[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 10.271065] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.179567] random: sshd: uninitialized urandom read (32 bytes read) [ 22.202009] random: crng init done Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. 2018/12/30 16:12:02 parsed 1 programs 2018/12/30 16:12:04 executed programs: 0 [ 33.154857] audit: type=1400 audit(1546186325.957:5): avc: denied { associate } for pid=2067 comm="syz-executor2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 34.377864] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:51 [ 34.386428] in_atomic(): 1, irqs_disabled(): 0, pid: 3298, name: blkid [ 34.393094] 1 lock held by blkid/3298: [ 34.397014] #0: (&(ptlock_ptr(page))->rlock#2){+.+...}, at: [] unmap_page_range+0x6f0/0x1680 [ 34.407977] Preemption disabled at:[ 34.411433] [] unmap_page_range+0x6f0/0x1680 [ 34.417429] CPU: 0 PID: 3298 Comm: blkid Not tainted 4.9.148+ #87 [ 34.423650] ffff8801db607a20 ffffffff81b43d59 ffffffff814996b0 0000000000000000 [ 34.431651] 0000000000000101 ffff8801d1904740 ffff8801d1904740 ffff8801db607a58 [ 34.439675] ffffffff813fa4dd ffff8801d1904740 ffffffff82a4fe80 0000000000000033 [ 34.447735] Call Trace: [ 34.450292] [ 34.452375] [] dump_stack+0xc1/0x128 [ 34.457763] [] ? unmap_page_range+0x6f0/0x1680 [ 34.463973] [] ___might_sleep.cold.31+0x18a/0x1fc [ 34.470459] [] __might_sleep+0x95/0x1a0 [ 34.476058] [] ? filemap_check_errors+0x90/0xc0 [ 34.482353] [] down_write+0x21/0xa0 [ 34.487624] [] __generic_file_fsync+0xc1/0x1a0 [ 34.493844] [] ext4_sync_file+0x659/0x10a0 [ 34.499724] [] ? ext4_llseek+0x8e0/0x8e0 [ 34.505499] [] vfs_fsync_range+0x10c/0x260 [ 34.511369] [] dio_complete+0x522/0x6d0 [ 34.516983] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 34.523814] [] ? ext4_update_bh_state+0xf0/0xf0 [ 34.530140] [] dio_bio_end_aio+0x11c/0x370 [ 34.536007] [] ? dio_complete+0x6d0/0x6d0 [ 34.541790] [] bio_endio+0x1a5/0x1f0 [ 34.547156] [] blk_update_request+0x248/0x9b0 [ 34.553283] [] scsi_end_request+0x9d/0x5c0 [ 34.559142] [] scsi_io_completion+0x273/0x17a0 [ 34.565352] [] ? scsi_unblock_requests+0x50/0x50 [ 34.571742] [] ? check_preemption_disabled+0x3b/0x200 [ 34.578587] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 34.585502] [] ? sd_completed_bytes+0x3f0/0x3f0 [ 34.591795] [] scsi_finish_command+0x3ba/0x530 [ 34.598050] [] scsi_softirq_done+0x250/0x360 [ 34.604089] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 34.610905] [] blk_done_softirq+0x27d/0x3e0 [ 34.616852] [] ? trigger_softirq+0x210/0x210 [ 34.622918] [] __do_softirq+0x20e/0x964 [ 34.628518] [] ? check_preemption_disabled+0x3b/0x200 [ 34.635341] [] irq_exit+0x11c/0x150 [ 34.640617] [] do_IRQ+0x10d/0x1c0 [ 34.645694] [] common_interrupt+0x9d/0x9d [ 34.651480] [ 34.653547] [] ? unmap_page_range+0xd7b/0x1680 [ 34.659774] [] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 34.666434] [] unmap_page_range+0xd7b/0x1680 [ 34.672467] [] ? do_wp_page+0x2010/0x2010 [ 34.678241] [] ? uprobe_munmap+0x94/0x220 [ 34.684017] [] unmap_single_vma+0x11c/0x170 [ 34.689965] [] unmap_vmas+0x81/0xd0 [ 34.695262] [] exit_mmap+0x1cc/0x3a0 [ 34.700637] [] ? SyS_munmap+0xa0/0xa0 [ 34.706062] [] ? __might_sleep+0x95/0x1a0 [ 34.711858] [] mmput+0xcd/0x360 [ 34.716767] [] do_exit+0x6c9/0x2a50 [ 34.722025] [] ? release_task.part.4+0x14b0/0x14b0 [ 34.728589] [] ? blkdev_put+0x560/0x560 [ 34.734231] [] do_group_exit+0x111/0x300 [ 34.739924] [] ? do_group_exit+0x300/0x300 [ 34.745786] [] SyS_exit_group+0x1d/0x20 [ 34.751384] [] do_syscall_64+0x19f/0x550 [ 34.757070] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 34.764018] [ 34.765634] ================================= [ 34.770102] [ INFO: inconsistent lock state ] [ 34.774571] 4.9.148+ #87 Tainted: G W [ 34.779475] --------------------------------- [ 34.783969] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 34.790113] blkid/3298 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 34.795790] (&sb->s_type->i_mutex_key#9){+.?.+.}, at: [] __generic_file_fsync+0xc1/0x1a0 {SOFTIRQ-ON-W} state was registered at: [ 34.809841] __lock_acquire+0xbdd/0x4a10 [ 34.813962] lock_acquire+0x130/0x3e0 [ 34.817829] down_write+0x41/0xa0 [ 34.821349] prepare_binprm+0x2b7/0x750 [ 34.825393] do_execveat_common.isra.14+0xe9f/0x1ed0 [ 34.830554] SyS_execve+0x42/0x50 [ 34.834067] do_syscall_64+0x19f/0x550 [ 34.838063] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 34.843231] irq event stamp: 3084 [ 34.846665] hardirqs last enabled at (3084): [] restore_regs_and_iret+0x0/0x1d [ 34.855652] hardirqs last disabled at (3083): [] apic_timer_interrupt+0x98/0xb0 [ 34.864635] softirqs last enabled at (2026): [] __do_softirq+0x46d/0x964 [ 34.873105] softirqs last disabled at (3039): [] irq_exit+0x11c/0x150 [ 34.881217] [ 34.881217] other info that might help us debug this: [ 34.887869] Possible unsafe locking scenario: [ 34.887869] [ 34.893896] CPU0 [ 34.896453] ---- [ 34.899033] lock(&sb->s_type->i_mutex_key#9); [ 34.904049] [ 34.906797] lock(&sb->s_type->i_mutex_key#9); [ 34.912035] [ 34.912035] *** DEADLOCK *** [ 34.912035] [ 34.918067] 1 lock held by blkid/3298: [ 34.921930] #0: (&(ptlock_ptr(page))->rlock#2){+.+...}, at: [] unmap_page_range+0x6f0/0x1680 [ 34.932844] [ 34.932844] stack backtrace: [ 34.937313] CPU: 0 PID: 3298 Comm: blkid Tainted: G W 4.9.148+ #87 [ 34.944729] ffff8801db607790 ffffffff81b43d59 ffff8801d1904740 ffffffff83cb20f0 [ 34.952774] ffff8801d1905018 ffff8801d1905038 ffffffff8424ad80 ffff8801db607808 [ 34.960788] ffffffff81400d8e 0000000000000001 ffffffff00000001 0000000000000000 [ 34.968766] Call Trace: [ 34.971320] [ 34.973360] [] dump_stack+0xc1/0x128 [ 34.978715] [] print_usage_bug.cold.40+0x44e/0x57e [ 34.985266] [] mark_lock+0x2f2/0x1290 [ 34.990689] [] ? print_irq_inversion_bug+0x90/0x90 [ 34.997240] [] __lock_acquire+0x1084/0x4a10 [ 35.003183] [] ? mark_held_locks+0xc7/0x130 [ 35.009128] [] ? retint_kernel+0x2d/0x2d [ 35.014850] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 35.021701] [] ? trace_hardirqs_on+0x10/0x10 [ 35.027772] [] ? check_preemption_disabled+0x3b/0x200 [ 35.034615] [] ? retint_kernel+0x2d/0x2d [ 35.040302] [] ? dump_stack+0x105/0x128 [ 35.045916] [] ? dump_stack+0x10f/0x128 [ 35.051514] [] lock_acquire+0x130/0x3e0 [ 35.057115] [] ? __generic_file_fsync+0xc1/0x1a0 [ 35.063494] [] down_write+0x41/0xa0 [ 35.068742] [] ? __generic_file_fsync+0xc1/0x1a0 [ 35.075120] [] __generic_file_fsync+0xc1/0x1a0 [ 35.081328] [] ext4_sync_file+0x659/0x10a0 [ 35.087184] [] ? ext4_llseek+0x8e0/0x8e0 [ 35.092869] [] vfs_fsync_range+0x10c/0x260 [ 35.098746] [] dio_complete+0x522/0x6d0 [ 35.104403] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 35.111239] [] ? ext4_update_bh_state+0xf0/0xf0 [ 35.117581] [] dio_bio_end_aio+0x11c/0x370 [ 35.123441] [] ? dio_complete+0x6d0/0x6d0 [ 35.129232] [] bio_endio+0x1a5/0x1f0 [ 35.134574] [] blk_update_request+0x248/0x9b0 [ 35.140696] [] scsi_end_request+0x9d/0x5c0 [ 35.146554] [] scsi_io_completion+0x273/0x17a0 [ 35.152758] [] ? scsi_unblock_requests+0x50/0x50 [ 35.159134] [] ? check_preemption_disabled+0x3b/0x200 [ 35.165948] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 35.172874] [] ? sd_completed_bytes+0x3f0/0x3f0 [ 35.179189] [] scsi_finish_command+0x3ba/0x530 [ 35.185395] [] scsi_softirq_done+0x250/0x360 [ 35.191435] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 35.198254] [] blk_done_softirq+0x27d/0x3e0 [ 35.204217] [] ? trigger_softirq+0x210/0x210 [ 35.210253] [] __do_softirq+0x20e/0x964 [ 35.215860] [] ? check_preemption_disabled+0x3b/0x200 [ 35.222671] [] irq_exit+0x11c/0x150 [ 35.227922] [] do_IRQ+0x10d/0x1c0 [ 35.232997] [] common_interrupt+0x9d/0x9d [ 35.238764] [ 35.240804] [] ? unmap_page_range+0xd7b/0x1680 [ 35.247034] [] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 35.253670] [] unmap_page_range+0xd7b/0x1680 [ 35.259724] [] ? do_wp_page+0x2010/0x2010 [ 35.265516] [] ? uprobe_munmap+0x94/0x220 [ 35.271310] [] unmap_single_vma+0x11c/0x170 [ 35.277255] [] unmap_vmas+0x81/0xd0 [ 35.282505] [] exit_mmap+0x1cc/0x3a0 [ 35.287877] [] ? SyS_munmap+0xa0/0xa0 [ 35.293314] [] ? __might_sleep+0x95/0x1a0 [ 35.299091] [] mmput+0xcd/0x360 [ 35.303997] [] do_exit+0x6c9/0x2a50 [ 35.309266] [] ? release_task.part.4+0x14b0/0x14b0 [ 35.315818] [] ? blkdev_put+0x560/0x560 [ 35.321448] [] do_group_exit+0x111/0x300 [ 35.327159] [] ? do_group_exit+0x300/0x300 [ 35.333014] [] SyS_exit_group+0x1d/0x20 [ 35.338611] [] do_syscall_64+0x19f/0x550 [ 35.344304] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 35.351428] BUG: scheduling while atomic: blkid/3298/0x00000102 [ 35.357509] INFO: lockdep is turned off. [ 35.361544] Modules linked in: [ 35.364890] Preemption disabled at:[ 35.368341] [] unmap_page_range+0x6f0/0x1680 [ 35.374334] Kernel panic - not syncing: scheduling while atomic [ 35.374334] [ 35.381857] CPU: 0 PID: 3298 Comm: blkid Tainted: G W 4.9.148+ #87 [ 35.389274] ffff8801db6074f0 ffffffff81b43d59 ffffffff82a47e40 00000000ffffffff [ 35.397359] ffffffff81499600 0000000000000000 ffff8801d1904740 ffff8801db6075b0 [ 35.405399] ffffffff813f7735 0000000041b58ab3 ffffffff82e2ac3b ffffffff813f7576 [ 35.413391] Call Trace: [ 35.415945] [ 35.417987] [] dump_stack+0xc1/0x128 [ 35.423358] [] ? unmap_page_range+0x640/0x1680 [ 35.429570] [] panic+0x1bf/0x39d [ 35.434587] [] ? add_taint.cold.5+0x16/0x16 [ 35.440541] [] ? vprintk_emit+0x272/0x790 [ 35.446344] [] ? vprintk_emit+0x272/0x790 [ 35.452137] [] ? unmap_page_range+0x6f0/0x1680 [ 35.458344] [] __schedule_bug.cold.30+0x8d/0x8d [ 35.464648] [] __schedule+0xfec/0x1b10 [ 35.470193] [] ? hrtimer_active+0x1c2/0x260 [ 35.476140] [] schedule+0x7f/0x1b0 [ 35.481411] [] schedule_timeout+0x735/0xe20 [ 35.487376] [] ? usleep_range+0x140/0x140 [ 35.493149] [] ? kvm_clock_read+0x23/0x40 [ 35.498934] [] ? kvm_clock_get_cycles+0x9/0x10 [ 35.505187] [] ? ktime_get+0x185/0x1e0 [ 35.510717] [] ? __delayacct_blkio_start+0x41/0x80 [ 35.517284] [] io_schedule_timeout+0x1ba/0x390 [ 35.523886] [] bit_wait_io+0x19/0xa0 [ 35.529222] [] __wait_on_bit+0x93/0x120 [ 35.534829] [] ? trace_hardirqs_on+0xd/0x10 [ 35.540795] [] ? bit_wait+0x90/0x90 [ 35.546049] [] ? bit_wait+0x90/0x90 [ 35.551319] [] out_of_line_wait_on_bit+0xe8/0x120 [ 35.557796] [] ? bit_wait_timeout+0x130/0x130 [ 35.563942] [] ? autoremove_wake_function+0x40/0x40 [ 35.570580] [] ? __might_sleep+0x95/0x1a0 [ 35.576353] [] __wait_on_buffer+0x5c/0x70 [ 35.582124] [] sync_mapping_buffers+0x571/0x890 [ 35.588416] [] ? write_dirty_buffer+0xb0/0xb0 [ 35.594531] [] ? lock_acquire+0x173/0x3e0 [ 35.600302] [] __generic_file_fsync+0xe5/0x1a0 [ 35.606529] [] ext4_sync_file+0x659/0x10a0 [ 35.612394] [] ? ext4_llseek+0x8e0/0x8e0 [ 35.618082] [] vfs_fsync_range+0x10c/0x260 [ 35.623947] [] dio_complete+0x522/0x6d0 [ 35.629571] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 35.636394] [] ? ext4_update_bh_state+0xf0/0xf0 [ 35.642688] [] dio_bio_end_aio+0x11c/0x370 [ 35.648563] [] ? dio_complete+0x6d0/0x6d0 [ 35.654349] [] bio_endio+0x1a5/0x1f0 [ 35.659702] [] blk_update_request+0x248/0x9b0 [ 35.665859] [] scsi_end_request+0x9d/0x5c0 [ 35.671734] [] scsi_io_completion+0x273/0x17a0 [ 35.677936] [] ? scsi_unblock_requests+0x50/0x50 [ 35.684328] [] ? check_preemption_disabled+0x3b/0x200 [ 35.691138] [] ? scsi_handle_queue_ramp_up+0x32a/0x430 [ 35.698038] [] ? sd_completed_bytes+0x3f0/0x3f0 [ 35.704338] [] scsi_finish_command+0x3ba/0x530 [ 35.710549] [] scsi_softirq_done+0x250/0x360 [ 35.716581] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 35.723407] [] blk_done_softirq+0x27d/0x3e0 [ 35.729361] [] ? trigger_softirq+0x210/0x210 [ 35.735396] [] __do_softirq+0x20e/0x964 [ 35.741011] [] ? check_preemption_disabled+0x3b/0x200 [ 35.747837] [] irq_exit+0x11c/0x150 [ 35.753101] [] do_IRQ+0x10d/0x1c0 [ 35.758194] [] common_interrupt+0x9d/0x9d [ 35.763963] [ 35.766017] [] ? unmap_page_range+0xd7b/0x1680 [ 35.772248] [] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 35.778897] [] unmap_page_range+0xd7b/0x1680 [ 35.784933] [] ? do_wp_page+0x2010/0x2010 [ 35.790709] [] ? uprobe_munmap+0x94/0x220 [ 35.796501] [] unmap_single_vma+0x11c/0x170 [ 35.802485] [] unmap_vmas+0x81/0xd0 [ 35.807751] [] exit_mmap+0x1cc/0x3a0 [ 35.813101] [] ? SyS_munmap+0xa0/0xa0 [ 35.818559] [] ? __might_sleep+0x95/0x1a0 [ 35.824348] [] mmput+0xcd/0x360 [ 35.829255] [] do_exit+0x6c9/0x2a50 [ 35.834506] [] ? release_task.part.4+0x14b0/0x14b0 [ 35.841255] [] ? blkdev_put+0x560/0x560 [ 35.846857] [] do_group_exit+0x111/0x300 [ 35.852543] [] ? do_group_exit+0x300/0x300 [ 35.858407] [] SyS_exit_group+0x1d/0x20 [ 35.864017] [] do_syscall_64+0x19f/0x550 [ 35.869704] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 35.876955] Kernel Offset: disabled [ 35.880564] Rebooting in 86400 seconds..