[ 35.793488][ T26] audit: type=1800 audit(1554539872.949:27): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.820962][ T26] audit: type=1800 audit(1554539872.959:28): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.739123][ T26] audit: type=1800 audit(1554539873.949:29): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.758611][ T26] audit: type=1800 audit(1554539873.949:30): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 462.041741][ T1041] INFO: task syz-executor248:7557 blocked for more than 143 seconds. [ 462.050171][ T1041] Not tainted 5.1.0-rc3+ #54 [ 462.055543][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.064438][ T1041] syz-executor248 D28216 7557 7555 0x80000000 [ 462.070803][ T1041] Call Trace: [ 462.074349][ T1041] __schedule+0x817/0x1cc0 [ 462.078775][ T1041] ? __sched_text_start+0x8/0x8 [ 462.083741][ T1041] ? __lock_acquire+0x242a/0x3fb0 [ 462.088779][ T1041] schedule+0x92/0x180 [ 462.092924][ T1041] schedule_timeout+0x8ca/0xfd0 [ 462.097774][ T1041] ? wait_for_completion+0x294/0x440 [ 462.103224][ T1041] ? find_held_lock+0x35/0x130 [ 462.108003][ T1041] ? usleep_range+0x170/0x170 [ 462.112850][ T1041] ? kasan_check_write+0x14/0x20 [ 462.117802][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 462.123044][ T1041] ? wait_for_completion+0x294/0x440 [ 462.128333][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 462.133665][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 462.139016][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 462.144221][ T1041] ? kasan_check_read+0x11/0x20 [ 462.149260][ T1041] wait_for_completion+0x29c/0x440 [ 462.154435][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 462.159730][ T1041] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 462.166352][ T1041] ? wake_up_q+0xf0/0xf0 [ 462.170632][ T1041] ? percpu_ref_kill_and_confirm+0x1b7/0x3b0 [ 462.176886][ T1041] exit_aio+0x321/0x3a0 [ 462.181055][ T1041] ? aio_poll_wake+0x11e0/0x11e0 [ 462.186119][ T1041] ? mutex_unlock+0xd/0x10 [ 462.190613][ T1041] mmput+0xcf/0x4c0 [ 462.194551][ T1041] do_exit+0x816/0x2fa0 [ 462.198769][ T1041] ? lock_downgrade+0x880/0x880 [ 462.203751][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.210061][ T1041] ? kasan_check_read+0x11/0x20 [ 462.215003][ T1041] ? mm_update_next_owner+0x640/0x640 [ 462.220473][ T1041] ? __x64_sys_io_submit+0x37d/0x580 [ 462.225849][ T1041] ? __ia32_sys_io_destroy+0x420/0x420 [ 462.231373][ T1041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.236987][ T1041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.242517][ T1041] do_group_exit+0x135/0x370 [ 462.247108][ T1041] __x64_sys_exit_group+0x44/0x50 [ 462.252416][ T1041] do_syscall_64+0x103/0x610 [ 462.257081][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.263073][ T1041] RIP: 0033:0x43ef58 [ 462.266975][ T1041] Code: Bad RIP value. [ 462.271023][ T1041] RSP: 002b:00007ffd235044e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 462.279560][ T1041] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ef58 [ 462.287613][ T1041] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 462.295693][ T1041] RBP: 00000000004be768 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 462.303818][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.311902][ T1041] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 462.319941][ T1041] [ 462.319941][ T1041] Showing all locks held in the system: [ 462.327737][ T1041] 1 lock held by khungtaskd/1041: [ 462.332843][ T1041] #0: 000000003c2ae832 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 462.342276][ T1041] 1 lock held by rsyslogd/7442: [ 462.347121][ T1041] #0: 0000000074dc81cd (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 462.355903][ T1041] 2 locks held by getty/7533: [ 462.360575][ T1041] #0: 00000000317408d8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.369625][ T1041] #1: 00000000deb4bf39 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.379292][ T1041] 2 locks held by getty/7534: [ 462.384103][ T1041] #0: 000000007dc41d17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.393133][ T1041] #1: 00000000173614dd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.402873][ T1041] 2 locks held by getty/7535: [ 462.408026][ T1041] #0: 000000008e63a3a8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.417115][ T1041] #1: 000000005b8be2df (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.426766][ T1041] 2 locks held by getty/7536: [ 462.431427][ T1041] #0: 00000000b116f25d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.440498][ T1041] #1: 00000000de411f6a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.450270][ T1041] 2 locks held by getty/7537: [ 462.454988][ T1041] #0: 00000000693ff2bb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.464018][ T1041] #1: 00000000d1191134 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.473694][ T1041] 2 locks held by getty/7538: [ 462.478362][ T1041] #0: 000000002f5628f7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.487385][ T1041] #1: 00000000132abfb0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.497002][ T1041] 2 locks held by getty/7539: [ 462.501718][ T1041] #0: 000000003d7b1ffd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 462.510675][ T1041] #1: 00000000fb2b78c3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 462.520340][ T1041] [ 462.522694][ T1041] ============================================= [ 462.522694][ T1041] [ 462.531321][ T1041] NMI backtrace for cpu 1 [ 462.535772][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc3+ #54 [ 462.543305][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.553494][ T1041] Call Trace: [ 462.556885][ T1041] dump_stack+0x172/0x1f0 [ 462.561221][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 462.566464][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 462.572082][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 462.578050][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 462.583929][ T1041] watchdog+0x9b7/0xec0 [ 462.588137][ T1041] kthread+0x357/0x430 [ 462.592262][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 462.597852][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 462.604096][ T1041] ret_from_fork+0x3a/0x50 [ 462.608640][ T1041] Sending NMI from CPU 1 to CPUs 0: [ 462.614119][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10 [ 462.614967][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 462.629209][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc3+ #54 [ 462.636971][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.647034][ T1041] Call Trace: [ 462.650328][ T1041] dump_stack+0x172/0x1f0 [ 462.654640][ T1041] panic+0x2cb/0x65c [ 462.658517][ T1041] ? __warn_printk+0xf3/0xf3 [ 462.663145][ T1041] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 462.668920][ T1041] ? printk_safe_flush+0xf2/0x140 [ 462.673941][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.680194][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 462.685872][ T1041] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 462.692028][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 462.698184][ T1041] watchdog+0x9c8/0xec0 [ 462.702387][ T1041] kthread+0x357/0x430 [ 462.706446][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 462.711985][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 462.718666][ T1041] ret_from_fork+0x3a/0x50 [ 462.724345][ T1041] Kernel Offset: disabled [ 462.728792][ T1041] Rebooting in 86400 seconds..