RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f585f79f6d4 R13: 00000000004c4471 R14: 00000000004d7438 R15: 00000000ffffffff INFO: task syz-executor4:27518 blocked for more than 140 seconds. Not tainted 4.20.0-rc6+ #372 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D24936 27518 12485 0x00000004 Call Trace: context_switch kernel/sched/core.c:2831 [inline] __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472 schedule+0xfe/0x460 kernel/sched/core.c:3516 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3574 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0xaff/0x16f0 kernel/locking/mutex.c:1072 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 process_measurement+0x438/0x1bf0 security/integrity/ima/ima_main.c:224 ima_file_mmap+0x13d/0x160 security/integrity/ima/ima_main.c:340 security_mmap_file+0x16c/0x1b0 security/security.c:949 vm_mmap_pgoff+0x135/0x2c0 mm/util.c:346 ksys_mmap_pgoff+0x4da/0x660 mm/mmap.c:1609 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline] __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457679 Code: Bad RIP value. RSP: 002b:00007f1447c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457679 RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020001000 RBP: 000000000072bfa0 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000000010 R11: 0000000000000246 R12: 00007f1447c0c6d4 R13: 00000000004c2d5e R14: 00000000004d5098 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1019: #0: 000000006efad355 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4379 3 locks held by rs:main Q:Reg/5937: 1 lock held by rsyslogd/5939: #0: 000000003bb02f89 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766 2 locks held by getty/6029: #0: 00000000fcf45100 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000012ae7091 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6030: #0: 00000000d4f861f0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000c3844c20 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6031: #0: 00000000bcce27eb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000008e95f114 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6032: #0: 00000000538d3bc5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000fe089a8b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6033: #0: 000000000780d1c8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 000000002aa19e44 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6034: #0: 00000000935f05e7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 00000000eb1798e7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 2 locks held by getty/6035: #0: 00000000d98aac9f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353 #1: 0000000061641bcf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154 1 lock held by syz-executor4/27513: 1 lock held by syz-executor4/27518: #0: 000000009d7f2471 (&iint->mutex){+.+.}, at: process_measurement+0x438/0x1bf0 security/integrity/ima/ima_main.c:224 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #372 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline] watchdog+0xb51/0x1060 kernel/hung_task.c:289 kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.248 msecs NMI backtrace for cpu 1 CPU: 1 PID: 27513 Comm: syz-executor4 Not tainted 4.20.0-rc6+ #372 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:loop1+0x7c9/0x892 Code: e1 0d 45 31 f5 c5 ed 73 d2 11 45 21 d7 c4 43 7b f0 f2 06 c5 ed ef d3 41 01 d9 44 21 c6 45 31 f5 c4 63 7b f0 f1 16 c5 3d ef c2 <41> 31 c7 c4 42 3d 00 c2 45 31 e6 c4 63 7b f0 e1 02 c4 c1 7d fe c0 RSP: 0018:ffff88818b27f0c0 EFLAGS: 00000282 RAX: 0000000076399517 RBX: 000000000ff3e701 RCX: 000000006d4bb093 RDX: 00000000b87b1fe9 RSI: 000000004538b9a0 RDI: 0000000000000080 RBP: ffff88818b27f350 R08: 0000000045bcf9a0 R09: 00000000bdcecd11 R10: 00000000744c41e4 R11: 00000000b13b2439 R12: 00000000849b6a5d R13: 000000008b7f4ab5 R14: 000000002ec24db5 R15: 0000000044000124 FS: 00007f1447c2d700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c43a7fbb40 CR3: 00000001b2fd7000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sha256_avx2_update+0x2c/0x40 arch/x86/crypto/sha256_ssse3_glue.c:235 crypto_shash_update+0xcf/0x120 crypto/shash.c:116 ima_calc_file_hash_tfm+0x34d/0x450 security/integrity/ima/ima_crypto.c:365 ima_calc_file_shash security/integrity/ima/ima_crypto.c:385 [inline] ima_calc_file_hash+0x222/0x570 security/integrity/ima/ima_crypto.c:450 ima_collect_measurement+0x619/0x730 security/integrity/ima/ima_api.c:232 process_measurement+0x11fd/0x1bf0 security/integrity/ima/ima_main.c:284 ima_file_mmap+0x13d/0x160 security/integrity/ima/ima_main.c:340 security_mmap_file+0x16c/0x1b0 security/security.c:949 vm_mmap_pgoff+0x135/0x2c0 mm/util.c:346 ksys_mmap_pgoff+0x4da/0x660 mm/mmap.c:1609 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline] __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457679 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f1447c2cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457679 RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020001000 RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000000010 R11: 0000000000000246 R12: 00007f1447c2d6d4 R13: 00000000004c2d5e R14: 00000000004d5098 R15: 00000000ffffffff