[ 36.716730][ T27] audit: type=1800 audit(1555439748.165:27): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.737629][ T27] audit: type=1800 audit(1555439748.165:28): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.262693][ T27] audit: type=1800 audit(1555439748.795:29): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.283037][ T27] audit: type=1800 audit(1555439748.795:30): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 483.852467][ T1042] INFO: task syz-executor349:7670 blocked for more than 143 seconds. [ 483.862999][ T1042] Not tainted 5.1.0-rc4+ #169 [ 483.868336][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.877184][ T1042] syz-executor349 D28120 7670 7646 0x00000004 [ 483.883675][ T1042] Call Trace: [ 483.887538][ T1042] __schedule+0x817/0x1cc0 [ 483.892108][ T1042] ? trace_hardirqs_on+0x67/0x230 [ 483.897299][ T1042] ? kasan_check_read+0x11/0x20 [ 483.902253][ T1042] ? __sched_text_start+0x8/0x8 [ 483.907142][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 483.912219][ T1042] ? finish_task_switch+0x1f0/0x780 [ 483.917858][ T1042] ? __switch_to_asm+0x40/0x70 [ 483.922732][ T1042] schedule+0x92/0x180 [ 483.927244][ T1042] schedule_timeout+0x8ca/0xfd0 [ 483.932476][ T1042] ? wait_for_completion+0x294/0x440 [ 483.937871][ T1042] ? find_held_lock+0x35/0x130 [ 483.942736][ T1042] ? usleep_range+0x170/0x170 [ 483.947421][ T1042] ? mark_held_locks+0xa4/0xf0 [ 483.952305][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 483.957594][ T1042] ? wait_for_completion+0x294/0x440 [ 483.963098][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 483.968300][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 483.973655][ T1042] ? trace_hardirqs_on+0x67/0x230 [ 483.978829][ T1042] ? kasan_check_read+0x11/0x20 [ 483.983813][ T1042] wait_for_completion+0x29c/0x440 [ 483.988935][ T1042] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 483.995981][ T1042] ? wake_up_q+0xf0/0xf0 [ 484.000404][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.006930][ T1042] ? pcrypt_aead_encrypt+0x372/0x470 [ 484.012308][ T1042] aead_recvmsg+0x1492/0x1ab0 [ 484.017012][ T1042] ? aead_release+0x50/0x50 [ 484.021620][ T1042] ? apparmor_socket_recvmsg+0x2a/0x30 [ 484.027352][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.033918][ T1042] ? security_socket_recvmsg+0x9b/0xd0 [ 484.039389][ T1042] ? aead_release+0x50/0x50 [ 484.044161][ T1042] sock_recvmsg+0xd0/0x110 [ 484.048689][ T1042] sock_read_iter+0x299/0x3b0 [ 484.053486][ T1042] ? sock_recvmsg+0x110/0x110 [ 484.058239][ T1042] ? fsnotify+0xbc0/0xbc0 [ 484.062825][ T1042] do_iter_readv_writev+0x700/0x8e0 [ 484.068043][ T1042] ? vfs_dedupe_file_range+0x780/0x780 [ 484.073894][ T1042] ? rw_verify_area+0x118/0x360 [ 484.078886][ T1042] do_iter_read+0x27c/0x660 [ 484.083522][ T1042] ? dup_iter+0x260/0x260 [ 484.087866][ T1042] ? lock_downgrade+0x880/0x880 [ 484.092789][ T1042] vfs_readv+0xf0/0x160 [ 484.096967][ T1042] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 484.103214][ T1042] ? __sys_sendmmsg+0x3ac/0x4d0 [ 484.108202][ T1042] ? __fd_install+0x200/0x640 [ 484.113153][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.119410][ T1042] ? __fget_light+0x1a9/0x230 [ 484.124859][ T1042] do_readv+0x15e/0x370 [ 484.129180][ T1042] ? vfs_readv+0x160/0x160 [ 484.133727][ T1042] ? do_syscall_64+0x26/0x610 [ 484.138452][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.144704][ T1042] ? do_syscall_64+0x26/0x610 [ 484.149392][ T1042] __x64_sys_readv+0x75/0xb0 [ 484.154035][ T1042] do_syscall_64+0x103/0x610 [ 484.158715][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.164907][ T1042] RIP: 0033:0x441349 [ 484.169192][ T1042] Code: Bad RIP value. [ 484.173818][ T1042] RSP: 002b:00007ffee5c148c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 484.182828][ T1042] RAX: ffffffffffffffda RBX: 00000000004a23d8 RCX: 0000000000441349 [ 484.190829][ T1042] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000004 [ 484.198963][ T1042] RBP: 0000000000051e99 R08: 00000000004002c8 R09: 00000000004002c8 [ 484.207198][ T1042] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402170 [ 484.215300][ T1042] R13: 0000000000402200 R14: 0000000000000000 R15: 0000000000000000 [ 484.223575][ T1042] [ 484.223575][ T1042] Showing all locks held in the system: [ 484.231408][ T1042] 1 lock held by khungtaskd/1042: [ 484.237426][ T1042] #0: 00000000f7639762 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 484.247193][ T1042] 1 lock held by rsyslogd/7530: [ 484.252695][ T1042] #0: 00000000a92b4c5b (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 484.261428][ T1042] 2 locks held by getty/7621: [ 484.266277][ T1042] #0: 000000004c250286 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.275321][ T1042] #1: 00000000b021009f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.285118][ T1042] 2 locks held by getty/7622: [ 484.290069][ T1042] #0: 000000002a74f7b6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.299327][ T1042] #1: 00000000248d20cf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.308948][ T1042] 2 locks held by getty/7623: [ 484.313777][ T1042] #0: 0000000027121819 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.322800][ T1042] #1: 00000000d0aeaf85 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.332438][ T1042] 2 locks held by getty/7624: [ 484.337313][ T1042] #0: 00000000d21c0aea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.346422][ T1042] #1: 00000000e8039524 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.356255][ T1042] 2 locks held by getty/7625: [ 484.360918][ T1042] #0: 00000000c6b1ae1f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.369987][ T1042] #1: 0000000089359eac (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.379800][ T1042] 2 locks held by getty/7626: [ 484.385124][ T1042] #0: 00000000110ec442 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.394421][ T1042] #1: 00000000b39dbd68 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.404073][ T1042] 2 locks held by getty/7627: [ 484.408848][ T1042] #0: 00000000cc3847d1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 484.418183][ T1042] #1: 0000000005fbaca4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 484.428016][ T1042] 1 lock held by syz-executor349/7670: [ 484.433613][ T1042] #0: 000000005dbaf3d6 (sk_lock-AF_ALG){+.+.}, at: af_alg_wait_for_data+0x215/0x540 [ 484.443353][ T1042] [ 484.445668][ T1042] ============================================= [ 484.445668][ T1042] [ 484.454332][ T1042] NMI backtrace for cpu 0 [ 484.458748][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc4+ #169 [ 484.466459][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.476496][ T1042] Call Trace: [ 484.480430][ T1042] dump_stack+0x172/0x1f0 [ 484.484764][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 484.489993][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 484.495642][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 484.501815][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 484.507715][ T1042] watchdog+0x9b7/0xec0 [ 484.511899][ T1042] kthread+0x357/0x430 [ 484.515985][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 484.521616][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 484.527844][ T1042] ret_from_fork+0x3a/0x50 [ 484.532691][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 484.538205][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10 [ 484.539706][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 484.553526][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc4+ #169 [ 484.561231][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.571373][ T1042] Call Trace: [ 484.574935][ T1042] dump_stack+0x172/0x1f0 [ 484.579320][ T1042] panic+0x2cb/0x65c [ 484.583244][ T1042] ? __warn_printk+0xf3/0xf3 [ 484.587823][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 484.593711][ T1042] ? ___preempt_schedule+0x16/0x18 [ 484.598917][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 484.605095][ T1042] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 484.611230][ T1042] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 484.617464][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 484.623923][ T1042] watchdog+0x9c8/0xec0 [ 484.628080][ T1042] kthread+0x357/0x430 [ 484.632198][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 484.637732][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 484.644121][ T1042] ret_from_fork+0x3a/0x50 [ 484.654807][ T1042] Kernel Offset: disabled [ 484.659293][ T1042] Rebooting in 86400 seconds..