[ 24.151549] audit: type=1800 audit(1541843147.616:21): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 24.179366] audit: type=1800 audit(1541843147.616:22): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 25.175540] sshd (5608) used greatest stack depth: 15632 bytes left [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 78.479422] ------------[ cut here ]------------ [ 78.484209] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 78.484285] WARNING: CPU: 0 PID: 5672 at kernel/locking/lockdep.c:3595 lock_release+0x740/0xa10 [ 78.497629] Kernel panic - not syncing: panic_on_warn set ... [ 78.503505] CPU: 0 PID: 5672 Comm: syz-executor729 Not tainted 4.20.0-rc1-next-20181109+ #109 [ 78.512148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.521490] Call Trace: [ 78.524077] dump_stack+0x244/0x39d [ 78.527707] ? dump_stack_print_info.cold.1+0x20/0x20 [ 78.532893] panic+0x2ad/0x55c [ 78.536073] ? add_taint.cold.5+0x16/0x16 [ 78.540211] ? __warn.cold.8+0x5/0x45 [ 78.543995] ? __warn+0xe8/0x1d0 [ 78.547347] ? lock_release+0x740/0xa10 [ 78.551301] __warn.cold.8+0x20/0x45 [ 78.555086] ? lock_release+0x740/0xa10 [ 78.559121] report_bug+0x254/0x2d0 [ 78.562760] do_error_trap+0x11b/0x200 [ 78.566643] do_invalid_op+0x36/0x40 [ 78.570341] ? lock_release+0x740/0xa10 [ 78.574299] invalid_op+0x14/0x20 [ 78.577881] RIP: 0010:lock_release+0x740/0xa10 [ 78.582578] Code: 03 38 d0 7c 08 84 d2 0f 85 da 02 00 00 8b 35 a7 82 b3 08 85 f6 75 15 48 c7 c6 20 66 2b 88 48 c7 c7 c0 33 2b 88 e8 10 36 e7 ff <0f> 0b 48 8b 95 e8 fe ff ff 4c 89 f7 48 8b b5 f0 fe ff ff e8 e8 58 [ 78.601542] RSP: 0018:ffff8801c07ff868 EFLAGS: 00010086 [ 78.606899] RAX: 0000000000000000 RBX: 1ffff100380fff12 RCX: 0000000000000000 [ 78.614155] RDX: 0000000000000000 RSI: ffffffff8165ba15 RDI: 0000000000000006 [ 78.621409] RBP: ffff8801c07ff998 R08: ffff8801d4994040 R09: fffffbfff12b2254 [ 78.628822] R10: fffffbfff12b2254 R11: ffffffff895912a3 R12: ffffffff8b0e17a0 [ 78.636088] R13: ffff8801c07ff970 R14: ffff8801d4994040 R15: ffff8801c07ff8b0 [ 78.643452] ? vprintk_func+0x85/0x181 [ 78.647387] ? lock_release+0x740/0xa10 [ 78.651359] ? loop_control_ioctl+0xf5/0x4e0 [ 78.655757] ? lock_downgrade+0x900/0x900 [ 78.659900] ? __radix_tree_lookup+0x3a7/0x500 [ 78.664531] ? radix_tree_insert+0x870/0x870 [ 78.668947] ? find_held_lock+0x36/0x1c0 [ 78.673002] __mutex_unlock_slowpath+0x102/0x8c0 [ 78.677745] ? __fget+0x4aa/0x740 [ 78.681300] ? wait_for_completion+0x8a0/0x8a0 [ 78.685868] ? check_preemption_disabled+0x48/0x280 [ 78.690871] ? radix_tree_lookup+0x21/0x30 [ 78.695097] ? idr_find+0x44/0x50 [ 78.698546] ? loop_lookup+0x105/0x230 [ 78.702421] ? loop_exit_cb+0x20/0x20 [ 78.706214] mutex_unlock+0xd/0x10 [ 78.709743] loop_control_ioctl+0xf5/0x4e0 [ 78.713966] ? loop_add+0xa20/0xa20 [ 78.717674] ? trace_hardirqs_off+0xb8/0x310 [ 78.722082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 78.727621] ? loop_add+0xa20/0xa20 [ 78.731391] do_vfs_ioctl+0x1de/0x1790 [ 78.735284] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 78.740816] ? ioctl_preallocate+0x300/0x300 [ 78.745214] ? __fget_light+0x2e9/0x430 [ 78.749729] ? fget_raw+0x20/0x20 [ 78.753165] ? putname+0xf2/0x130 [ 78.756719] ? rcu_read_lock_sched_held+0x14f/0x180 [ 78.761730] ? kmem_cache_free+0x24f/0x290 [ 78.765971] ? __x64_sys_futex+0x47f/0x6a0 [ 78.770206] ? do_syscall_64+0x9a/0x820 [ 78.774163] ? do_syscall_64+0x9a/0x820 [ 78.778353] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 78.783076] ? security_file_ioctl+0x94/0xc0 [ 78.787577] ksys_ioctl+0xa9/0xd0 [ 78.791018] __x64_sys_ioctl+0x73/0xb0 [ 78.794893] do_syscall_64+0x1b9/0x820 [ 78.798911] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 78.804268] ? syscall_return_slowpath+0x5e0/0x5e0 [ 78.809207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 78.814071] ? trace_hardirqs_on_caller+0x310/0x310 [ 78.819084] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 78.824098] ? prepare_exit_to_usermode+0x291/0x3b0 [ 78.829119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 78.833955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.839127] RIP: 0033:0x446239 [ 78.842308] Code: e8 2c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 78.861436] RSP: 002b:00007fe56cceeda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.869216] RAX: ffffffffffffffda RBX: 00000000006dac28 RCX: 0000000000446239 [ 78.876629] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 78.884018] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 78.891417] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac2c [ 78.898858] R13: 6f72746e6f632d70 R14: 6f6f6c2f7665642f R15: 00000000006dad2c [ 78.907250] Kernel Offset: disabled [ 78.910887] Rebooting in 86400 seconds..