[   36.577617][   T26] audit: type=1800 audit(1553656041.430:26): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   36.610784][   T26] audit: type=1800 audit(1553656041.430:27): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   36.641498][   T26] audit: type=1800 audit(1553656041.430:28): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   37.466433][   T26] audit: type=1800 audit(1553656042.350:29): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [  545.201341][ T1043] INFO: task syz-executor756:7757 blocked for more than 143 seconds.
[  545.209717][ T1043]       Not tainted 5.1.0-rc2+ #38
[  545.214884][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  545.223570][ T1043] syz-executor756 D28216  7757   7755 0xa0020000
[  545.229913][ T1043] Call Trace:
[  545.233312][ T1043]  __schedule+0x817/0x1cc0
[  545.237726][ T1043]  ? __sched_text_start+0x8/0x8
[  545.242667][ T1043]  ? __lock_acquire+0x242a/0x3fb0
[  545.247768][ T1043]  schedule+0x92/0x180
[  545.251983][ T1043]  schedule_timeout+0x8ca/0xfd0
[  545.256825][ T1043]  ? wait_for_completion+0x294/0x440
[  545.262144][ T1043]  ? find_held_lock+0x35/0x130
[  545.266968][ T1043]  ? usleep_range+0x170/0x170
[  545.271751][ T1043]  ? kasan_check_write+0x14/0x20
[  545.276715][ T1043]  ? _raw_spin_unlock_irq+0x28/0x90
[  545.281955][ T1043]  ? wait_for_completion+0x294/0x440
[  545.287230][ T1043]  ? _raw_spin_unlock_irq+0x28/0x90
[  545.292523][ T1043]  ? lockdep_hardirqs_on+0x418/0x5d0
[  545.297843][ T1043]  ? trace_hardirqs_on+0x67/0x230
[  545.302895][ T1043]  ? kasan_check_read+0x11/0x20
[  545.307740][ T1043]  wait_for_completion+0x29c/0x440
[  545.312891][ T1043]  ? lockdep_hardirqs_on+0x418/0x5d0
[  545.318163][ T1043]  ? wait_for_completion_interruptible+0x4b0/0x4b0
[  545.324763][ T1043]  ? wake_up_q+0xf0/0xf0
[  545.329093][ T1043]  ? percpu_ref_kill_and_confirm+0x1b7/0x3b0
[  545.335187][ T1043]  exit_aio+0x321/0x3a0
[  545.339337][ T1043]  ? io_submit_one+0x1cf0/0x1cf0
[  545.344469][ T1043]  ? mutex_unlock+0xd/0x10
[  545.349087][ T1043]  mmput+0xcf/0x4c0
[  545.352987][ T1043]  do_exit+0x816/0x2fa0
[  545.357176][ T1043]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  545.363472][ T1043]  ? __check_heap_object+0x71/0xb3
[  545.368569][ T1043]  ? mm_update_next_owner+0x640/0x640
[  545.373986][ T1043]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  545.380354][ T1043]  ? __ia32_compat_sys_io_submit+0x356/0x570
[  545.386391][ T1043]  ? __ia32_sys_io_submit+0x560/0x560
[  545.392079][ T1043]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  545.397523][ T1043]  do_group_exit+0x135/0x370
[  545.402172][ T1043]  __ia32_sys_exit_group+0x44/0x50
[  545.407273][ T1043]  do_fast_syscall_32+0x281/0xc98
[  545.412379][ T1043]  entry_SYSENTER_compat+0x70/0x7f
[  545.417482][ T1043] RIP: 0023:0xf7f0a869
[  545.421647][ T1043] Code: Bad RIP value.
[  545.425705][ T1043] RSP: 002b:00000000ffcc24dc EFLAGS: 00000292 ORIG_RAX: 00000000000000fc
[  545.434265][ T1043] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000080eb2b8
[  545.442558][ T1043] RDX: 0000000000000000 RSI: 00000000080d5ff8 RDI: 00000000080eb2c0
[  545.450516][ T1043] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  545.458532][ T1043] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  545.466568][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  545.474664][ T1043] 
[  545.474664][ T1043] Showing all locks held in the system:
[  545.482465][ T1043] 1 lock held by khungtaskd/1043:
[  545.487467][ T1043]  #0: 00000000fd907a1d (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e
[  545.496825][ T1043] 1 lock held by rsyslogd/7644:
[  545.501678][ T1043]  #0: 000000008f9185b0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  545.510281][ T1043] 2 locks held by getty/7734:
[  545.515001][ T1043]  #0: 000000007be388cf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.523968][ T1043]  #1: 00000000dea0fe3e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.533615][ T1043] 2 locks held by getty/7735:
[  545.538268][ T1043]  #0: 000000004f6a2f4f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.547247][ T1043]  #1: 0000000015e4f7d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.556830][ T1043] 2 locks held by getty/7736:
[  545.561540][ T1043]  #0: 00000000e5a697f3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.570462][ T1043]  #1: 0000000018739fc8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.580059][ T1043] 2 locks held by getty/7737:
[  545.584745][ T1043]  #0: 00000000bcb51a84 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.593729][ T1043]  #1: 0000000032138f7c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.603899][ T1043] 2 locks held by getty/7738:
[  545.608562][ T1043]  #0: 0000000009bf510d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.617546][ T1043]  #1: 00000000df43d294 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.627123][ T1043] 2 locks held by getty/7739:
[  545.631820][ T1043]  #0: 00000000061156bd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.640744][ T1043]  #1: 00000000ab58814b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.650444][ T1043] 2 locks held by getty/7740:
[  545.655132][ T1043]  #0: 0000000051580d9a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  545.664241][ T1043]  #1: 000000000cbb20aa (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  545.673813][ T1043] 
[  545.676123][ T1043] =============================================
[  545.676123][ T1043] 
[  545.684552][ T1043] NMI backtrace for cpu 1
[  545.688862][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc2+ #38
[  545.696380][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  545.706441][ T1043] Call Trace:
[  545.709772][ T1043]  dump_stack+0x172/0x1f0
[  545.714085][ T1043]  nmi_cpu_backtrace.cold+0x63/0xa4
[  545.719297][ T1043]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  545.724907][ T1043]  nmi_trigger_cpumask_backtrace+0x1be/0x236
[  545.730984][ T1043]  arch_trigger_cpumask_backtrace+0x14/0x20
[  545.736861][ T1043]  watchdog+0x9b7/0xec0
[  545.741087][ T1043]  kthread+0x357/0x430
[  545.745155][ T1043]  ? reset_hung_task_detector+0x30/0x30
[  545.750686][ T1043]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  545.757087][ T1043]  ret_from_fork+0x3a/0x50
[  545.761647][ T1043] Sending NMI from CPU 1 to CPUs 0:
[  545.766919][    C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10
[  545.767843][ T1043] Kernel panic - not syncing: hung_task: blocked tasks
[  545.782058][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc2+ #38
[  545.789575][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  545.799705][ T1043] Call Trace:
[  545.802981][ T1043]  dump_stack+0x172/0x1f0
[  545.807349][ T1043]  panic+0x2cb/0x65c
[  545.811228][ T1043]  ? __warn_printk+0xf3/0xf3
[  545.815796][ T1043]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  545.821545][ T1043]  ? printk_safe_flush+0xf2/0x140
[  545.826558][ T1043]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  545.832787][ T1043]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  545.838401][ T1043]  ? nmi_trigger_cpumask_backtrace+0x1a7/0x236
[  545.844545][ T1043]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  545.850678][ T1043]  watchdog+0x9c8/0xec0
[  545.854820][ T1043]  kthread+0x357/0x430
[  545.858867][ T1043]  ? reset_hung_task_detector+0x30/0x30
[  545.864396][ T1043]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  545.870622][ T1043]  ret_from_fork+0x3a/0x50
[  545.875842][ T1043] Kernel Offset: disabled
[  545.880163][ T1043] Rebooting in 86400 seconds..