[....] Starting enhanced syslogd: rsyslogd[ 14.606855] audit: type=1400 audit(1552391169.678:4): avc: denied { syslog } for pid=1923 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.025175] BUG: sleeping function called from invalid context at mm/page-writeback.c:2120 [ 40.033637] in_atomic(): 1, irqs_disabled(): 0, pid: 0, name: swapper/1 [ 40.040387] no locks held by swapper/1/0. [ 40.044526] Preemption disabled at:[] cpu_startup_entry+0x755/0x810 [ 40.052632] [ 40.054271] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.174+ #4 [ 40.060495] 0000000000000000 d7ee000cd50c6b37 ffff8801db707520 ffffffff81aad1a1 [ 40.068562] ffff8801da6897c0 0000000000000101 ffff8801da6897c0 0000000000000101 [ 40.076736] ffff8801da6897c0 ffff8801db707558 ffffffff813a6f33 0000000000000000 [ 40.084800] Call Trace: [ 40.087358] [] dump_stack+0xc1/0x120 [ 40.093441] [] ___might_sleep.cold+0x1c6/0x1dc [ 40.099656] [] tag_pages_for_writeback+0xa0/0x1a0 [ 40.106242] [] ? __wb_calc_thresh+0x2b0/0x2b0 [ 40.112369] [] ? radix_tree_tagged+0x11/0x60 [ 40.118410] [] ext4_writepages+0xaf9/0x2c40 [ 40.124368] [] ? trace_hardirqs_on+0x10/0x10 [ 40.130419] [] ? ext4_mark_inode_dirty+0xbf0/0xbf0 [ 40.136993] [] ? depot_save_stack+0x20c/0x5f0 [ 40.143120] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 40.150042] [] ? trace_hardirqs_on+0xd/0x10 [ 40.156042] [] ? ext4_mark_inode_dirty+0xbf0/0xbf0 [ 40.162614] [] do_writepages+0xfc/0x1e0 [ 40.168441] [] ? ratelimit_handler+0x50/0x50 [ 40.174527] [] ? kmem_cache_free+0xbe/0x350 [ 40.180757] [] ? ext4_release_io_end+0x15c/0x220 [ 40.187179] [] ? ext4_put_io_end+0x83/0x200 [ 40.193147] [] ? ext4_end_io_dio+0x94/0xc0 [ 40.199062] [] ? dio_complete+0x1a9/0x720 [ 40.204850] [] ? dio_bio_end_aio+0x176/0x3f0 [ 40.210898] [] ? bio_endio+0x187/0x1e0 [ 40.217585] [] ? blk_update_request+0x267/0xa50 [ 40.223890] [] ? scsi_end_request+0x9c/0x5d0 [ 40.229946] [] ? scsi_io_completion+0x275/0x1810 [ 40.236438] [] ? scsi_finish_command+0x3a4/0x520 [ 40.242870] [] ? scsi_softirq_done+0x259/0x370 [ 40.249226] [] ? blk_done_softirq+0x258/0x3a0 [ 40.255357] [] ? __do_softirq+0x226/0xa3f [ 40.261151] [] ? irq_exit+0x10a/0x150 [ 40.266632] [] ? do_IRQ+0x111/0x1d0 [ 40.271935] [] ? arch_cpu_idle+0x10/0x20 [ 40.277637] [] __filemap_fdatawrite_range+0x1ad/0x260 [ 40.284465] [] ? replace_page_cache_page+0x420/0x420 [ 40.291247] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 40.298170] [] ? debug_check_no_obj_freed+0x2b9/0x6e0 [ 40.305199] [] filemap_write_and_wait_range+0x5c/0xb0 [ 40.312119] [] __generic_file_fsync+0x9b/0x1c0 [ 40.318398] [] generic_file_fsync+0x78/0x120 [ 40.324493] [] ext4_sync_file+0x772/0xf10 [ 40.330287] [] ? ext4_llseek+0x970/0x970 [ 40.335982] [] vfs_fsync_range+0x111/0x260 [ 40.341892] [] dio_complete+0x3e6/0x720 [ 40.347504] [] dio_bio_end_aio+0x176/0x3f0 [ 40.353380] [] ? dio_complete+0x720/0x720 [ 40.359170] [] bio_endio+0x187/0x1e0 [ 40.364600] [] blk_update_request+0x267/0xa50 [ 40.370745] [] scsi_end_request+0x9c/0x5d0 [ 40.376832] [] scsi_io_completion+0x275/0x1810 [ 40.383156] [] ? trace_hardirqs_on+0x10/0x10 [ 40.389217] [] ? scsi_unblock_requests+0x50/0x50 [ 40.395611] [] ? virtscsi_complete_cmd+0x800/0x800 [ 40.402179] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 40.409180] [] ? sd_completed_bytes+0x3e0/0x3e0 [ 40.415490] [] scsi_finish_command+0x3a4/0x520 [ 40.421877] [] scsi_softirq_done+0x259/0x370 [ 40.427929] [] ? trace_hardirqs_on_caller+0x260/0x5a0 [ 40.434791] [] blk_done_softirq+0x258/0x3a0 [ 40.440751] [] ? trigger_softirq+0x210/0x210 [ 40.446909] [] __do_softirq+0x226/0xa3f [ 40.452635] [] irq_exit+0x10a/0x150 [ 40.458007] [] do_IRQ+0x111/0x1d0 [ 40.463110] [] common_interrupt+0x9d/0x9d [ 40.468887] [] ? native_safe_halt+0x2/0x10 [ 40.475547] [] ? default_idle+0x56/0x3d0 [ 40.481245] [] arch_cpu_idle+0x10/0x20 [ 40.486915] [] default_idle_call+0x48/0x70 [ 40.492789] [] cpu_startup_entry+0x6d1/0x810 [ 40.498841] [] ? call_cpuidle+0xe0/0xe0 [ 40.504628] [] start_secondary+0x31d/0x410 [ 40.510503] [] ? set_cpu_sibling_map+0x10d0/0x10d0 [ 40.518038] [ 40.519669] ================================= [ 40.524407] [ INFO: inconsistent lock state ] [ 40.529238] 4.4.174+ #4 Not tainted [ 40.532850] --------------------------------- [ 40.537323] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 40.543456] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 40.548716] (&sb->s_type->i_mutex_key#9){+.?.+.}, at: [] __generic_file_fsync+0xcf/0x1c0 [ 40.559278] {SOFTIRQ-ON-W} state was registered at: [ 40.564282] [] __lock_acquire+0xe73/0x4f50 [ 40.570369] [] lock_acquire+0x15e/0x450 [ 40.576225] [] mutex_lock_nested+0xc1/0xb80 [ 40.582434] [] prepare_binprm+0x2bf/0x770 [ 40.588426] [] do_execveat_common.isra.0+0xd86/0x1e90 [ 40.595564] [] SyS_execve+0x42/0x50 [ 40.601133] [] return_from_execve+0x0/0x23 [ 40.607235] irq event stamp: 145358 [ 40.610838] hardirqs last enabled at (145358): [] quarantine_put+0xda/0x180 [ 40.619700] hardirqs last disabled at (145357): [] quarantine_put+0x52/0x180 [ 40.628607] softirqs last enabled at (145298): [] _local_bh_enable+0x1c/0x50 [ 40.637545] softirqs last disabled at (145299): [] irq_exit+0x10a/0x150 [ 40.645968] [ 40.645968] other info that might help us debug this: [ 40.652616] Possible unsafe locking scenario: [ 40.652616] [ 40.658649] CPU0 [ 40.661225] ---- [ 40.663794] lock(&sb->s_type->i_mutex_key#9); [ 40.669007] [ 40.671779] lock(&sb->s_type->i_mutex_key#9); [ 40.677129] [ 40.677129] *** DEADLOCK *** [ 40.677129] [ 40.683259] no locks held by swapper/1/0. [ 40.687398] [ 40.687398] stack backtrace: [ 40.691879] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.174+ #4 [ 40.698091] 0000000000000000 d7ee000cd50c6b37 ffff8801db707610 ffffffff81aad1a1 [ 40.706113] 0000000000000090 ffff8801da6897c0 ffffffff83abf2c0 ffffffff84057a80 [ 40.714130] ffff8801da68a0a8 ffff8801db707688 ffffffff813ad456 0000000000000001 [ 40.722313] Call Trace: [ 40.724871] [] dump_stack+0xc1/0x120 [ 40.730963] [] print_usage_bug.cold+0x454/0x592 [ 40.737266] [] ? save_stack_trace+0x26/0x50 [ 40.743315] [] mark_lock+0x6fd/0x1440 [ 40.748747] [] ? print_irq_inversion_bug+0x110/0x110 [ 40.755483] [] __lock_acquire+0x145e/0x4f50 [ 40.761441] [] ? trace_hardirqs_on+0x10/0x10 [ 40.767577] [] ? find_get_pages_contig+0x5c0/0x5c0 [ 40.774184] [] ? trace_hardirqs_on+0xd/0x10 [ 40.780158] [] lock_acquire+0x15e/0x450 [ 40.785771] [] ? __generic_file_fsync+0xcf/0x1c0 [ 40.792167] [] ? __generic_file_fsync+0xcf/0x1c0 [ 40.798555] [] mutex_lock_nested+0xc1/0xb80 [ 40.804514] [] ? __generic_file_fsync+0xcf/0x1c0 [ 40.810907] [] ? __filemap_fdatawrite_range+0x1b5/0x260 [ 40.817998] [] ? replace_page_cache_page+0x420/0x420 [ 40.824780] [] ? mutex_trylock+0x500/0x500 [ 40.830651] [] ? filemap_check_errors+0x9d/0xe0 [ 40.836948] [] ? filemap_fdatawait_range+0x3d/0x50 [ 40.843511] [] __generic_file_fsync+0xcf/0x1c0 [ 40.850027] [] generic_file_fsync+0x78/0x120 [ 40.856074] [] ext4_sync_file+0x772/0xf10 [ 40.861902] [] ? ext4_llseek+0x970/0x970 [ 40.867606] [] vfs_fsync_range+0x111/0x260 [ 40.873473] [] dio_complete+0x3e6/0x720 [ 40.879082] [] dio_bio_end_aio+0x176/0x3f0 [ 40.884950] [] ? dio_complete+0x720/0x720 [ 40.890729] [] bio_endio+0x187/0x1e0 [ 40.896080] [] blk_update_request+0x267/0xa50 [ 40.902247] [] scsi_end_request+0x9c/0x5d0 [ 40.908123] [] scsi_io_completion+0x275/0x1810 [ 40.914337] [] ? trace_hardirqs_on+0x10/0x10 [ 40.920384] [] ? scsi_unblock_requests+0x50/0x50 [ 40.926781] [] ? virtscsi_complete_cmd+0x800/0x800 [ 40.933343] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 40.940253] [] ? sd_completed_bytes+0x3e0/0x3e0 [ 40.946551] [] scsi_finish_command+0x3a4/0x520 [ 40.952760] [] scsi_softirq_done+0x259/0x370 [ 40.958807] [] ? trace_hardirqs_on_caller+0x260/0x5a0 [ 40.965639] [] blk_done_softirq+0x258/0x3a0 [ 40.971605] [] ? trigger_softirq+0x210/0x210 [ 40.977685] [] __do_softirq+0x226/0xa3f [ 40.983331] [] irq_exit+0x10a/0x150 [ 40.988590] [] do_IRQ+0x111/0x1d0 [ 40.993676] [] common_interrupt+0x9d/0x9d [ 40.999462] [] ? native_safe_halt+0x2/0x10 [ 41.006150] [] ? default_idle+0x56/0x3d0 [ 41.011858] [] arch_cpu_idle+0x10/0x20 [ 41.017380] [] default_idle_call+0x48/0x70 [ 41.023427] [] cpu_startup_entry+0x6d1/0x810 [ 41.029538] [] ? call_cpuidle+0xe0/0xe0 [ 41.035156] [] start_secondary+0x31d/0x410 [ 41.041037] [] ? set_cpu_sibling_map+0x10d0/0x10d0 [ 41.047825] ------------[ cut here ]------------ [ 41.052576] kernel BUG at include/linux/pagemap.h:152! [ 41.057826] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.063641] Modules linked in: [ 41.066928] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.174+ #4 [ 41.073136] task: ffff8801da6897c0 task.stack: ffff8801da698000 [ 41.079173] RIP: 0010:[] [] find_get_pages_range_tag+0x4df/0x6a0 [ 41.088644] RSP: 0018:ffff8801db7075d8 EFLAGS: 00010206 [ 41.094111] RAX: ffff8801da6897c0 RBX: 000000000000000e RCX: 1ffffffff05f7178 [ 41.102352] RDX: 0000000000000100 RSI: ffffffff813b8d6f RDI: ffff8801db707648 [ 41.109615] RBP: ffff8801db7076d0 R08: 0000000000000000 R09: 0000000000000000 [ 41.116863] R10: ffffffff82836880 R11: ffffffff831a5078 R12: ffff8801d63a3ba0 [ 41.124110] R13: ffff8801d601dee8 R14: ffff8801db7076a8 R15: ffffea00074f2980 [ 41.131359] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 41.139656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.145537] CR2: 00007f68b6b3c000 CR3: 00000001d49ca000 CR4: 00000000001606b0 [ 41.152827] Stack: [ 41.154968] ffffffff813b8943 1ffff1003b6e0ec5 ffff8801d63a3ba0 1ffff1003b6e0eeb [ 41.163095] 0000000100000101 ffff8801db707758 ffff8801db707788 0000000000000fff [ 41.171089] 000000000000000e ffffed003ac03bdd 0000000041b58ab3 ffffffff82c5ac4d [ 41.179273] Call Trace: [ 41.181850] [ 41.183899] [] ? find_get_pages_range_tag+0xb3/0x6a0 [ 41.190963] [] ? find_get_pages_contig+0x5c0/0x5c0 [ 41.197529] [] ? tick_program_event+0x101/0x180 [ 41.203832] [] ? tick_setup_hrtimer_broadcast+0x40/0x40 [ 41.210891] [] ? hrtimer_interrupt+0x1de/0x450 [ 41.217127] [] pagevec_lookup_range_tag+0x40/0x80 [ 41.223622] [] __filemap_fdatawait_range+0xfe/0x260 [ 41.230279] [] ? wait_on_page_bit+0x200/0x200 [ 41.236409] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 41.243066] [] ? trace_hardirqs_on+0x10/0x10 [ 41.249145] [] ? check_preemption_disabled+0x3c/0x200 [ 41.255982] [] ? retint_kernel+0x2d/0x2d [ 41.261684] [] ? do_writepages+0x104/0x1e0 [ 41.267553] [] ? ratelimit_handler+0x50/0x50 [ 41.274539] [] filemap_fdatawait_range+0x26/0x50 [ 41.280934] [] filemap_fdatawait+0x66/0x90 [ 41.286810] [] __writeback_single_inode+0x76e/0x1380 [ 41.293602] [] ? writeback_single_inode+0x24b/0x450 [ 41.300252] [] writeback_single_inode+0x256/0x450 [ 41.306724] [] sync_inode_metadata+0xc3/0x100 [ 41.312845] [] ? sync_inode+0x30/0x30 [ 41.318277] [] ? mutex_trylock+0x500/0x500 [ 41.324356] [] ? filemap_fdatawait_range+0x3d/0x50 [ 41.331159] [] __generic_file_fsync+0x14e/0x1c0 [ 41.337466] [] generic_file_fsync+0x78/0x120 [ 41.343516] [] ext4_sync_file+0x772/0xf10 [ 41.349298] [] ? ext4_llseek+0x970/0x970 [ 41.354989] [] vfs_fsync_range+0x111/0x260 [ 41.360856] [] dio_complete+0x3e6/0x720 [ 41.366460] [] dio_bio_end_aio+0x176/0x3f0 [ 41.372326] [] ? dio_complete+0x720/0x720 [ 41.378112] [] bio_endio+0x187/0x1e0 [ 41.383475] [] blk_update_request+0x267/0xa50 [ 41.389603] [] scsi_end_request+0x9c/0x5d0 [ 41.395467] [] scsi_io_completion+0x275/0x1810 [ 41.401688] [] ? trace_hardirqs_on+0x10/0x10 [ 41.407733] [] ? scsi_unblock_requests+0x50/0x50 [ 41.414121] [] ? virtscsi_complete_cmd+0x800/0x800 [ 41.420683] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 41.427585] [] ? sd_completed_bytes+0x3e0/0x3e0 [ 41.433882] [] scsi_finish_command+0x3a4/0x520 [ 41.440113] [] scsi_softirq_done+0x259/0x370 [ 41.446339] [] ? trace_hardirqs_on_caller+0x260/0x5a0 [ 41.453166] [] blk_done_softirq+0x258/0x3a0 [ 41.459123] [] ? trigger_softirq+0x210/0x210 [ 41.465163] [] __do_softirq+0x226/0xa3f [ 41.470776] [] irq_exit+0x10a/0x150 [ 41.476033] [] do_IRQ+0x111/0x1d0 [ 41.481247] [] common_interrupt+0x9d/0x9d [ 41.487024] [ 41.489068] [] ? native_safe_halt+0x2/0x10 [ 41.495233] [] ? default_idle+0x56/0x3d0 [ 41.500931] [] arch_cpu_idle+0x10/0x20 [ 41.506451] [] default_idle_call+0x48/0x70 [ 41.512317] [] cpu_startup_entry+0x6d1/0x810 [ 41.518358] [] ? call_cpuidle+0xe0/0xe0 [ 41.523967] [] start_secondary+0x31d/0x410 [ 41.529828] [] ? set_cpu_sibling_map+0x10d0/0x10d0 [ 41.536384] Code: 82 c6 05 84 08 de 01 01 e8 3f 35 e4 ff e9 30 fc ff ff e8 95 08 f5 ff 41 83 e7 01 0f 84 27 fe ff ff e9 38 fc ff ff e8 81 08 f5 ff <0f> 0b 41 89 c4 e9 4f fd ff ff e8 72 08 f5 ff 48 85 db 0f 84 3a [ 41.563408] RIP [] find_get_pages_range_tag+0x4df/0x6a0 [ 41.570540] RSP [ 41.574164] ---[ end trace 999987b560beb0e7 ]--- [ 41.578923] Kernel panic - not syncing: Fatal exception in interrupt [ 41.585680] Kernel Offset: disabled [ 41.589423] Rebooting in 86400 seconds..