[ 54.154157][ T26] audit: type=1800 audit(1572147421.308:25): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.179639][ T26] audit: type=1800 audit(1572147421.308:26): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.215887][ T26] audit: type=1800 audit(1572147421.318:27): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 54.889478][ T8618] sshd (8618) used greatest stack depth: 22888 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts. syzkaller login: [ 213.769682][ T1079] INFO: task khugepaged:1086 blocked for more than 143 seconds. [ 213.777547][ T1079] Not tainted 5.4.0-rc4-next-20191025 #0 [ 213.784724][ T1079] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.793455][ T1079] khugepaged D27840 1086 2 0x80004000 [ 213.799822][ T1079] Call Trace: [ 213.803105][ T1079] __schedule+0x94a/0x1e70 [ 213.807517][ T1079] ? __sched_text_start+0x8/0x8 [ 213.812405][ T1079] ? blk_insert_cloned_request+0x530/0x530 [ 213.818218][ T1079] ? _raw_spin_unlock_irq+0x23/0x80 [ 213.823487][ T1079] ? __lock_page+0x3d9/0xab0 [ 213.828085][ T1079] ? _raw_spin_unlock_irq+0x23/0x80 [ 213.833455][ T1079] schedule+0xdc/0x2b0 [ 213.837533][ T1079] io_schedule+0x1c/0x70 [ 213.841807][ T1079] __lock_page+0x422/0xab0 [ 213.846233][ T1079] ? wait_on_page_bit+0xa60/0xa60 [ 213.851324][ T1079] ? page_cache_next_miss+0x340/0x340 [ 213.856697][ T1079] ? ___might_sleep+0x163/0x2c0 [ 213.861590][ T1079] ? __might_sleep+0x95/0x190 [ 213.866270][ T1079] mpage_prepare_extent_to_map+0xb3f/0xf90 [ 213.872137][ T1079] ? mpage_process_page_bufs+0x780/0x780 [ 213.877773][ T1079] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 213.883789][ T1079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.890080][ T1079] ext4_writepages+0xb6a/0x2e70 [ 213.894942][ T1079] ? __this_cpu_preempt_check+0x2c/0x190 [ 213.900648][ T1079] ? ext4_mark_inode_dirty+0x9b0/0x9b0 [ 213.906107][ T1079] ? 0xffffffff81000000 [ 213.911032][ T1079] ? mark_lock+0xc2/0x1220 [ 213.915445][ T1079] ? prep_new_page+0x19f/0x200 [ 213.920282][ T1079] ? wbc_attach_and_unlock_inode+0x515/0x920 [ 213.926269][ T1079] ? find_held_lock+0x35/0x130 [ 213.931067][ T1079] ? wbc_attach_and_unlock_inode+0x515/0x920 [ 213.937051][ T1079] ? ext4_mark_inode_dirty+0x9b0/0x9b0 [ 213.942542][ T1079] do_writepages+0xfa/0x2a0 [ 213.947036][ T1079] ? do_writepages+0xfa/0x2a0 [ 213.951747][ T1079] ? lock_downgrade+0x920/0x920 [ 213.956592][ T1079] ? page_writeback_cpu_online+0x20/0x20 [ 213.962252][ T1079] ? __kasan_check_read+0x11/0x20 [ 213.967275][ T1079] ? do_raw_spin_unlock+0x57/0x270 [ 213.972418][ T1079] ? _raw_spin_unlock+0x28/0x40 [ 213.977262][ T1079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.983656][ T1079] ? wbc_attach_and_unlock_inode+0x5bf/0x920 [ 213.989789][ T1079] __filemap_fdatawrite_range+0x2bc/0x3b0 [ 213.995517][ T1079] ? delete_from_page_cache_batch+0xfe0/0xfe0 [ 214.001638][ T1079] ? lockdep_hardirqs_on+0x421/0x5e0 [ 214.006943][ T1079] filemap_flush+0x24/0x30 [ 214.011425][ T1079] collapse_file+0x36b1/0x41a0 [ 214.016184][ T1079] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 214.022379][ T1079] ? khugepaged+0x21d0/0x4360 [ 214.027058][ T1079] ? trace_event_raw_event_mm_collapse_huge_page_isolate+0x370/0x370 [ 214.035170][ T1079] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.041705][ T1079] ? khugepaged_find_target_node+0x142/0x180 [ 214.047697][ T1079] khugepaged+0x2da9/0x4360 [ 214.052248][ T1079] ? __kasan_check_read+0x11/0x20 [ 214.057272][ T1079] ? __lock_acquire+0x16f2/0x4a00 [ 214.062360][ T1079] ? collapse_pte_mapped_thp+0xbe0/0xbe0 [ 214.067987][ T1079] ? lock_downgrade+0x920/0x920 [ 214.072874][ T1079] ? finish_wait+0x260/0x260 [ 214.077476][ T1079] ? lockdep_hardirqs_on+0x421/0x5e0 [ 214.082820][ T1079] ? trace_hardirqs_on+0x67/0x240 [ 214.087843][ T1079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 214.094120][ T1079] ? __kthread_parkme+0x108/0x1c0 [ 214.099144][ T1079] ? __kasan_check_read+0x11/0x20 [ 214.104204][ T1079] kthread+0x361/0x430 [ 214.108269][ T1079] ? collapse_pte_mapped_thp+0xbe0/0xbe0 [ 214.114117][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 214.119875][ T1079] ret_from_fork+0x24/0x30 [ 214.124416][ T1079] [ 214.124416][ T1079] Showing all locks held in the system: [ 214.132176][ T1079] 4 locks held by kworker/u4:3/165: [ 214.137361][ T1079] #0: ffff8880a7825128 ((wq_completion)writeback){+.+.}, at: process_one_work+0x88b/0x1740 [ 214.147486][ T1079] #1: ffff8880a942fdc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 214.158812][ T1079] #2: ffff88809b65a0d8 (&type->s_umount_key#32){++++}, at: trylock_super+0x22/0x110 [ 214.168365][ T1079] #3: ffff88809b65c990 (&sbi->s_journal_flag_rwsem){.+.+}, at: do_writepages+0xfa/0x2a0 [ 214.178922][ T1079] 1 lock held by khungtaskd/1079: [ 214.183993][ T1079] #0: ffffffff88faba80 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 214.193333][ T1079] 1 lock held by khugepaged/1086: [ 214.198334][ T1079] #0: ffff88809b65c990 (&sbi->s_journal_flag_rwsem){.+.+}, at: do_writepages+0xfa/0x2a0 [ 214.208208][ T1079] 1 lock held by rsyslogd/8588: [ 214.213076][ T1079] #0: ffff8880a8e9fde0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 214.221709][ T1079] 2 locks held by getty/8678: [ 214.226371][ T1079] #0: ffff8880a83fa090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.235352][ T1079] #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.244936][ T1079] 2 locks held by getty/8679: [ 214.249631][ T1079] #0: ffff8880a0727090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.258572][ T1079] #1: ffffc90005f412e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.268159][ T1079] 2 locks held by getty/8680: [ 214.272870][ T1079] #0: ffff8880a7ad1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.281856][ T1079] #1: ffffc90005f3d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.291438][ T1079] 2 locks held by getty/8681: [ 214.296092][ T1079] #0: ffff88809fed7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.305802][ T1079] #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.315397][ T1079] 2 locks held by getty/8682: [ 214.320098][ T1079] #0: ffff888098051090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.330046][ T1079] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.339634][ T1079] 2 locks held by getty/8683: [ 214.344296][ T1079] #0: ffff8880a0cca090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.353277][ T1079] #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.362873][ T1079] 2 locks held by getty/8684: [ 214.367526][ T1079] #0: ffff88809333f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 214.376504][ T1079] #1: ffffc90005f092e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 214.386099][ T1079] 1 lock held by syz-execprog/8703: [ 214.391318][ T1079] #0: ffff8880a325a368 (&ei->i_mmap_sem){++++}, at: ext4_filemap_fault+0x7e/0xb2 [ 214.400576][ T1079] [ 214.402891][ T1079] ============================================= [ 214.402891][ T1079] [ 214.411317][ T1079] NMI backtrace for cpu 1 [ 214.415637][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc4-next-20191025 #0 [ 214.424204][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.435195][ T1079] Call Trace: [ 214.438474][ T1079] dump_stack+0x172/0x1f0 [ 214.442782][ T1079] nmi_cpu_backtrace.cold+0x70/0xb2 [ 214.447959][ T1079] ? vprintk_func+0x86/0x189 [ 214.452545][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 214.458172][ T1079] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 214.464177][ T1079] arch_trigger_cpumask_backtrace+0x14/0x20 [ 214.470175][ T1079] watchdog+0xc8f/0x1350 [ 214.474420][ T1079] kthread+0x361/0x430 [ 214.478479][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 214.484014][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 214.489730][ T1079] ret_from_fork+0x24/0x30 [ 214.494254][ T1079] Sending NMI from CPU 1 to CPUs 0: [ 214.500009][ C0] NMI backtrace for cpu 0 [ 214.500015][ C0] CPU: 0 PID: 8705 Comm: syz-execprog Not tainted 5.4.0-rc4-next-20191025 #0 [ 214.500020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.500024][ C0] RIP: 0010:__kasan_check_read+0x8/0x20 [ 214.500034][ C0] Code: e5 9d ff ff 48 8b 73 58 89 c2 48 c7 c7 78 d7 aa 88 f7 da e8 ee cf ad ff e9 0e ef ff ff 90 90 90 90 90 55 89 f6 31 d2 48 89 e5 <48> 8b 4d 08 e8 cf 26 00 00 5d c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 [ 214.500037][ C0] RSP: 0018:ffff888096267800 EFLAGS: 00000046 [ 214.500044][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000008 [ 214.500049][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a79c9a0 [ 214.500053][ C0] RBP: ffff888096267800 R08: 1ffffffff14f3934 R09: fffffbfff14f3935 [ 214.500058][ C0] R10: ffff88809392cf20 R11: ffff88809392c680 R12: 0000000000000000 [ 214.500062][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000c0000 [ 214.500067][ C0] FS: 000000c4200283e8(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 214.500071][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.500075][ C0] CR2: ffffffffff600400 CR3: 000000008e3cf000 CR4: 00000000001406f0 [ 214.500080][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.500084][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.500086][ C0] Call Trace: [ 214.500090][ C0] __lock_acquire+0x1564/0x4a00 [ 214.500093][ C0] ? mark_lock+0xc2/0x1220 [ 214.500096][ C0] ? mark_held_locks+0xf0/0xf0 [ 214.500099][ C0] ? futex_wait+0x26a/0x5d0 [ 214.500102][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.500105][ C0] lock_acquire+0x190/0x410 [ 214.500109][ C0] ? debug_object_free+0x59/0x390 [ 214.500112][ C0] _raw_spin_lock_irqsave+0x95/0xcd [ 214.500115][ C0] ? debug_object_free+0x59/0x390 [ 214.500118][ C0] debug_object_free+0x59/0x390 [ 214.500122][ C0] destroy_hrtimer_on_stack+0x1d/0x30 [ 214.500125][ C0] futex_wait+0x4ec/0x5d0 [ 214.500128][ C0] ? futex_wait_setup+0x390/0x390 [ 214.500131][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.500135][ C0] ? hrtimer_init_sleeper_on_stack+0xa0/0xa0 [ 214.500138][ C0] ? __kasan_check_read+0x11/0x20 [ 214.500141][ C0] ? mark_lock+0xc2/0x1220 [ 214.500144][ C0] ? __kasan_check_read+0x11/0x20 [ 214.500147][ C0] ? mark_lock+0xc2/0x1220 [ 214.500150][ C0] do_futex+0x175/0x1de0 [ 214.500153][ C0] ? __kasan_check_read+0x11/0x20 [ 214.500156][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 214.500159][ C0] ? exit_robust_list+0x2c0/0x2c0 [ 214.500163][ C0] ? __x64_sys_futex+0x4c2/0x590 [ 214.500166][ C0] ? lock_downgrade+0x920/0x920 [ 214.500169][ C0] ? ktime_get+0x100/0x2f0 [ 214.500172][ C0] ? __x64_sys_futex+0x4c2/0x590 [ 214.500175][ C0] ? ktime_get+0x100/0x2f0 [ 214.500178][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 214.500181][ C0] ? trace_hardirqs_on+0x67/0x240 [ 214.500185][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.500188][ C0] ? ktime_get+0x1fd/0x2f0 [ 214.500191][ C0] __x64_sys_futex+0x3f7/0x590 [ 214.500194][ C0] ? do_futex+0x1de0/0x1de0 [ 214.500197][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.500200][ C0] ? do_syscall_64+0x26/0x760 [ 214.500204][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.500207][ C0] ? do_syscall_64+0x26/0x760 [ 214.500210][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 214.500213][ C0] ? trace_hardirqs_on+0x67/0x240 [ 214.500216][ C0] do_syscall_64+0xfa/0x760 [ 214.500220][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.500222][ C0] RIP: 0033:0x459043 [ 214.500232][ C0] Code: cc cc cc cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 214.500235][ C0] RSP: 002b:000000c420033ea8 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 214.500243][ C0] RAX: ffffffffffffffda RBX: 00000000000186a0 RCX: 0000000000459043 [ 214.500248][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000014deec8 [ 214.500252][ C0] RBP: 000000c420033ef0 R08: 0000000000000000 R09: 0000000000000000 [ 214.500256][ C0] R10: 000000c420033ee0 R11: 0000000000000206 R12: 00000000000000a0 [ 214.500261][ C0] R13: 00000000000000ff R14: 00007f521b17d6c8 R15: 0000000000000004 [ 214.501238][ T1079] Kernel panic - not syncing: hung_task: blocked tasks [ 214.922287][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc4-next-20191025 #0 [ 214.930862][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.940895][ T1079] Call Trace: [ 214.944175][ T1079] dump_stack+0x172/0x1f0 [ 214.948486][ T1079] panic+0x2e3/0x75c [ 214.952356][ T1079] ? add_taint.cold+0x16/0x16 [ 214.957009][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 214.962636][ T1079] ? ___preempt_schedule+0x16/0x18 [ 214.967730][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 214.973888][ T1079] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 214.980032][ T1079] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 214.986176][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 214.992328][ T1079] watchdog+0xca0/0x1350 [ 214.996572][ T1079] kthread+0x361/0x430 [ 215.000622][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 215.006153][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 215.011857][ T1079] ret_from_fork+0x24/0x30 [ 215.017479][ T1079] Kernel Offset: disabled [ 215.021802][ T1079] Rebooting in 86400 seconds..