ T1044] ? trace_hardirqs_on+0x67/0x220 [ 563.165585][ T1044] exit_to_usermode_loop+0x244/0x2c0 [ 563.170893][ T1044] do_syscall_64+0x58e/0x680 [ 563.175695][ T1044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.181604][ T1044] RIP: 0033:0x446949 [ 563.185705][ T1044] Code: 20 65 72 72 6f 72 3a 20 69 6e 76 61 6c 69 64 20 64 65 62 75 67 20 6f 70 74 69 6f 6e 20 27 25 73 27 2c 20 76 61 6c 75 65 20 27 <25> 73 27 20 2d 20 69 67 6e 6f 72 65 64 0a 00 61 6c 74 65 72 6e 61 [ 563.205599][ T1044] RSP: 002b:00007f32a9941db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.214200][ T1044] RAX: fffffffffffffe00 RBX: 00000000006dbc38 RCX: 0000000000446949 [ 563.222360][ T1044] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000006dbc38 [ 563.230349][ T1044] RBP: 00000000006dbc30 R08: 0000000000000000 R09: 0000000000000000 [ 563.238505][ T1044] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc3c [ 563.246679][ T1044] R13: 00007ffd81a62d8f R14: 00007f32a99429c0 R15: 20c49ba5e353f7cf [ 563.254865][ T1044] [ 563.254865][ T1044] Showing all locks held in the system: [ 563.262871][ T1044] 1 lock held by khungtaskd/1044: [ 563.267915][ T1044] #0: 0000000093194ae5 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 563.277636][ T1044] 3 locks held by rs:main Q:Reg/8762: [ 563.283258][ T1044] 1 lock held by rsyslogd/8764: [ 563.288132][ T1044] #0: 00000000b4492e19 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 563.296967][ T1044] 2 locks held by getty/8854: [ 563.301656][ T1044] #0: 000000006af6ee09 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.310976][ T1044] #1: 000000000eaaff12 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.321295][ T1044] 2 locks held by getty/8855: [ 563.326165][ T1044] #0: 00000000f46613b3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.335312][ T1044] #1: 0000000092ae824a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.345054][ T1044] 2 locks held by getty/8856: [ 563.349737][ T1044] #0: 00000000b5678198 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.358948][ T1044] #1: 00000000754b6a83 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.368779][ T1044] 2 locks held by getty/8857: [ 563.373714][ T1044] #0: 00000000446fe5a1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.382904][ T1044] #1: 0000000087ca29de (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.392731][ T1044] 2 locks held by getty/8858: [ 563.397428][ T1044] #0: 00000000689f7783 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.406642][ T1044] #1: 00000000d4bd93de (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.416430][ T1044] 2 locks held by getty/8859: [ 563.421112][ T1044] #0: 0000000033c8b418 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.430306][ T1044] #1: 00000000d30d1559 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.440182][ T1044] 2 locks held by getty/8860: [ 563.445056][ T1044] #0: 00000000fa61eaaf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 563.455877][ T1044] #1: 00000000072e2abe (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 563.465798][ T1044] 1 lock held by syz-executor787/8891: [ 563.471268][ T1044] #0: 00000000a0227943 (&mm->mmap_sem#2){++++}, at: __do_page_fault+0x9e9/0xda0 [ 563.480732][ T1044] 1 lock held by syz-executor787/8892: [ 563.486379][ T1044] 1 lock held by syz-executor787/8893: [ 563.491999][ T1044] #0: 00000000a0227943 (&mm->mmap_sem#2){++++}, at: do_exit+0x443/0x2fa0 [ 563.500562][ T1044] [ 563.503147][ T1044] ============================================= [ 563.503147][ T1044] [ 563.511578][ T1044] NMI backtrace for cpu 0 [ 563.515999][ T1044] CPU: 0 PID: 1044 Comm: khungtaskd Not tainted 5.2.0-rc3+ #23 [ 563.523559][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.533620][ T1044] Call Trace: [ 563.536926][ T1044] dump_stack+0x172/0x1f0 [ 563.541259][ T1044] nmi_cpu_backtrace.cold+0x63/0xa4 [ 563.546485][ T1044] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 563.552133][ T1044] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 563.558151][ T1044] arch_trigger_cpumask_backtrace+0x14/0x20 [ 563.564153][ T1044] watchdog+0x9b7/0xec0 [ 563.568325][ T1044] kthread+0x354/0x420 [ 563.572401][ T1044] ? reset_hung_task_detector+0x30/0x30 [ 563.577946][ T1044] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 563.584190][ T1044] ret_from_fork+0x24/0x30 [ 563.588690][ T1044] Sending NMI from CPU 0 to CPUs 1: [ 563.594643][ C1] NMI backtrace for cpu 1 [ 563.594650][ C1] CPU: 1 PID: 8892 Comm: syz-executor787 Not tainted 5.2.0-rc3+ #23 [ 563.594657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.594661][ C1] RIP: 0010:mark_lock+0xab/0x1370 [ 563.594672][ C1] Code: 00 00 00 48 81 eb b0 00 00 00 48 81 c3 80 da 2e 8a 48 8d 7b 50 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 92 0e 00 00 4c 85 6b 50 0f 84 c1 00 00 00 41 bd 01 00 00 00 [ 563.594677][ C1] RSP: 0018:ffff8880a9a1f678 EFLAGS: 00000046 [ 563.594685][ C1] RAX: dffffc0000000000 RBX: ffffffff8a327680 RCX: 1ffff11014a511b9 [ 563.594691][ C1] RDX: 1ffffffff1464eda RSI: ffff8880a5288da8 RDI: ffffffff8a3276d0 [ 563.594696][ C1] RBP: ffff8880a9a1f6c0 R08: 0000000000000541 R09: ffff8880a5288dc8 [ 563.594701][ C1] R10: ffff8880a5288da8 R11: ffff8880a5288500 R12: ffff8880a5288da8 [ 563.594707][ C1] R13: 0000000000000100 R14: 0000000000000008 R15: ffff8880a5288500 [ 563.594713][ C1] FS: 00007f32a9963700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 563.594717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.594723][ C1] CR2: ffffffffff600400 CR3: 0000000099efb000 CR4: 00000000001406e0 [ 563.594726][ C1] Call Trace: [ 563.594730][ C1] ? find_held_lock+0x35/0x130 [ 563.594733][ C1] __lock_acquire+0x54f/0x5490 [ 563.594737][ C1] ? mark_held_locks+0xa4/0xf0 [ 563.594741][ C1] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.594745][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 563.594749][ C1] ? mark_held_locks+0xf0/0xf0 [ 563.594753][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 563.594756][ C1] ? retint_kernel+0x2b/0x2b [ 563.594760][ C1] lock_acquire+0x16f/0x3f0 [ 563.594763][ C1] ? perf_mmap+0x746/0x17f0 [ 563.594767][ C1] ? perf_mmap+0x746/0x17f0 [ 563.594770][ C1] __mutex_lock+0xf7/0x1310 [ 563.594774][ C1] ? perf_mmap+0x746/0x17f0 [ 563.594778][ C1] ? perf_mmap+0x746/0x17f0 [ 563.594781][ C1] ? lock_downgrade+0x880/0x880 [ 563.594785][ C1] ? mutex_trylock+0x1e0/0x1e0 [ 563.594789][ C1] ? check_memory_region+0x1f/0x190 [ 563.594793][ C1] ? kasan_check_write+0x14/0x20 [ 563.594797][ C1] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 563.594801][ C1] ? wait_for_completion+0x440/0x440 [ 563.594805][ C1] mutex_lock_nested+0x16/0x20 [ 563.594808][ C1] ? mutex_lock_nested+0x16/0x20 [ 563.594812][ C1] perf_mmap+0x746/0x17f0 [ 563.594816][ C1] ? perf_release+0x50/0x50 [ 563.594819][ C1] ? memset+0x32/0x40 [ 563.594822][ C1] mmap_region+0xc35/0x1760 [ 563.594826][ C1] ? __x64_sys_brk+0x760/0x760 [ 563.594831][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 563.594835][ C1] ? get_unmapped_area+0x293/0x3b0 [ 563.594838][ C1] do_mmap+0x8e2/0x1080 [ 563.594842][ C1] vm_mmap_pgoff+0x1c5/0x230 [ 563.594846][ C1] ? vma_is_stack_for_current+0xd0/0xd0 [ 563.594849][ C1] ? ksys_dup3+0x3e0/0x3e0 [ 563.594853][ C1] ksys_mmap_pgoff+0x4aa/0x630 [ 563.594857][ C1] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 563.594861][ C1] ? rcu_read_lock_sched_held+0x110/0x130 [ 563.594866][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 563.594870][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 563.594873][ C1] ? do_syscall_64+0x26/0x680 [ 563.594878][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.594881][ C1] __x64_sys_mmap+0xe9/0x1b0 [ 563.594885][ C1] do_syscall_64+0xfd/0x680 [ 563.594889][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.594892][ C1] RIP: 0033:0x446949 [ 563.594904][ C1] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.594908][ C1] RSP: 002b:00007f32a9962da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 563.594917][ C1] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446949 [ 563.594922][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 563.594928][ C1] RBP: 00000000006dbc20 R08: 0000000000000003 R09: 0000000000000000 [ 563.594933][ C1] R10: 0002000000001011 R11: 0000000000000246 R12: 00000000006dbc2c [ 563.594938][ C1] R13: 00007ffd81a62d8f R14: 00007f32a99639c0 R15: 20c49ba5e353f7cf [ 563.596296][ T1044] Kernel panic - not syncing: hung_task: blocked tasks [ 564.004421][ T1044] CPU: 0 PID: 1044 Comm: khungtaskd Not tainted 5.2.0-rc3+ #23 [ 564.011968][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.022035][ T1044] Call Trace: [ 564.025347][ T1044] dump_stack+0x172/0x1f0 [ 564.029720][ T1044] panic+0x2cb/0x744 [ 564.033633][ T1044] ? __warn_printk+0xf3/0xf3 [ 564.038232][ T1044] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 564.043876][ T1044] ? ___preempt_schedule+0x16/0x18 [ 564.049002][ T1044] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 564.055165][ T1044] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 564.061323][ T1044] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 564.067485][ T1044] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 564.073651][ T1044] watchdog+0x9c8/0xec0 [ 564.077819][ T1044] kthread+0x354/0x420 [ 564.081887][ T1044] ? reset_hung_task_detector+0x30/0x30 [ 564.087462][ T1044] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 564.093708][ T1044] ret_from_fork+0x24/0x30 [ 564.099655][ T1044] Kernel Offset: disabled [ 564.103987][ T1044] Rebooting in 86400 seconds..