[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 73.404106][ T27] audit: type=1800 audit(1577625631.458:25): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 73.426821][ T27] audit: type=1800 audit(1577625631.468:26): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 73.486546][ T27] audit: type=1800 audit(1577625631.468:27): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 266.982570][ T9571] IPVS: ftp: loaded support on port[0] = 21
[ 297.237023][ T30] attempt to access beyond end of device
[ 297.242878][ T30] loop0: rw=1048577, want=707, limit=624
[ 416.996628][ T1113] INFO: task syz-executor727:9571 blocked for more than 143 seconds.
[ 417.004868][ T1113] Not tainted 5.5.0-rc2-next-20191220-syzkaller #0
[ 417.011970][ T1113] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 417.020778][ T1113] syz-executor727 D24840 9571 9570 0x00004000
[ 417.027318][ T1113] Call Trace:
[ 417.030620][ T1113] __schedule+0x934/0x1f90
[ 417.035033][ T1113] ? firmware_map_remove+0x1a0/0x1a0
[ 417.040427][ T1113] ? _raw_spin_unlock_irq+0x23/0x80
[ 417.045645][ T1113] ? wait_on_page_bit+0x23f/0xa60
[ 417.050724][ T1113] ? _raw_spin_unlock_irq+0x23/0x80
[ 417.055921][ T1113] schedule+0xdc/0x2b0
[ 417.060128][ T1113] io_schedule+0x1c/0x70
[ 417.064375][ T1113] wait_on_page_bit+0x27c/0xa60
[ 417.069340][ T1113] ? __lock_page_killable+0xb30/0xb30
[ 417.074729][ T1113] ? rcu_lockdep_current_cpu_online+0xe3/0x130
[ 417.080940][ T1113] ? page_cache_prev_miss+0x340/0x340
[ 417.086325][ T1113] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 417.091942][ T1113] ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 417.097964][ T1113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 417.104186][ T1113] ? page_mapping+0x301/0x5c0
[ 417.108924][ T1113] wait_on_page_writeback+0x1b2/0x4f0
[ 417.114301][ T1113] __filemap_fdatawait_range+0x145/0x340
[ 417.119975][ T1113] ? add_page_wait_queue+0x260/0x260
[ 417.125264][ T1113] ? __filemap_fdatawrite_range+0x1fc/0x3b0
[ 417.131235][ T1113] ? find_held_lock+0x35/0x130
[ 417.136001][ T1113] ? generic_file_write_iter+0x42b/0x68e
[ 417.141677][ T1113] file_write_and_wait_range+0x1ac/0x210
[ 417.147348][ T1113] __generic_file_fsync+0x79/0x200
[ 417.152457][ T1113] fat_file_fsync+0x78/0x210
[ 417.157078][ T1113] ? fat_free_clusters.cold+0x2f/0x2f
[ 417.162446][ T1113] vfs_fsync_range+0x141/0x230
[ 417.167270][ T1113] generic_file_write_iter+0x4ea/0x68e
[ 417.172750][ T1113] ? __generic_file_write_iter+0x630/0x630
[ 417.178623][ T1113] ? common_file_perm+0x2f3/0x950
[ 417.183719][ T1113] do_iter_readv_writev+0x5f8/0x8f0
[ 417.188989][ T1113] ? no_seek_end_llseek_size+0x70/0x70
[ 417.194448][ T1113] ? apparmor_file_permission+0x27/0x30
[ 417.200054][ T1113] ? rw_verify_area+0x126/0x360
[ 417.204923][ T1113] do_iter_write+0x184/0x610
[ 417.209567][ T1113] ? __kmalloc+0x608/0x770
[ 417.214035][ T1113] vfs_iter_write+0x77/0xb0
[ 417.218587][ T1113] iter_file_splice_write+0x717/0xc10
[ 417.224013][ T1113] ? page_cache_pipe_buf_release+0x290/0x290
[ 417.230095][ T1113] ? rw_verify_area+0x126/0x360
[ 417.235086][ T1113] ? page_cache_pipe_buf_release+0x290/0x290
[ 417.241298][ T1113] direct_splice_actor+0x123/0x190
[ 417.246480][ T1113] splice_direct_to_actor+0x3b4/0xa30
[ 417.251859][ T1113] ? generic_pipe_buf_nosteal+0x10/0x10
[ 417.257459][ T1113] ? do_splice_to+0x180/0x180
[ 417.262134][ T1113] ? rw_verify_area+0x126/0x360
[ 417.267038][ T1113] do_splice_direct+0x1da/0x2a0
[ 417.272240][ T1113] ? splice_direct_to_actor+0xa30/0xa30
[ 417.277869][ T1113] ? rcu_read_lock_any_held+0xcd/0xf0
[ 417.283241][ T1113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 417.289531][ T1113] ? __this_cpu_preempt_check+0x35/0x190
[ 417.295225][ T1113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 417.301520][ T1113] ? __sb_start_write+0x1e5/0x460
[ 417.306695][ T1113] do_sendfile+0x597/0xd00
[ 417.311104][ T1113] ? do_compat_pwritev64+0x1c0/0x1c0
[ 417.316497][ T1113] ? lock_downgrade+0x920/0x920
[ 417.321359][ T1113] ? rcu_read_lock_any_held+0xcd/0xf0
[ 417.326801][ T1113] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 417.332089][ T1113] __x64_sys_sendfile64+0x1dd/0x220
[ 417.337338][ T1113] ? __ia32_sys_sendfile+0x230/0x230
[ 417.342638][ T1113] ? do_syscall_64+0x26/0x790
[ 417.347428][ T1113] ? lockdep_hardirqs_on+0x421/0x5e0
[ 417.352846][ T1113] ? trace_hardirqs_on+0x67/0x240
[ 417.357935][ T1113] do_syscall_64+0xfa/0x790
[ 417.362442][ T1113] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 417.368383][ T1113] RIP: 0033:0x445929
[ 417.372333][ T1113] Code: Bad RIP value.
[ 417.376455][ T1113] RSP: 002b:00007fffe0bfce58 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 417.384901][ T1113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000445929
[ 417.392937][ T1113] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[ 417.400961][ T1113] RBP: 00007fffe0bfce90 R08: 0000000000000003 R09: 0000000000000003
[ 417.408989][ T1113] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007fffe0bfcf40
[ 417.416985][ T1113] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000000
[ 417.424966][ T1113]
[ 417.424966][ T1113] Showing all locks held in the system:
[ 417.432749][ T1113] 1 lock held by khungtaskd/1113:
[ 417.437785][ T1113] #0: ffffffff899af980 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279
[ 417.447334][ T1113] 3 locks held by rs:main Q:Reg/9453:
[ 417.452703][ T1113] #0: ffff8880ae837518 (&rq->lock){-.-.}, at: newidle_balance+0xa28/0xe80
[ 417.461336][ T1113] #1: ffffffff899af980 (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0
[ 417.470509][ T1113] #2: ffff8880a19e9508 (&sb->s_type->i_mutex_key#11){+.+.}, at: ext4_buffered_write_iter+0xba/0x460
[ 417.481412][ T1113] 1 lock held by rsyslogd/9455:
[ 417.486459][ T1113] #0: ffff8880a1f860e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[ 417.495057][ T1113] 2 locks held by getty/9545:
[ 417.499760][ T1113] #0: ffff88808d1ce090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.508755][ T1113] #1: ffffc90005b4b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.518353][ T1113] 2 locks held by getty/9546:
[ 417.523013][ T1113] #0: ffff88809c3f6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.532005][ T1113] #1: ffffc90005b7b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.541600][ T1113] 2 locks held by getty/9547:
[ 417.546265][ T1113] #0: ffff88809940a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.555259][ T1113] #1: ffffc90005bcb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.564847][ T1113] 2 locks held by getty/9548:
[ 417.569553][ T1113] #0: ffff8880993e3090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.578555][ T1113] #1: ffffc90005bab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.588157][ T1113] 2 locks held by getty/9549:
[ 417.592836][ T1113] #0: ffff888094113090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.601831][ T1113] #1: ffffc90005bbb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.611435][ T1113] 2 locks held by getty/9550:
[ 417.616088][ T1113] #0: ffff888095b46090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.625070][ T1113] #1: ffffc90005b9b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.634730][ T1113] 2 locks held by getty/9551:
[ 417.639518][ T1113] #0: ffff88821529a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 417.648523][ T1113] #1: ffffc90004f272e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[ 417.658275][ T1113] 1 lock held by syz-executor727/9571:
[ 417.663721][ T1113] #0: ffff88809b166428 (sb_writers#8){.+.+}, at: do_sendfile+0x9b9/0xd00
[ 417.672289][ T1113]
[ 417.674622][ T1113] =============================================
[ 417.674622][ T1113]
[ 417.683075][ T1113] NMI backtrace for cpu 1
[ 417.687438][ T1113] CPU: 1 PID: 1113 Comm: khungtaskd Not tainted 5.5.0-rc2-next-20191220-syzkaller #0
[ 417.696905][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 417.706938][ T1113] Call Trace:
[ 417.710216][ T1113] dump_stack+0x197/0x210
[ 417.714660][ T1113] nmi_cpu_backtrace.cold+0x70/0xb2
[ 417.719849][ T1113] ? vprintk_func+0x86/0x189
[ 417.724462][ T1113] ? lapic_can_unplug_cpu.cold+0x3a/0x3a
[ 417.730082][ T1113] nmi_trigger_cpumask_backtrace+0x23b/0x28b
[ 417.736054][ T1113] arch_trigger_cpumask_backtrace+0x14/0x20
[ 417.741942][ T1113] watchdog+0xdf1/0x14e0
[ 417.746169][ T1113] kthread+0x361/0x430
[ 417.750224][ T1113] ? reset_hung_task_detector+0x30/0x30
[ 417.755744][ T1113] ? kthread_mod_delayed_work+0x1f0/0x1f0
[ 417.761444][ T1113] ret_from_fork+0x24/0x30
[ 417.765931][ T1113] Sending NMI from CPU 1 to CPUs 0:
[ 417.771645][ C0] NMI backtrace for cpu 0
[ 417.771653][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0
[ 417.771659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 417.771663][ C0] RIP: 0010:rcu_dynticks_curr_cpu_in_eqs+0x69/0xb0
[ 417.771675][ C0] Code: 89 be 04 00 00 00 4c 8d a3 d8 00 00 00 4c 89 e7 e8 5c 0d 51 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 <4c> 89 e0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 17 8b 83 d8 00 00
[ 417.771679][ C0] RSP: 0018:ffffc90000007e98 EFLAGS: 00000802
[ 417.771687][ C0] RAX: dffffc0000000000 RBX: ffff8880ae8382c0 RCX: ffffffff81620624
[ 417.771692][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880ae838398
[ 417.771697][ C0] RBP: ffffc90000007eb0 R08: 1ffff11015d07073 R09: ffffed1015d07074
[ 417.771702][ C0] R10: ffffed1015d07073 R11: ffff8880ae83839b R12: ffff8880ae838398
[ 417.771707][ C0] R13: ffffffff89576160 R14: ffff8880ae800000 R15: 0000000000000000
[ 417.771713][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 417.771717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 417.771722][ C0] CR2: 000000000243a000 CR3: 000000008ff28000 CR4: 00000000001406f0
[ 417.771727][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 417.771732][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 417.771735][ C0] Call Trace:
[ 417.771737][ C0]
[ 417.771740][ C0] rcu_is_watching+0x10/0x30
[ 417.771744][ C0] rcu_read_lock_held_common+0xb4/0x130
[ 417.771748][ C0] rcu_read_lock_sched_held+0x5b/0xd0
[ 417.771752][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 417.771756][ C0] ? sched_set_stop_task+0x250/0x250
[ 417.771759][ C0] raise_softirq_irqoff+0x1a7/0x1f0
[ 417.771763][ C0] scheduler_ipi+0x4c7/0x640
[ 417.771766][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 417.771770][ C0] smp_reschedule_interrupt+0x78/0x4c0
[ 417.771773][ C0] reschedule_interrupt+0xf/0x20
[ 417.771776][ C0]
[ 417.771780][ C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 417.771791][ C0] Code: 78 e4 e3 f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d b4 1b 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d a4 1b 59 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 2e 88 93 f9 e8 79
[ 417.771795][ C0] RSP: 0018:ffffffff89807ce8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
[ 417.771804][ C0] RAX: 1ffffffff13275ce RBX: ffffffff8987a440 RCX: 0000000000000000
[ 417.771809][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8987acdc
[ 417.771814][ C0] RBP: ffffffff89807d18 R08: ffffffff8987a440 R09: 0000000000000000
[ 417.771819][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 417.771824][ C0] R13: ffffffff8a816ac0 R14: 0000000000000000 R15: 0000000000000000
[ 417.771827][ C0] ? default_idle+0x4e/0x360
[ 417.771830][ C0] arch_cpu_idle+0xa/0x10
[ 417.771834][ C0] default_idle_call+0x84/0xb0
[ 417.771837][ C0] do_idle+0x3c8/0x6e0
[ 417.771840][ C0] ? arch_cpu_idle_exit+0x80/0x80
[ 417.771844][ C0] ? trace_hardirqs_on+0x67/0x240
[ 417.771848][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 417.771852][ C0] ? debug_smp_processor_id+0x33/0x18a
[ 417.771856][ C0] cpu_startup_entry+0x1b/0x20
[ 417.771859][ C0] rest_init+0x23b/0x371
[ 417.771862][ C0] arch_call_rest_init+0xe/0x1b
[ 417.771865][ C0] start_kernel+0x904/0x943
[ 417.771869][ C0] ? mem_encrypt_init+0xb/0xb
[ 417.771873][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 417.771876][ C0] ? x86_family+0x41/0x50
[ 417.771880][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 417.771884][ C0] x86_64_start_reservations+0x29/0x2b
[ 417.771887][ C0] x86_64_start_kernel+0x77/0x7b
[ 417.771891][ C0] secondary_startup_64+0xa4/0xb0
[ 417.772173][ T1113] Kernel panic - not syncing: hung_task: blocked tasks
[ 418.142114][ T1113] CPU: 1 PID: 1113 Comm: khungtaskd Not tainted 5.5.0-rc2-next-20191220-syzkaller #0
[ 418.151538][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 418.161581][ T1113] Call Trace:
[ 418.164853][ T1113] dump_stack+0x197/0x210
[ 418.169163][ T1113] panic+0x2e3/0x75c
[ 418.173034][ T1113] ? add_taint.cold+0x16/0x16
[ 418.177692][ T1113] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 418.183391][ T1113] ? printk_safe_flush+0xf2/0x140
[ 418.188394][ T1113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 418.194637][ T1113] ? nmi_trigger_cpumask_backtrace+0x224/0x28b
[ 418.200815][ T1113] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b
[ 418.206955][ T1113] watchdog+0xe02/0x14e0
[ 418.211184][ T1113] kthread+0x361/0x430
[ 418.215236][ T1113] ? reset_hung_task_detector+0x30/0x30
[ 418.220762][ T1113] ? kthread_mod_delayed_work+0x1f0/0x1f0
[ 418.226497][ T1113] ret_from_fork+0x24/0x30
[ 418.232458][ T1113] Kernel Offset: disabled
[ 418.236798][ T1113] Rebooting in 86400 seconds..