[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.318047] kauditd_printk_skb: 7 callbacks suppressed [ 26.318059] audit: type=1800 audit(1540604402.294:29): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.345142] audit: type=1800 audit(1540604402.304:30): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 595.841503] INFO: task syz-executor730:7827 blocked for more than 140 seconds. [ 595.849229] Not tainted 4.19.0-rc8-next-20181019+ #98 [ 595.855821] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.863965] syz-executor730 D23336 7827 5603 0x00000004 [ 595.869822] Call Trace: [ 595.875940] __schedule+0x8cf/0x21d0 [ 595.879658] ? find_held_lock+0x36/0x1c0 [ 595.883960] ? __sched_text_start+0x8/0x8 [ 595.888114] ? zap_class+0x640/0x640 [ 595.892040] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 595.896697] ? print_usage_bug+0xc0/0xc0 [ 595.900771] schedule+0xfe/0x460 [ 595.904397] ? __schedule+0x21d0/0x21d0 [ 595.908377] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 595.913197] ? trace_hardirqs_on+0xbd/0x310 [ 595.917517] ? kasan_check_read+0x11/0x20 [ 595.921873] ? rwsem_down_read_failed+0x342/0x710 [ 595.926768] ? trace_hardirqs_off_caller+0x300/0x300 [ 595.932176] rwsem_down_read_failed+0x371/0x710 [ 595.936846] ? rwsem_down_write_failed_killable+0x10/0x10 [ 595.942768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.948310] ? blkg_prfill_rwstat_field_recursive+0x170/0x170 [ 595.954471] ? lock_acquire+0x1ed/0x520 [ 595.958444] ? __do_page_fault+0xbb0/0xe40 [ 595.963062] ? lock_release+0xa10/0xa10 [ 595.967038] ? perf_trace_sched_process_exec+0x860/0x860 [ 595.972697] ? kasan_check_read+0x11/0x20 [ 595.976880] ? do_raw_spin_unlock+0xa7/0x330 [ 595.982090] call_rwsem_down_read_failed+0x18/0x30 [ 595.987098] down_read+0x9b/0x120 [ 595.990546] ? __do_page_fault+0xbb0/0xe40 [ 595.995008] ? __down_interruptible+0x700/0x700 [ 595.999788] ? __close_fd+0x24c/0x3a0 [ 596.003798] ? clock_was_set_work+0x30/0x30 [ 596.008146] __do_page_fault+0xbb0/0xe40 [ 596.012454] ? trace_hardirqs_off+0xb8/0x310 [ 596.016884] ? exit_to_usermode_loop+0x1f4/0x380 [ 596.021886] do_page_fault+0xed/0x7d1 [ 596.025690] ? vmalloc_sync_all+0x30/0x30 [ 596.029822] ? error_entry+0x70/0xd0 [ 596.033831] ? trace_hardirqs_off_caller+0xbb/0x300 [ 596.038878] ? trace_hardirqs_on_caller+0xc0/0x310 [ 596.044045] ? syscall_return_slowpath+0x5e0/0x5e0 [ 596.048971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.054069] ? trace_hardirqs_on_caller+0x310/0x310 [ 596.059191] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 596.064862] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.069910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 596.075214] ? page_fault+0x8/0x30 [ 596.078771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.083934] ? page_fault+0x8/0x30 [ 596.087480] page_fault+0x1e/0x30 [ 596.090917] RIP: 0033:0x4ab5dd [ 596.094333] Code: Bad RIP value. [ 596.097693] RSP: 002b:00007ffd86f75bb0 EFLAGS: 00010202 [ 596.103257] RAX: 00000000004ab700 RBX: 0000000000000001 RCX: 00000000006e0350 [ 596.110517] RDX: 00000000004073b0 RSI: 0000000000000000 RDI: 00000000004cc9d0 [ 596.118512] RBP: 00007ffd86f75bd0 R08: 000000037ffffa00 R09: 000000037ffffa00 [ 596.125965] R10: 00007ffd86f75c40 R11: 0000000000000000 R12: 0000000000000001 [ 596.133427] R13: 00000000006e0340 R14: 0000000000000008 R15: 00000000006dbd4c [ 596.140702] INFO: task syz-executor730:7828 blocked for more than 140 seconds. [ 596.148296] Not tainted 4.19.0-rc8-next-20181019+ #98 [ 596.154184] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.162425] syz-executor730 D23400 7828 5603 0x80000004 [ 596.168058] Call Trace: [ 596.170637] __schedule+0x8cf/0x21d0 [ 596.174576] ? __sched_text_start+0x8/0x8 [ 596.178726] ? zap_class+0x640/0x640 [ 596.182701] ? print_usage_bug+0xc0/0xc0 [ 596.186757] ? mark_held_locks+0x130/0x130 [ 596.190997] schedule+0xfe/0x460 [ 596.194584] ? __schedule+0x21d0/0x21d0 [ 596.198558] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 596.203428] ? trace_hardirqs_on+0xbd/0x310 [ 596.207749] ? kasan_check_read+0x11/0x20 [ 596.212091] ? rwsem_down_read_failed+0x342/0x710 [ 596.216932] ? trace_hardirqs_off_caller+0x300/0x300 [ 596.222266] ? zap_class+0x640/0x640 [ 596.225983] rwsem_down_read_failed+0x371/0x710 [ 596.230639] ? rwsem_down_write_failed_killable+0x10/0x10 [ 596.236430] ? find_held_lock+0x36/0x1c0 [ 596.240499] ? __might_fault+0x12b/0x1e0 [ 596.245333] ? lock_acquire+0x1ed/0x520 [ 596.249315] ? do_exit+0x59c/0x26d0 [ 596.253156] ? lock_release+0xa10/0xa10 [ 596.257128] ? perf_trace_sched_process_exec+0x860/0x860 [ 596.262775] call_rwsem_down_read_failed+0x18/0x30 [ 596.267709] down_read+0x9b/0x120 [ 596.271151] ? do_exit+0x59c/0x26d0 [ 596.275074] ? __down_interruptible+0x700/0x700 [ 596.279772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.285633] ? sync_mm_rss+0x9a/0x1c0 [ 596.289531] do_exit+0x59c/0x26d0 [ 596.293201] ? do_raw_spin_trylock+0x250/0x270 [ 596.297853] ? mm_update_next_owner+0x990/0x990 [ 596.302833] ? print_usage_bug+0xc0/0xc0 [ 596.306891] ? zap_class+0x640/0x640 [ 596.310607] ? find_held_lock+0x36/0x1c0 [ 596.314866] ? __lock_acquire+0x62f/0x4c20 [ 596.319107] ? lock_downgrade+0x900/0x900 [ 596.323486] ? mark_held_locks+0x130/0x130 [ 596.327844] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.333264] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 596.338434] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 596.344343] ? futex_wait+0x5ec/0xa50 [ 596.348153] ? futex_wait_setup+0x3e0/0x3e0 [ 596.352688] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.357888] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 596.363218] ? futex_wake+0x304/0x760 [ 596.367079] ? zap_class+0x640/0x640 [ 596.370788] ? memset+0x31/0x40 [ 596.374774] ? find_held_lock+0x36/0x1c0 [ 596.378838] ? get_signal+0x953/0x1970 [ 596.382945] ? _raw_spin_unlock_irq+0x27/0x80 [ 596.387442] ? _raw_spin_unlock_irq+0x27/0x80 [ 596.392150] do_group_exit+0x177/0x440 [ 596.396096] ? trace_hardirqs_off_caller+0x300/0x300 [ 596.401523] ? __ia32_sys_exit+0x50/0x50 [ 596.405592] get_signal+0x8a8/0x1970 [ 596.409302] ? ptrace_notify+0x130/0x130 [ 596.413585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.419125] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 596.424947] ? refcount_add_not_zero_checked+0x330/0x330 [ 596.430472] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.435932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.441660] do_signal+0x9c/0x21c0 [ 596.445204] ? setup_sigcontext+0x7d0/0x7d0 [ 596.449523] ? cap_mmap_addr+0x130/0x130 [ 596.453850] ? exit_to_usermode_loop+0x8c/0x380 [ 596.458519] ? exit_to_usermode_loop+0x8c/0x380 [ 596.463401] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 596.467980] ? trace_hardirqs_on+0xbd/0x310 [ 596.472487] ? cap_capable+0x1f9/0x260 [ 596.476372] ? do_syscall_64+0x6be/0x820 [ 596.480419] ? __x64_sys_futex+0x47f/0x6a0 [ 596.484848] exit_to_usermode_loop+0x2e5/0x380 [ 596.489497] ? __bpf_trace_sys_exit+0x30/0x30 [ 596.494235] ? __sys_setresuid+0x6f3/0x820 [ 596.498482] do_syscall_64+0x6be/0x820 [ 596.503134] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 596.508608] ? syscall_return_slowpath+0x5e0/0x5e0 [ 596.513824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.518668] ? trace_hardirqs_on_caller+0x310/0x310 [ 596.523998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.529016] ? prepare_exit_to_usermode+0x291/0x3b0 [ 596.534295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.539143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.544551] RIP: 0033:0x446569 [ 596.547741] Code: 63 65 20 69 73 20 65 6d 70 74 79 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 2e 2f 63 6f 6e 66 69 67 75 72 65 20 2d <2d> 65 6e 61 62 6c 65 2d 72 74 69 6e 73 74 0a 00 00 00 00 00 00 00 [ 596.567154] RSP: 002b:00007f1037700db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 596.575131] RAX: fffffffffffffe00 RBX: 00000000006dbc48 RCX: 0000000000446569 [ 596.582604] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000006dbc48 [ 596.589877] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000 [ 596.597370] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 596.604948] R13: 00007ffd86f75baf R14: 00007f10377019c0 R15: 00000000006dbd4c [ 596.612561] INFO: task syz-executor730:7829 blocked for more than 140 seconds. [ 596.619914] Not tainted 4.19.0-rc8-next-20181019+ #98 [ 596.625802] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.634443] syz-executor730 D23472 7829 5603 0x80000004 [ 596.640071] Call Trace: [ 596.642850] __schedule+0x8cf/0x21d0 [ 596.646690] ? __sched_text_start+0x8/0x8 [ 596.650840] ? zap_class+0x640/0x640 [ 596.654847] ? print_usage_bug+0xc0/0xc0 [ 596.658928] ? mark_held_locks+0x130/0x130 [ 596.663406] schedule+0xfe/0x460 [ 596.666787] ? __schedule+0x21d0/0x21d0 [ 596.670765] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 596.675602] ? trace_hardirqs_on+0xbd/0x310 [ 596.679935] ? kasan_check_read+0x11/0x20 [ 596.684274] ? rwsem_down_read_failed+0x342/0x710 [ 596.689116] ? trace_hardirqs_off_caller+0x300/0x300 [ 596.694491] ? zap_class+0x640/0x640 [ 596.698214] rwsem_down_read_failed+0x371/0x710 [ 596.703090] ? rwsem_down_write_failed_killable+0x10/0x10 [ 596.708810] ? find_held_lock+0x36/0x1c0 [ 596.713105] ? __might_fault+0x12b/0x1e0 [ 596.717175] ? lock_acquire+0x1ed/0x520 [ 596.721180] ? do_exit+0x59c/0x26d0 [ 596.725106] ? lock_release+0xa10/0xa10 [ 596.729192] ? perf_trace_sched_process_exec+0x860/0x860 [ 596.734863] call_rwsem_down_read_failed+0x18/0x30 [ 596.739796] down_read+0x9b/0x120 [ 596.743517] ? do_exit+0x59c/0x26d0 [ 596.747145] ? __down_interruptible+0x700/0x700 [ 596.752053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.757627] ? sync_mm_rss+0x9a/0x1c0 [ 596.762205] do_exit+0x59c/0x26d0 [ 596.765663] ? do_raw_spin_trylock+0x250/0x270 [ 596.770235] ? mm_update_next_owner+0x990/0x990 [ 596.775192] ? print_usage_bug+0xc0/0xc0 [ 596.779272] ? zap_class+0x640/0x640 [ 596.783217] ? find_held_lock+0x36/0x1c0 [ 596.787302] ? __lock_acquire+0x62f/0x4c20 [ 596.791881] ? lock_downgrade+0x900/0x900 [ 596.796077] ? mark_held_locks+0x130/0x130 [ 596.800306] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.805705] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 596.810821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 596.816578] ? futex_wait+0x5ec/0xa50 [ 596.820381] ? futex_wait_setup+0x3e0/0x3e0 [ 596.824894] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.830086] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 596.835439] ? futex_wake+0x304/0x760 [ 596.839255] ? zap_class+0x640/0x640 [ 596.843189] ? memset+0x31/0x40 [ 596.846539] ? find_held_lock+0x36/0x1c0 [ 596.850601] ? get_signal+0x953/0x1970 [ 596.854868] ? _raw_spin_unlock_irq+0x27/0x80 [ 596.859362] ? _raw_spin_unlock_irq+0x27/0x80 [ 596.864142] do_group_exit+0x177/0x440 [ 596.868035] ? trace_hardirqs_off_caller+0x300/0x300 [ 596.873522] ? __ia32_sys_exit+0x50/0x50 [ 596.877584] get_signal+0x8a8/0x1970 [ 596.881527] ? ptrace_notify+0x130/0x130 [ 596.885596] ? ksys_dup3+0x680/0x680 [ 596.889376] do_signal+0x9c/0x21c0 [ 596.893806] ? perf_ioctl+0x6d/0x80 [ 596.897440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.903310] ? do_vfs_ioctl+0x201/0x1720 [ 596.907375] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 596.912797] ? setup_sigcontext+0x7d0/0x7d0 [ 596.917118] ? ioctl_preallocate+0x300/0x300 [ 596.921716] ? exit_to_usermode_loop+0x8c/0x380 [ 596.926383] ? exit_to_usermode_loop+0x8c/0x380 [ 596.931042] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 596.935842] ? trace_hardirqs_on+0xbd/0x310 [ 596.940210] ? do_syscall_64+0x6be/0x820 [ 596.944523] ? __x64_sys_futex+0x47f/0x6a0 [ 596.948762] exit_to_usermode_loop+0x2e5/0x380 [ 596.953596] ? __bpf_trace_sys_exit+0x30/0x30 [ 596.958090] ? ksys_ioctl+0x81/0xd0 [ 596.961970] do_syscall_64+0x6be/0x820 [ 596.965855] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 596.971685] ? syscall_return_slowpath+0x5e0/0x5e0 [ 596.976617] ? trace_hardirqs_on_caller+0x310/0x310 [ 596.981891] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.986912] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 596.993786] ? __switch_to_asm+0x40/0x70 [ 596.997839] ? __switch_to_asm+0x34/0x70 [ 597.002152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.006994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.012396] RIP: 0033:0x446569 [ 597.015589] Code: 63 65 20 69 73 20 65 6d 70 74 79 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 2e 2f 63 6f 6e 66 69 67 75 72 65 20 2d <2d> 65 6e 61 62 6c 65 2d 72 74 69 6e 73 74 0a 00 00 00 00 00 00 00 [ 597.035432] RSP: 002b:00007f10376dfdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.043348] RAX: fffffffffffffe00 RBX: 00000000006dbc58 RCX: 0000000000446569 [ 597.050614] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000006dbc58 [ 597.058090] RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000 [ 597.065567] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc5c [ 597.073049] R13: 00007ffd86f75baf R14: 00007f10376e09c0 R15: 00000000006dbd4c [ 597.080329] [ 597.080329] Showing all locks held in the system: [ 597.086886] 1 lock held by khungtaskd/982: [ 597.091109] #0: 00000000e415a54a (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 597.099947] 1 lock held by rsyslogd/5486: [ 597.104339] #0: 00000000ad3fe44b (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 597.112547] 2 locks held by getty/5575: [ 597.116511] #0: 000000005b3583de (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.125196] #1: 00000000acd546e2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.134261] 2 locks held by getty/5576: [ 597.138345] #0: 0000000069f65f0e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.146939] #1: 000000007216cb9a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.156160] 2 locks held by getty/5577: [ 597.160147] #0: 000000009520ab56 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.169136] #1: 000000001c00c669 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.178183] 2 locks held by getty/5578: [ 597.182349] #0: 0000000067ed37ba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.190586] #1: 00000000be81bcc0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.199648] 2 locks held by getty/5579: [ 597.203807] #0: 0000000023caeefd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.212271] #1: 00000000aace2394 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.221114] 2 locks held by getty/5580: [ 597.225412] #0: 00000000786e2310 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.233851] #1: 0000000087eb604b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.242955] 2 locks held by getty/5581: [ 597.246953] #0: 00000000c7cefdab (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 597.255492] #1: 00000000b36ac022 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 597.264632] 1 lock held by syz-executor730/7827: [ 597.269381] #0: 00000000b5f3f953 (&mm->mmap_sem){++++}, at: __do_page_fault+0xbb0/0xe40 [ 597.277856] 1 lock held by syz-executor730/7828: [ 597.282899] #0: 00000000b5f3f953 (&mm->mmap_sem){++++}, at: do_exit+0x59c/0x26d0 [ 597.290640] 1 lock held by syz-executor730/7829: [ 597.296061] #0: 00000000b5f3f953 (&mm->mmap_sem){++++}, at: do_exit+0x59c/0x26d0 [ 597.303986] 1 lock held by syz-executor730/7830: [ 597.308736] [ 597.310347] ============================================= [ 597.310347] [ 597.317564] NMI backtrace for cpu 0 [ 597.321366] CPU: 0 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc8-next-20181019+ #98 [ 597.329405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.338748] Call Trace: [ 597.341343] dump_stack+0x244/0x39d [ 597.344958] ? dump_stack_print_info.cold.1+0x20/0x20 [ 597.350146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.355675] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 597.360342] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 597.365518] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 597.370789] arch_trigger_cpumask_backtrace+0x14/0x20 [ 597.375965] watchdog+0xb39/0x1050 [ 597.379511] ? reset_hung_task_detector+0xd0/0xd0 [ 597.384345] ? __kthread_parkme+0xce/0x1a0 [ 597.388572] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 597.393667] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 597.398761] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 597.403331] ? trace_hardirqs_on+0xbd/0x310 [ 597.407638] ? kasan_check_read+0x11/0x20 [ 597.411899] ? __kthread_parkme+0xce/0x1a0 [ 597.416123] ? trace_hardirqs_off_caller+0x300/0x300 [ 597.421211] ? trace_hardirqs_off_caller+0x300/0x300 [ 597.426298] ? lockdep_init_map+0x9/0x10 [ 597.430347] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 597.435469] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 597.441109] ? __kthread_parkme+0xfb/0x1a0 [ 597.445335] ? reset_hung_task_detector+0xd0/0xd0 [ 597.450165] kthread+0x35a/0x440 [ 597.453521] ? kthread_stop+0x8f0/0x8f0 [ 597.457616] ret_from_fork+0x3a/0x50 [ 597.461389] Sending NMI from CPU 0 to CPUs 1: [ 597.466528] NMI backtrace for cpu 1 [ 597.466534] CPU: 1 PID: 7830 Comm: syz-executor730 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 597.466538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.466541] RIP: 0010:lock_is_held_type+0x18b/0x210 [ 597.466549] Code: ff df 41 c7 84 24 7c 08 00 00 00 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 63 48 83 3d 9c 84 d1 07 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e8 5b 41 5c 41 5d 5d c3 48 83 c4 [ 597.466552] RSP: 0018:ffff8801b907f040 EFLAGS: 00000282 [ 597.466557] RAX: dffffc0000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 597.466561] RDX: 1ffffffff1263f96 RSI: 0000000000000000 RDI: 0000000000000282 [ 597.466564] RBP: ffff8801b907f060 R08: ffffffff819826bb R09: ffffed0037354616 [ 597.466568] R10: ffff8801b907f500 R11: ffff8801b9aa30b7 R12: ffff8801ce486700 [ 597.466571] R13: 0000000000000000 R14: ffffffff880b1b80 R15: 000000000000038c [ 597.466575] FS: 00007f10376bf700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 597.466578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.466582] CR2: ffffffffff600400 CR3: 00000001d2912000 CR4: 00000000001406e0 [ 597.466585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.466588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.466590] Call Trace: [ 597.466593] ___might_sleep+0x27f/0x340 [ 597.466595] ? perf_trace_sched_process_exec+0x860/0x860 [ 597.466598] ? perf_mmap+0x86b/0x1cb0 [ 597.466600] __might_sleep+0x95/0x190 [ 597.466602] ? perf_mmap+0x86b/0x1cb0 [ 597.466604] __mutex_lock+0x138/0x16f0 [ 597.466607] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.466609] ? perf_mmap+0x86b/0x1cb0 [ 597.466612] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 597.466614] ? mutex_trylock+0x2b0/0x2b0 [ 597.466616] ? find_held_lock+0x36/0x1c0 [ 597.466618] ? perf_mmap+0x858/0x1cb0 [ 597.466621] ? lock_downgrade+0x900/0x900 [ 597.466623] ? mark_held_locks+0xc7/0x130 [ 597.466626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.466628] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 597.466631] ? kasan_check_write+0x14/0x20 [ 597.466633] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 597.466636] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 597.466639] ? wait_for_completion+0x8a0/0x8a0 [ 597.466641] ? retint_kernel+0x2d/0x2d [ 597.466643] mutex_lock_nested+0x16/0x20 [ 597.466646] ? mutex_lock_nested+0x16/0x20 [ 597.466648] perf_mmap+0x86b/0x1cb0 [ 597.466650] ? perf_release+0x50/0x50 [ 597.466652] ? find_held_lock+0x36/0x1c0 [ 597.466655] ? zap_class+0x640/0x640 [ 597.466658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.466660] ? check_preemption_disabled+0x48/0x280 [ 597.466663] ? __lock_is_held+0xb5/0x140 [ 597.466665] ? rcu_read_lock_sched_held+0x14f/0x180 [ 597.466668] ? kmem_cache_alloc+0x33a/0x730 [ 597.466670] ? memset+0x31/0x40 [ 597.466672] ? vm_area_alloc+0x15a/0x1d0 [ 597.466675] ? arch_release_thread_stack+0x10/0x10 [ 597.466677] mmap_region+0xe85/0x1cd0 [ 597.466679] ? __x64_sys_brk+0x8b0/0x8b0 [ 597.466681] ? zap_class+0x640/0x640 [ 597.466684] ? exit_robust_list+0x280/0x280 [ 597.466686] ? mpx_unmapped_area_check+0xd8/0x108 [ 597.466694] ? arch_get_unmapped_area+0x750/0x750 [ 597.466697] ? lock_acquire+0x1ed/0x520 [ 597.466699] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 597.466702] ? cap_mmap_addr+0x52/0x130 [ 597.466705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.466707] ? security_mmap_addr+0x80/0xa0 [ 597.466710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 597.466712] ? get_unmapped_area+0x292/0x3b0 [ 597.466714] do_mmap+0xa22/0x1230 [ 597.466717] ? mmap_region+0x1cd0/0x1cd0 [ 597.466719] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 597.466722] ? down_read_killable+0x150/0x150 [ 597.466724] ? security_mmap_file+0x174/0x1b0 [ 597.466726] vm_mmap_pgoff+0x213/0x2c0 [ 597.466729] ? vma_is_stack_for_current+0xd0/0xd0 [ 597.466731] ? fput+0x130/0x1a0 [ 597.466734] ksys_mmap_pgoff+0x4da/0x660 [ 597.466736] ? do_syscall_64+0x9a/0x820 [ 597.466739] ? find_mergeable_anon_vma+0xd0/0xd0 [ 597.466741] ? trace_hardirqs_on+0xbd/0x310 [ 597.466744] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.466747] ? trace_hardirqs_off_caller+0x300/0x300 [ 597.466749] __x64_sys_mmap+0xe9/0x1b0 [ 597.466752] do_syscall_64+0x1b9/0x820 [ 597.466755] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 597.466757] ? syscall_return_slowpath+0x5e0/0x5e0 [ 597.466760] ? trace_hardirqs_on_caller+0x310/0x310 [ 597.466763] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 597.466766] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 597.466769] ? __switch_to_asm+0x40/0x70 [ 597.466771] ? __switch_to_asm+0x34/0x70 [ 597.466774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.466776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.466778] RIP: 0033:0x446569 [ 597.466786] Code: e8 2c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.466789] RSP: 002b:00007f10376beda8 EFLAGS: 00000216 ORIG_RAX: 0000000000000009 [ 597.466795] RAX: ffffffffffffffda RBX: 00000000006dbc68 RCX: 0000000000446569 [ 597.466798] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 597.466802] RBP: 00000000006dbc60 R08: 0000000000000003 R09: 0000000000000000 [ 597.466805] R10: 0000000000000011 R11: 0000000000000216 R12: 00000000006dbc6c [ 597.466809] R13: 00007ffd86f75baf R14: 00007f10376bf9c0 R15: 00000000006dbd4c [ 597.475310] Kernel panic - not syncing: hung_task: blocked tasks [ 597.985338] CPU: 0 PID: 982 Comm: khungtaskd Not tainted 4.19.0-rc8-next-20181019+ #98 [ 597.993396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.002751] Call Trace: [ 598.005357] dump_stack+0x244/0x39d [ 598.008995] ? dump_stack_print_info.cold.1+0x20/0x20 [ 598.014192] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 598.019224] panic+0x2ad/0x55c [ 598.022430] ? add_taint.cold.5+0x16/0x16 [ 598.026590] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 598.032046] ? nmi_trigger_cpumask_backtrace+0x1f9/0x22a [ 598.037501] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 598.042960] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 598.048421] watchdog+0xb4a/0x1050 [ 598.051982] ? reset_hung_task_detector+0xd0/0xd0 [ 598.056833] ? __kthread_parkme+0xce/0x1a0 [ 598.061075] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 598.066187] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 598.071303] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 598.075911] ? trace_hardirqs_on+0xbd/0x310 [ 598.080236] ? kasan_check_read+0x11/0x20 [ 598.084412] ? __kthread_parkme+0xce/0x1a0 [ 598.088657] ? trace_hardirqs_off_caller+0x300/0x300 [ 598.093770] ? trace_hardirqs_off_caller+0x300/0x300 [ 598.098878] ? lockdep_init_map+0x9/0x10 [ 598.102954] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 598.108062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 598.113609] ? __kthread_parkme+0xfb/0x1a0 [ 598.117853] ? reset_hung_task_detector+0xd0/0xd0 [ 598.122699] kthread+0x35a/0x440 [ 598.126070] ? kthread_stop+0x8f0/0x8f0 [ 598.130051] ret_from_fork+0x3a/0x50 [ 598.134785] Kernel Offset: disabled [ 598.138416] Rebooting in 86400 seconds..