Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. [ 34.892283] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/05 11:06:59 fuzzer started [ 35.926617] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/05 11:07:00 connecting to host at 10.128.0.26:34323 2018/09/05 11:07:00 checking revisions... 2018/09/05 11:07:00 testing simple program... executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 185.424638] INFO: task syz-fuzzer:4887 blocked for more than 140 seconds. [ 185.431838] Not tainted 4.19.0-rc2-next-20180905+ #58 [ 185.437603] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.445611] syz-fuzzer D21704 4887 4883 0x00000000 [ 185.451290] Call Trace: [ 185.453936] __schedule+0x87c/0x1df0 [ 185.457709] ? __sched_text_start+0x8/0x8 [ 185.461913] ? ext4_set_page_dirty+0x254/0x340 [ 185.466531] ? graph_lock+0x170/0x170 [ 185.470355] ? print_usage_bug+0xc0/0xc0 [ 185.474503] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.480096] ? find_held_lock+0x36/0x1c0 [ 185.484224] schedule+0xfb/0x450 [ 185.487636] ? mark_held_locks+0xc9/0x160 [ 185.491833] ? __schedule+0x1df0/0x1df0 [ 185.495852] ? _raw_spin_unlock_irq+0x27/0x70 [ 185.500396] ? _raw_spin_unlock_irq+0x27/0x70 [ 185.504938] ? lockdep_hardirqs_on+0x421/0x5c0 [ 185.509569] ? trace_hardirqs_on+0xbd/0x2c0 [ 185.513939] ? kasan_check_read+0x11/0x20 [ 185.518145] ? __lock_page+0x585/0x7a0 [ 185.522078] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 185.527239] ? kasan_check_write+0x14/0x20 [ 185.531536] io_schedule+0x1c/0x70 [ 185.535134] __lock_page+0x5b7/0x7a0 [ 185.538910] ? __lock_page_killable+0x850/0x850 [ 185.543628] ? __sb_end_write+0xac/0xe0 [ 185.547653] ? ext4_page_mkwrite+0xa95/0x1450 [ 185.552192] ? page_cache_tree_insert+0x560/0x560 [ 185.557086] ? __lock_is_held+0xb5/0x140 [ 185.561221] ? check_same_owner+0x340/0x340 [ 185.565591] ? rcu_note_context_switch+0x680/0x680 [ 185.570577] do_page_mkwrite+0x429/0x520 [ 185.574690] ? print_bad_pte+0x5f0/0x5f0 [ 185.578795] ? pud_val+0x88/0x100 [ 185.582293] ? find_held_lock+0x36/0x1c0 [ 185.586411] __handle_mm_fault+0x2a0a/0x4350 [ 185.590879] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 185.595764] ? graph_lock+0x170/0x170 [ 185.600174] ? kasan_check_read+0x11/0x20 [ 185.604350] ? lock_downgrade+0x8f0/0x8f0 [ 185.608535] ? handle_mm_fault+0x8c4/0xc80 [ 185.612780] ? handle_mm_fault+0x8c4/0xc80 [ 185.617027] ? kasan_check_read+0x11/0x20 [ 185.621192] ? rcu_is_watching+0x8c/0x150 [ 185.625375] ? __do_page_fault+0x620/0xe50 [ 185.629627] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 185.634312] handle_mm_fault+0x53e/0xc80 [ 185.638394] ? __handle_mm_fault+0x4350/0x4350 [ 185.642988] ? find_vma+0x34/0x190 [ 185.646550] __do_page_fault+0x620/0xe50 [ 185.650625] ? mm_fault_error+0x380/0x380 [ 185.654786] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.660163] ? trace_hardirqs_on+0x2c0/0x2c0 [ 185.664590] do_page_fault+0xf6/0x7a4 [ 185.668399] ? vmalloc_sync_all+0x30/0x30 [ 185.672562] ? error_entry+0x70/0xd0 [ 185.676286] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 185.681443] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 185.686421] ? syscall_return_slowpath+0x5e0/0x5e0 [ 185.691384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.696341] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 185.701379] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 185.706862] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 185.711910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 185.716995] ? page_fault+0x8/0x30 [ 185.720571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.725431] ? page_fault+0x8/0x30 [ 185.728985] page_fault+0x1e/0x30 [ 185.732488] RIP: 0033:0x70b581 [ 185.735690] Code: 48 89 6c 24 10 48 8d 6c 24 10 48 8b 44 24 20 48 8b 48 08 48 8b 50 10 48 8d 58 08 48 83 fa 08 0f 8c 1e 01 00 00 48 8b 54 24 28 <88> 11 48 8b 48 08 48 8b 70 10 48 83 fe 01 0f 86 44 01 00 00 48 89 [ 185.754619] RSP: 002b:000000c42017d3f0 EFLAGS: 00010212 [ 185.759993] RAX: 000000c42017d508 RBX: 000000c42017d510 RCX: 00007f38f0cb7000 [ 185.767290] RDX: 0000000000000543 RSI: 000000000072a460 RDI: 000000c42017d348 [ 185.774566] RBP: 000000c42017d400 R08: 0000000000000000 R09: 0000000000000000 [ 185.781838] R10: 0000000000949c4a R11: 0000000000000004 R12: 0000000000000000 [ 185.789288] R13: 0000000000000020 R14: 0000000000000013 R15: 000000000000000f [ 185.796579] [ 185.796579] Showing all locks held in the system: [ 185.802912] 4 locks held by kworker/u4:3/90: [ 185.807316] #0: 0000000084023867 ((wq_completion)"writeback"){+.+.}, at: process_one_work+0xb44/0x1aa0 [ 185.816877] #1: 00000000e573d0bc ((work_completion)(&(&wb->dwork)->work)){+.+.}, at: process_one_work+0xb9b/0x1aa0 [ 185.827479] #2: 00000000a3e8a3b9 (&fc->fs_type->s_umount_key#29){++++}, at: trylock_super+0x22/0x110 [ 185.836913] #3: 000000003e654884 (&sbi->s_journal_flag_rwsem){.+.+}, at: do_writepages+0x9a/0x1a0 [ 185.846050] 1 lock held by khungtaskd/794: [ 185.850282] #0: 0000000067f5d641 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 185.858921] 1 lock held by khugepaged/800: [ 185.863153] #0: 000000001a1bf6de (&mm->mmap_sem){++++}, at: collapse_huge_page+0x2bf/0x2250 [ 185.871817] 1 lock held by rsyslogd/4772: [ 185.875968] 2 locks held by getty/4862: [ 185.880027] #0: 000000004049f8c8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.888281] #1: 00000000c6433596 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 185.897154] 2 locks held by getty/4863: [ 185.901135] #0: 000000005e5f08d4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.909391] #1: 0000000084d42aeb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 185.918253] 2 locks held by getty/4864: [ 185.922239] #0: 0000000087409930 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.930576] #1: 00000000e911a6bb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 185.939472] 2 locks held by getty/4865: [ 185.943460] #0: 00000000dfd5883f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.951710] #1: 0000000053fb77f8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 185.960571] 2 locks held by getty/4866: [ 185.964546] #0: 0000000090113a7e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.972794] #1: 000000008e4fdb7b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 185.981652] 2 locks held by getty/4867: [ 185.985621] #0: 00000000907eecf4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 185.993869] #1: 00000000997adc2a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 186.002728] 2 locks held by getty/4868: [ 186.006839] #0: 000000009262da3b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 186.015093] #1: 000000002ae3445e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 186.023967] 1 lock held by syz-fuzzer/4887: [ 186.028284] #0: 000000001a1bf6de (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 186.036533] [ 186.038166] ============================================= [ 186.038166] [ 186.045287] NMI backtrace for cpu 0 [ 186.048939] CPU: 0 PID: 794 Comm: khungtaskd Not tainted 4.19.0-rc2-next-20180905+ #58 [ 186.056972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.066344] Call Trace: [ 186.068926] dump_stack+0x1c9/0x2b4 [ 186.072535] ? dump_stack_print_info.cold.2+0x52/0x52 [ 186.077706] ? vprintk_default+0x28/0x30 [ 186.081754] ? lapic_can_unplug_cpu.cold.30+0x3f/0x3f [ 186.086926] nmi_cpu_backtrace.cold.4+0x48/0x88 [ 186.091575] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 186.096224] ? lapic_can_unplug_cpu.cold.30+0x3f/0x3f [ 186.101393] nmi_trigger_cpumask_backtrace+0x1b6/0x1cd [ 186.106653] arch_trigger_cpumask_backtrace+0x14/0x20 [ 186.111822] watchdog+0xb39/0x1040 [ 186.115349] ? reset_hung_task_detector+0xd0/0xd0 [ 186.120221] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 186.125323] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 186.130412] ? lockdep_hardirqs_on+0x421/0x5c0 [ 186.134976] ? trace_hardirqs_on+0xbd/0x2c0 [ 186.139285] ? kasan_check_read+0x11/0x20 [ 186.143422] ? __kthread_parkme+0xd7/0x1b0 [ 186.147643] ? kasan_check_write+0x14/0x20 [ 186.151861] ? do_raw_spin_lock+0xc1/0x200 [ 186.156076] ? __kthread_parkme+0x58/0x1b0 [ 186.160295] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.165809] ? __kthread_parkme+0x106/0x1b0 [ 186.170120] kthread+0x35a/0x420 [ 186.173605] ? reset_hung_task_detector+0xd0/0xd0 [ 186.178433] ? kthread_bind+0x40/0x40 [ 186.182218] ret_from_fork+0x3a/0x50 [ 186.185973] Sending NMI from CPU 0 to CPUs 1: [ 186.191079] NMI backtrace for cpu 1 [ 186.191084] CPU: 1 PID: 4898 Comm: syz-fuzzer Not tainted 4.19.0-rc2-next-20180905+ #58 [ 186.191089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.191093] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 186.191112] Code: 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 <55> 65 48 8b 04 25 40 ee 01 00 65 8b 15 bf 43 86 7e 48 89 e5 81 e2 [ 186.191115] RSP: 0018:ffff8801b2f7f2c8 EFLAGS: 00000093 [ 186.191121] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816d709d [ 186.191124] RDX: 0000000000000000 RSI: ffffffff816d6f80 RDI: 0000000000000005 [ 186.191128] RBP: ffff8801b2f7f2f0 R08: ffff8801d957a2c0 R09: ffffffff88f7905b [ 186.191131] R10: fffffbfff11ef209 R11: 0000000000000000 R12: 0000002b57054375 [ 186.191135] R13: 0000000000000001 R14: 0000000000000003 R15: 0000002b5711b837 [ 186.191139] FS: 000000c420026ae8(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 186.191142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.191146] CR2: ffffffffff600400 CR3: 00000001b75aa000 CR4: 00000000001406e0 [ 186.191149] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.191153] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.191154] Call Trace: [ 186.191157] ? tick_program_event+0xb2/0x130 [ 186.191159] hrtimer_reprogram+0x37c/0x420 [ 186.191162] hrtimer_start_range_ns+0x713/0xcd0 [ 186.191164] ? __hrtimer_get_remaining+0x1e0/0x1e0 [ 186.191167] ? __debug_object_init+0x581/0x12e0 [ 186.191169] ? kasan_check_read+0x11/0x20 [ 186.191171] ? do_raw_spin_unlock+0xa7/0x2f0 [ 186.191174] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 186.191176] ? lock_acquire+0x1e4/0x4f0 [ 186.191179] futex_wait_queue_me+0x314/0x840 [ 186.191181] ? refill_pi_state_cache.part.8+0x320/0x320 [ 186.191184] ? kasan_check_write+0x14/0x20 [ 186.191186] ? do_raw_spin_lock+0xc1/0x200 [ 186.191189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.191192] ? get_futex_value_locked+0xcb/0xf0 [ 186.191194] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 186.191197] ? futex_wait_setup+0x281/0x410 [ 186.191199] ? futex_wake+0x760/0x760 [ 186.191202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.191204] ? __hrtimer_init+0xdb/0x240 [ 186.191206] futex_wait+0x45b/0xa20 [ 186.191208] ? futex_wait_setup+0x410/0x410 [ 186.191211] ? print_usage_bug+0xc0/0xc0 [ 186.191213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.191216] ? clock_was_set_work+0x30/0x30 [ 186.191218] ? mark_held_locks+0x160/0x160 [ 186.191220] ? do_futex+0x193/0x27d0 [ 186.191223] do_futex+0x336/0x27d0 [ 186.191225] ? mark_held_locks+0x160/0x160 [ 186.191228] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 186.191230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.191233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 186.191236] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 186.191238] ? exit_robust_list+0x290/0x290 [ 186.191241] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 186.191244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.191246] ? graph_lock+0x170/0x170 [ 186.191249] ? lockdep_hardirqs_on+0x421/0x5c0 [ 186.191251] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 186.191254] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.191256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.191259] ? lockdep_hardirqs_on+0x421/0x5c0 [ 186.191261] ? find_held_lock+0x36/0x1c0 [ 186.191263] ? lock_downgrade+0x8f0/0x8f0 [ 186.191265] ? ktime_get+0x352/0x440 [ 186.191268] ? ktime_get+0x352/0x440 [ 186.191270] ? pvclock_read_flags+0x160/0x160 [ 186.191273] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 186.191275] ? lock_downgrade+0x8f0/0x8f0 [ 186.191278] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 186.191280] ? ktime_get+0x2e1/0x440 [ 186.191282] ? ktime_get_raw_ts64+0x4f0/0x4f0 [ 186.191285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.191287] __x64_sys_futex+0x472/0x6a0 [ 186.191290] ? do_futex+0x27d0/0x27d0 [ 186.191292] ? retint_kernel+0x10/0x10 [ 186.191295] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.191297] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 186.191300] do_syscall_64+0x1b9/0x820 [ 186.191302] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 186.191305] ? syscall_return_slowpath+0x5e0/0x5e0 [ 186.191308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.191310] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 186.191313] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 186.191316] ? prepare_exit_to_usermode+0x291/0x3b0 [ 186.191318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.191321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.191323] RIP: 0033:0x45ddf3 [ 186.191331] Code: cc cc cc cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 186.191334] RSP: 002b:000000c420037ea8 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 186.191340] RAX: ffffffffffffffda RBX: 00000000000186a0 RCX: 000000000045ddf3 [ 186.191343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001494c28 [ 186.191347] RBP: 000000c420037ef0 R08: 0000000000000000 R09: 0000000000000000 [ 186.191350] R10: 000000c420037ee0 R11: 0000000000000206 R12: 0000000000000001 [ 186.191354] R13: 000000c420156060 R14: 0000000000000001 R15: 0000000000000000 [ 186.191489] Kernel panic - not syncing: hung_task: blocked tasks [ 186.693821] CPU: 0 PID: 794 Comm: khungtaskd Not tainted 4.19.0-rc2-next-20180905+ #58 [ 186.701855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.711188] Call Trace: [ 186.713765] dump_stack+0x1c9/0x2b4 [ 186.717377] ? dump_stack_print_info.cold.2+0x52/0x52 [ 186.722550] ? printk_safe_log_store+0x2f0/0x2f0 [ 186.727290] panic+0x238/0x4e7 [ 186.730460] ? add_taint.cold.5+0x16/0x16 [ 186.734589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.740116] ? nmi_trigger_cpumask_backtrace+0x18c/0x1cd [ 186.745545] ? printk_safe_flush+0xd7/0x130 [ 186.749954] watchdog+0xb4a/0x1040 [ 186.753604] ? reset_hung_task_detector+0xd0/0xd0 [ 186.758433] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 186.763515] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 186.768601] ? lockdep_hardirqs_on+0x421/0x5c0 [ 186.773166] ? trace_hardirqs_on+0xbd/0x2c0 [ 186.777468] ? kasan_check_read+0x11/0x20 [ 186.781598] ? __kthread_parkme+0xd7/0x1b0 [ 186.785814] ? kasan_check_write+0x14/0x20 [ 186.790031] ? do_raw_spin_lock+0xc1/0x200 [ 186.794249] ? __kthread_parkme+0x58/0x1b0 [ 186.798465] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.804065] ? __kthread_parkme+0x106/0x1b0 [ 186.808382] kthread+0x35a/0x420 [ 186.811730] ? reset_hung_task_detector+0xd0/0xd0 [ 186.816609] ? kthread_bind+0x40/0x40 [ 186.820447] ret_from_fork+0x3a/0x50 [ 186.824528] Dumping ftrace buffer: [ 186.828110] (ftrace buffer empty) [ 186.831807] Kernel Offset: disabled [ 186.835420] Rebooting in 86400 seconds..