[ 34.928700][ T26] audit: type=1800 audit(1554589348.902:28): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.764920][ T26] audit: type=1800 audit(1554589349.822:29): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.785364][ T26] audit: type=1800 audit(1554589349.822:30): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 522.822497][ T1042] INFO: task syz-executor932:7638 blocked for more than 143 seconds. [ 522.830970][ T1042] Not tainted 5.1.0-rc3+ #54 [ 522.837265][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.846005][ T1042] syz-executor932 D28200 7638 7636 0x80000000 [ 522.852458][ T1042] Call Trace: [ 522.855791][ T1042] __schedule+0x817/0x1cc0 [ 522.860186][ T1042] ? __sched_text_start+0x8/0x8 [ 522.865092][ T1042] ? __lock_acquire+0x242a/0x3fb0 [ 522.870123][ T1042] schedule+0x92/0x180 [ 522.874224][ T1042] schedule_timeout+0x8ca/0xfd0 [ 522.879066][ T1042] ? wait_for_completion+0x294/0x440 [ 522.884548][ T1042] ? find_held_lock+0x35/0x130 [ 522.889319][ T1042] ? usleep_range+0x170/0x170 [ 522.894123][ T1042] ? kasan_check_write+0x14/0x20 [ 522.899102][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 522.904365][ T1042] ? wait_for_completion+0x294/0x440 [ 522.909653][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 522.914924][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 522.920281][ T1042] ? trace_hardirqs_on+0x67/0x230 [ 522.925364][ T1042] ? kasan_check_read+0x11/0x20 [ 522.930212][ T1042] wait_for_completion+0x29c/0x440 [ 522.935373][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 522.940657][ T1042] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 522.947267][ T1042] ? wake_up_q+0xf0/0xf0 [ 522.951555][ T1042] ? percpu_ref_kill_and_confirm+0x1b7/0x3b0 [ 522.957688][ T1042] exit_aio+0x321/0x3a0 [ 522.961856][ T1042] ? aio_poll_wake+0x11e0/0x11e0 [ 522.967495][ T1042] ? mutex_unlock+0xd/0x10 [ 522.971987][ T1042] mmput+0xcf/0x4c0 [ 522.975874][ T1042] do_exit+0x816/0x2fa0 [ 522.980029][ T1042] ? lock_downgrade+0x880/0x880 [ 522.984967][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.991310][ T1042] ? kasan_check_read+0x11/0x20 [ 522.996244][ T1042] ? mm_update_next_owner+0x640/0x640 [ 523.001619][ T1042] ? __x64_sys_io_submit+0x37d/0x580 [ 523.006964][ T1042] ? __ia32_sys_io_destroy+0x420/0x420 [ 523.012517][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 523.017968][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 523.023482][ T1042] do_group_exit+0x135/0x370 [ 523.028071][ T1042] __x64_sys_exit_group+0x44/0x50 [ 523.033129][ T1042] do_syscall_64+0x103/0x610 [ 523.037717][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.043775][ T1042] RIP: 0033:0x43ee98 [ 523.047806][ T1042] Code: 07 c0 fa 02 29 c2 41 8d 43 06 8d 14 92 01 d2 29 d1 83 c1 30 42 88 0c 06 4c 63 c0 42 c6 04 06 00 c3 90 0f b6 57 09 41 b8 14 00 <00> 00 b8 14 00 00 00 b9 13 00 00 00 41 bb 13 00 00 00 80 fa 5a 0f [ 523.069278][ T1042] RSP: 002b:00007ffd0727cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 523.078284][ T1042] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ee98 [ 523.086307][ T1042] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 523.094758][ T1042] RBP: 00000000004be6a8 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 523.102764][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.110833][ T1042] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 523.118911][ T1042] [ 523.118911][ T1042] Showing all locks held in the system: [ 523.126662][ T1042] 1 lock held by khungtaskd/1042: [ 523.131665][ T1042] #0: 00000000f6e6de61 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 523.141416][ T1042] 2 locks held by rsyslogd/7503: [ 523.146470][ T1042] #0: 0000000008bf5302 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 523.155178][ T1042] #1: 0000000044a4c469 (&rq->lock){-.-.}, at: fs_reclaim_acquire.part.0+0x0/0x30 [ 523.164500][ T1042] 2 locks held by getty/7615: [ 523.169159][ T1042] #0: 00000000ba370626 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.178156][ T1042] #1: 0000000063a7c010 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.187830][ T1042] 2 locks held by getty/7616: [ 523.192531][ T1042] #0: 0000000085773e88 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.201489][ T1042] #1: 0000000044eee520 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.211254][ T1042] 2 locks held by getty/7617: [ 523.216077][ T1042] #0: 00000000fe208566 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.225853][ T1042] #1: 00000000d22c0c35 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.235490][ T1042] 2 locks held by getty/7618: [ 523.240154][ T1042] #0: 000000006b052474 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.249249][ T1042] #1: 00000000c1376a63 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.258970][ T1042] 2 locks held by getty/7619: [ 523.263683][ T1042] #0: 000000003e4c3f01 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.272678][ T1042] #1: 000000009105f5e8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.282461][ T1042] 2 locks held by getty/7620: [ 523.287141][ T1042] #0: 0000000015225074 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.296154][ T1042] #1: 0000000004703e71 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.305746][ T1042] 2 locks held by getty/7621: [ 523.310516][ T1042] #0: 0000000072771745 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 523.319626][ T1042] #1: 000000001f1e2294 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 523.329336][ T1042] [ 523.331724][ T1042] ============================================= [ 523.331724][ T1042] [ 523.340211][ T1042] NMI backtrace for cpu 0 [ 523.344574][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc3+ #54 [ 523.352200][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.362305][ T1042] Call Trace: [ 523.366988][ T1042] dump_stack+0x172/0x1f0 [ 523.371306][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 523.376609][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 523.382251][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 523.388226][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 523.394102][ T1042] watchdog+0x9b7/0xec0 [ 523.398413][ T1042] kthread+0x357/0x430 [ 523.402468][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 523.407996][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 523.414324][ T1042] ret_from_fork+0x3a/0x50 [ 523.418857][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 523.424578][ C1] NMI backtrace for cpu 1 [ 523.424583][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.1.0-rc3+ #54 [ 523.424589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.424593][ C1] RIP: 0010:update_blocked_averages+0x53d/0x1760 [ 523.424603][ C1] Code: e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e 60 11 00 00 41 c7 87 78 01 00 00 00 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 <0f> 85 c4 0b 00 00 49 83 bf a0 00 00 00 00 0f 85 a8 04 00 00 49 8d [ 523.424606][ C1] RSP: 0018:ffff8880ae907d40 EFLAGS: 00000046 [ 523.424613][ C1] RAX: 1ffff11015d25a1c RBX: ffff8880ae92d800 RCX: 0000000000000012 [ 523.424618][ C1] RDX: 1ffff11015d25a3a RSI: 0000000000000000 RDI: ffff8880ae92d0c8 [ 523.424623][ C1] RBP: ffff8880ae907de0 R08: ffff8880ae92d180 R09: ffff8880ae92d1d0 [ 523.424627][ C1] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: dffffc0000000000 [ 523.424632][ C1] R13: ffff8880ae92d0e0 R14: ffff88812c3e4a08 R15: ffff8880ae92d040 [ 523.424637][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 523.424641][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.424646][ C1] CR2: ffffffffff600400 CR3: 000000008f155000 CR4: 00000000001406e0 [ 523.424650][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.424655][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.424657][ C1] Call Trace: [ 523.424659][ C1] [ 523.424663][ C1] _nohz_idle_balance+0x367/0x4d0 [ 523.424666][ C1] run_rebalance_domains+0x1d2/0x2e0 [ 523.424669][ C1] __do_softirq+0x266/0x95a [ 523.424672][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 523.424675][ C1] irq_exit+0x180/0x1d0 [ 523.424678][ C1] scheduler_ipi+0x3ac/0x5b0 [ 523.424681][ C1] smp_reschedule_interrupt+0x7e/0x460 [ 523.424685][ C1] reschedule_interrupt+0xf/0x20 [ 523.424687][ C1] [ 523.424690][ C1] RIP: 0010:native_safe_halt+0x2/0x10 [ 523.424700][ C1] Code: ff ff ff 48 89 c7 48 89 45 d8 e8 69 01 98 fa 48 8b 45 d8 e9 ce fe ff ff 48 89 df e8 58 01 98 fa eb 82 90 90 90 90 90 90 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 90 90 90 90 90 90 [ 523.424703][ C1] RSP: 0018:ffff8880aa29fd78 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 523.424711][ C1] RAX: 1ffffffff11252d1 RBX: ffff8880aa28c340 RCX: 0000000000000000 [ 523.424715][ C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880aa28cbbc [ 523.424720][ C1] RBP: ffff8880aa29fda8 R08: ffff8880aa28c340 R09: 0000000000000000 [ 523.424724][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 523.424729][ C1] R13: ffffffff88929678 R14: 0000000000000001 R15: 0000000000000000 [ 523.424732][ C1] ? default_idle+0x4e/0x330 [ 523.424735][ C1] arch_cpu_idle+0x10/0x20 [ 523.424738][ C1] default_idle_call+0x36/0x90 [ 523.424741][ C1] do_idle+0x386/0x570 [ 523.424744][ C1] ? arch_cpu_idle_exit+0x80/0x80 [ 523.424748][ C1] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 523.424751][ C1] ? complete+0x61/0x80 [ 523.424754][ C1] cpu_startup_entry+0x1b/0x20 [ 523.424757][ C1] start_secondary+0x360/0x4d0 [ 523.424761][ C1] ? set_cpu_sibling_map+0x1850/0x1850 [ 523.424764][ C1] secondary_startup_64+0xa4/0xb0 [ 523.425782][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 523.738201][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc3+ #54 [ 523.745732][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.755764][ T1042] Call Trace: [ 523.759037][ T1042] dump_stack+0x172/0x1f0 [ 523.763349][ T1042] panic+0x2cb/0x65c [ 523.767242][ T1042] ? __warn_printk+0xf3/0xf3 [ 523.771829][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 523.777450][ T1042] ? ___preempt_schedule+0x16/0x18 [ 523.782542][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 523.788670][ T1042] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 523.794795][ T1042] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 523.801089][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 523.807243][ T1042] watchdog+0x9c8/0xec0 [ 523.811387][ T1042] kthread+0x357/0x430 [ 523.815433][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 523.821013][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 523.827259][ T1042] ret_from_fork+0x3a/0x50 [ 523.833063][ T1042] Kernel Offset: disabled [ 523.837396][ T1042] Rebooting in 86400 seconds..