[ 33.607338] audit: type=1800 audit(1565531328.394:33): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.634154] audit: type=1800 audit(1565531328.394:34): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.489783] random: sshd: uninitialized urandom read (32 bytes read) [ 36.829343] audit: type=1400 audit(1565531331.614:35): avc: denied { map } for pid=7073 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.881126] random: sshd: uninitialized urandom read (32 bytes read) [ 37.448287] random: sshd: uninitialized urandom read (32 bytes read) [ 601.811493] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. [ 607.325077] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 607.457128] audit: type=1400 audit(1565531902.244:36): avc: denied { map } for pid=7085 comm="syz-executor056" path="/root/syz-executor056047281" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 858.080203] INFO: task syz-executor056:7087 blocked for more than 140 seconds. [ 858.087773] Not tainted 4.14.138 #34 [ 858.092235] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.100489] syz-executor056 D28584 7087 7083 0x00000004 [ 858.106197] Call Trace: [ 858.108922] __schedule+0x7b8/0x1cd0 [ 858.113135] ? pci_mmcfg_check_reserved+0x150/0x150 [ 858.118345] ? save_trace+0x290/0x290 [ 858.122256] ? __lock_is_held+0xb6/0x140 [ 858.126330] schedule+0x92/0x1c0 [ 858.129696] schedule_timeout+0x93b/0xe10 [ 858.133946] ? wait_for_completion+0x274/0x420 [ 858.138532] ? find_held_lock+0x35/0x130 [ 858.142784] ? usleep_range+0x130/0x130 [ 858.146783] ? wait_for_completion+0x274/0x420 [ 858.151530] ? _raw_spin_unlock_irq+0x28/0x90 [ 858.156068] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.161405] wait_for_completion+0x27c/0x420 [ 858.165944] ? wait_for_completion_interruptible+0x490/0x490 [ 858.171926] ? wake_up_q+0xf0/0xf0 [ 858.175527] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.180717] flush_work+0x3eb/0x730 [ 858.184367] ? insert_work+0x320/0x320 [ 858.188250] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 858.193464] ? __cancel_work_timer+0x166/0x480 [ 858.198196] __cancel_work_timer+0x2f0/0x480 [ 858.202828] ? cancel_delayed_work+0x20/0x20 [ 858.207247] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 858.212469] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.217529] cancel_work_sync+0x18/0x20 [ 858.221688] p9_fd_close+0x2ae/0x450 [ 858.225463] p9_client_create+0x787/0x1120 [ 858.229882] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 858.235602] ? __kmalloc_track_caller+0x372/0x790 [ 858.240888] ? __lockdep_init_map+0x10c/0x570 [ 858.245399] ? lockdep_init_map+0x9/0x10 [ 858.249512] ? __raw_spin_lock_init+0x2d/0x100 [ 858.254333] v9fs_session_init+0x1dc/0x1620 [ 858.258756] ? check_preemption_disabled+0x3c/0x250 [ 858.264047] ? v9fs_show_options+0x730/0x730 [ 858.268669] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 858.274448] ? v9fs_mount+0x5e/0x870 [ 858.278215] ? rcu_read_lock_sched_held+0x110/0x130 [ 858.283395] ? kmem_cache_alloc_trace+0x623/0x790 [ 858.288460] ? free_pages+0x46/0x50 [ 858.292324] v9fs_mount+0x7d/0x870 [ 858.295932] mount_fs+0x97/0x2a1 [ 858.299349] vfs_kern_mount.part.0+0x5e/0x3d0 [ 858.303961] do_mount+0x417/0x27d0 [ 858.307520] ? copy_mount_options+0x5c/0x2f0 [ 858.312117] ? rcu_read_lock_sched_held+0x110/0x130 [ 858.317164] ? copy_mount_string+0x40/0x40 [ 858.321514] ? copy_mount_options+0x1fe/0x2f0 [ 858.326039] SyS_mount+0xab/0x120 [ 858.329491] ? copy_mnt_ns+0x8c0/0x8c0 [ 858.333571] do_syscall_64+0x1e8/0x640 [ 858.337471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 858.342484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.347727] RIP: 0033:0x445a89 [ 858.351055] RSP: 002b:00007feb96b55d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.359141] RAX: ffffffffffffffda RBX: 00000000006dac38 RCX: 0000000000445a89 [ 858.366564] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 858.374650] RBP: 00000000006dac30 R08: 0000000020000140 R09: 0000000000000000 [ 858.382153] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000006dac3c [ 858.389610] R13: 0000000020000700 R14: 00000000004ae0a8 R15: 0000000000000005 [ 858.396998] [ 858.396998] Showing all locks held in the system: [ 858.403535] 2 locks held by kworker/0:1/25: [ 858.407948] #0: ("events"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 858.416575] #1: ((&m->wq)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 858.425287] 1 lock held by khungtaskd/1013: [ 858.429610] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 858.438765] 2 locks held by getty/7061: [ 858.443008] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.451798] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.461599] 2 locks held by getty/7062: [ 858.465576] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.474583] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.484339] 2 locks held by getty/7063: [ 858.488353] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.497157] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.506556] 2 locks held by getty/7064: [ 858.510684] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.519382] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.528791] 2 locks held by getty/7065: [ 858.532804] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.541597] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.551122] 2 locks held by getty/7066: [ 858.555140] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.564072] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.573445] 2 locks held by getty/7067: [ 858.577413] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.586213] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 858.595596] [ 858.597215] ============================================= [ 858.597215] [ 858.604621] NMI backtrace for cpu 0 [ 858.608261] CPU: 0 PID: 1013 Comm: khungtaskd Not tainted 4.14.138 #34 [ 858.614908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.624519] Call Trace: [ 858.627147] dump_stack+0x138/0x19c [ 858.630764] nmi_cpu_backtrace.cold+0x57/0x94 [ 858.635339] ? irq_force_complete_move.cold+0x7d/0x7d [ 858.640523] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 858.645790] arch_trigger_cpumask_backtrace+0x14/0x20 [ 858.651000] watchdog+0x5e7/0xb90 [ 858.654441] kthread+0x319/0x430 [ 858.657796] ? hungtask_pm_notify+0x50/0x50 [ 858.662094] ? kthread_create_on_node+0xd0/0xd0 [ 858.666794] ret_from_fork+0x24/0x30 [ 858.670777] Sending NMI from CPU 0 to CPUs 1: [ 858.675372] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff861be0de [ 858.676313] Kernel panic - not syncing: hung_task: blocked tasks [ 858.688899] CPU: 0 PID: 1013 Comm: khungtaskd Not tainted 4.14.138 #34 [ 858.695547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.704887] Call Trace: [ 858.707464] dump_stack+0x138/0x19c [ 858.711135] panic+0x1f2/0x426 [ 858.714311] ? add_taint.cold+0x16/0x16 [ 858.718289] ? irq_force_complete_move.cold+0x7d/0x7d [ 858.724088] watchdog+0x5f8/0xb90 [ 858.727540] kthread+0x319/0x430 [ 858.730894] ? hungtask_pm_notify+0x50/0x50 [ 858.735257] ? kthread_create_on_node+0xd0/0xd0 [ 858.740021] ret_from_fork+0x24/0x30 [ 858.745129] Kernel Offset: disabled [ 858.748865] Rebooting in 86400 seconds..