[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 5.835630] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.026395] random: sshd: uninitialized urandom read (32 bytes read) [ 16.352985] random: sshd: uninitialized urandom read (32 bytes read) [ 16.816904] random: sshd: uninitialized urandom read (32 bytes read) [ 552.464313] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.208' (ECDSA) to the list of known hosts. [ 557.883604] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/30 09:20:36 parsed 1 programs [ 559.082528] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/30 09:20:38 executed programs: 0 [ 560.217363] IPVS: ftp: loaded support on port[0] = 21 [ 560.250737] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.257176] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.263627] device bridge_slave_0 entered promiscuous mode [ 560.271325] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.277663] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.284153] device bridge_slave_1 entered promiscuous mode [ 560.291715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 560.300541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 560.313334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 560.321099] ip (4095) used greatest stack depth: 10392 bytes left [ 560.323071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 560.344130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 560.350874] team0: Port device team_slave_0 added [ 560.357735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 560.364456] team0: Port device team_slave_1 added [ 560.371215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 560.380317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 560.387541] ip (4119) used greatest stack depth: 10344 bytes left [ 560.389213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 560.403120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 560.430142] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.436485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.442990] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.449289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.521163] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 560.527241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.539249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 560.551438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.558072] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 560.570416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 560.576510] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.247165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 2018/07/30 09:20:43 executed programs: 6 2018/07/30 09:20:48 executed programs: 12 2018/07/30 09:20:54 executed programs: 18 [ 857.055104] INFO: task syz-executor0:4473 blocked for more than 140 seconds. [ 857.062375] Not tainted 4.18.0-rc5+ #30 [ 857.066860] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.074864] syz-executor0 D14712 4473 4043 0x00000004 [ 857.080709] Call Trace: [ 857.083288] __schedule+0x63a/0x880 [ 857.087083] ? prepare_to_wait_event+0x13a/0x150 [ 857.091820] schedule+0x57/0x80 [ 857.095085] __fuse_request_send+0x37a/0x570 [ 857.099485] ? init_wait_entry+0x30/0x30 [ 857.103588] fuse_simple_request+0x22c/0x280 [ 857.108023] fuse_do_setattr+0x5e3/0x8a0 [ 857.112085] fuse_setattr+0x176/0x2e0 [ 857.115866] ? current_time+0x40/0xb0 [ 857.119647] ? fuse_permission+0x430/0x430 [ 857.123860] notify_change+0x46c/0x560 [ 857.127733] chmod_common+0xda/0x1a0 [ 857.131428] __x64_sys_chmod+0x70/0xd0 [ 857.135303] do_syscall_64+0x61/0x90 [ 857.139003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.144183] RIP: 0033:0x456a09 [ 857.147354] Code: 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 <07> 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 [ 857.166376] RSP: 002b:00007fd8811e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 857.174074] RAX: ffffffffffffffda RBX: 00007fd8811e66d4 RCX: 0000000000456a09 [ 857.181332] RDX: 0000000000000000 RSI: 0000000000000150 RDI: 0000000020000140 [ 857.188601] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 857.195869] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.203140] R13: 00000000004ca568 R14: 00000000004c1c78 R15: 0000000000000001 [ 857.210426] INFO: task syz-executor0:4474 blocked for more than 140 seconds. [ 857.217612] Not tainted 4.18.0-rc5+ #30 [ 857.222100] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.230050] syz-executor0 D14720 4474 4043 0x00000004 [ 857.235663] Call Trace: [ 857.238236] __schedule+0x63a/0x880 [ 857.241847] schedule+0x57/0x80 [ 857.245110] __rwsem_down_read_failed_common+0x115/0x1f0 [ 857.250560] rwsem_down_read_failed+0xe/0x10 [ 857.254974] call_rwsem_down_read_failed+0x18/0x30 [ 857.259903] ? fuse_do_getattr+0x420/0x420 [ 857.264137] down_read+0x1b/0x30 [ 857.267510] walk_component+0xf8/0x210 [ 857.271378] path_lookupat+0x1bf/0x360 [ 857.275251] filename_lookup+0xbb/0x280 [ 857.279233] ? should_failslab+0x9/0x20 [ 857.283215] ? strncpy_from_user+0x184/0x1e0 [ 857.287612] ? getname_flags+0xda/0x2b0 [ 857.291575] user_path_at_empty+0x40/0x50 [ 857.295715] __se_sys_newlstat+0x3b/0x260 [ 857.299854] ? prepare_exit_to_usermode+0x68/0x170 [ 857.304764] ? syscall_return_slowpath+0x3f/0x270 [ 857.309588] ? syscall_return_slowpath+0x3f/0x270 [ 857.314429] __x64_sys_newlstat+0x1a/0x20 [ 857.318568] do_syscall_64+0x61/0x90 [ 857.322270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.327445] RIP: 0033:0x456a09 [ 857.330621] Code: 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 <07> 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 [ 857.349687] RSP: 002b:00007fd8811c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 857.357418] RAX: ffffffffffffffda RBX: 00007fd8811c56d4 RCX: 0000000000456a09 [ 857.364716] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000000 [ 857.371986] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 857.379254] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.386530] R13: 00000000004d14f8 R14: 00000000004c6d78 R15: 0000000000000002 [ 857.393832] INFO: task syz-executor0:4476 blocked for more than 140 seconds. [ 857.401026] Not tainted 4.18.0-rc5+ #30 [ 857.405517] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.413497] syz-executor0 D13936 4476 4043 0x00000004 [ 857.419129] Call Trace: [ 857.421716] __schedule+0x63a/0x880 [ 857.425330] schedule+0x57/0x80 [ 857.428606] __rwsem_down_read_failed_common+0x115/0x1f0 [ 857.434056] rwsem_down_read_failed+0xe/0x10 [ 857.438449] call_rwsem_down_read_failed+0x18/0x30 [ 857.443376] ? fuse_do_getattr+0x420/0x420 [ 857.447600] down_read+0x1b/0x30 [ 857.450957] walk_component+0xf8/0x210 [ 857.454852] path_lookupat+0x1bf/0x360 [ 857.458732] filename_lookup+0xbb/0x280 [ 857.462695] ? should_failslab+0x9/0x20 [ 857.466655] ? strncpy_from_user+0x184/0x1e0 [ 857.471041] ? getname_flags+0xda/0x2b0 [ 857.474994] user_path_at_empty+0x40/0x50 [ 857.479126] __se_sys_newlstat+0x3b/0x260 [ 857.483268] ? fsnotify+0x1be/0x620 [ 857.486889] ? iov_iter_init+0x21/0x60 [ 857.490763] ? __vfs_write+0x1bb/0x1e0 [ 857.494636] ? prepare_exit_to_usermode+0x68/0x170 [ 857.499592] ? syscall_return_slowpath+0x3f/0x270 [ 857.504456] ? __se_sys_futex+0x1b9/0x230 [ 857.508610] __x64_sys_newlstat+0x1a/0x20 [ 857.512752] do_syscall_64+0x61/0x90 [ 857.516455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.521628] RIP: 0033:0x456a09 [ 857.524820] Code: 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 <07> 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 [ 857.543838] RSP: 002b:00007fd881182c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 857.551527] RAX: ffffffffffffffda RBX: 00007fd8811836d4 RCX: 0000000000456a09 [ 857.558784] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000000 [ 857.566037] RBP: 0000000000930320 R08: 0000000000000000 R09: 0000000000000000 [ 857.573374] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.580631] R13: 00000000004d14f8 R14: 00000000004c6d78 R15: 0000000000000004 [ 857.587930] INFO: task syz-executor0:4477 blocked for more than 140 seconds. [ 857.595120] Not tainted 4.18.0-rc5+ #30 [ 857.599695] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.607649] syz-executor0 D14784 4477 4043 0x00000004 [ 857.613378] Call Trace: [ 857.615987] __schedule+0x63a/0x880 [ 857.619606] ? dput+0x25/0x130 [ 857.622869] ? mntput+0x33/0x50 [ 857.626232] schedule+0x57/0x80 [ 857.629526] __rwsem_down_write_failed_common+0x1f2/0x390 [ 857.635151] rwsem_down_write_failed+0xe/0x10 [ 857.639636] call_rwsem_down_write_failed+0x17/0x30 [ 857.644652] ? __ia32_sys_fchmodat+0xd0/0xd0 [ 857.649055] down_write+0x28/0x40 [ 857.652502] chmod_common+0x7d/0x1a0 [ 857.656210] ? getname_flags+0xda/0x2b0 [ 857.660177] __x64_sys_chmod+0x70/0xd0 [ 857.664049] do_syscall_64+0x61/0x90 [ 857.667747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.672917] RIP: 0033:0x456a09 [ 857.676086] Code: 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 <07> 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 [ 857.695305] RSP: 002b:00007fd881161c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 857.703010] RAX: ffffffffffffffda RBX: 00007fd8811626d4 RCX: 0000000000456a09 [ 857.710325] RDX: 0000000000000000 RSI: 0000000000000150 RDI: 0000000020000140 [ 857.717949] RBP: 00000000009303c0 R08: 0000000000000000 R09: 0000000000000000 [ 857.725213] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.732476] R13: 00000000004ca568 R14: 00000000004c1c78 R15: 0000000000000005 [ 857.739739] NMI backtrace for cpu 1 [ 857.743354] CPU: 1 PID: 677 Comm: khungtaskd Not tainted 4.18.0-rc5+ #30 [ 857.750167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.759945] Call Trace: [ 857.762507] dump_stack+0xae/0xf0 [ 857.766034] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 857.771744] nmi_trigger_cpumask_backtrace+0xdd/0x1e0 [ 857.776955] arch_trigger_cpumask_backtrace+0x10/0x20 [ 857.782135] trigger_all_cpu_backtrace+0x17/0x20 [ 857.786884] watchdog+0x4be/0x4d0 [ 857.790307] kthread+0x127/0x140 [ 857.793640] ? reset_hung_task_detector+0x20/0x20 [ 857.798447] ? kthread_blkcg+0x50/0x50 [ 857.802307] ret_from_fork+0x35/0x40 [ 857.806024] Sending NMI from CPU 1 to CPUs 0: [ 857.810532] NMI backtrace for cpu 0 skipped: idling at default_idle+0x76/0xf0 [ 857.811502] Kernel panic - not syncing: hung_task: blocked tasks [ 857.823968] CPU: 1 PID: 677 Comm: khungtaskd Not tainted 4.18.0-rc5+ #30 [ 857.830785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.840109] Call Trace: [ 857.842672] dump_stack+0xae/0xf0 [ 857.846104] panic+0x121/0x390 [ 857.849276] ? printk_safe_flush+0x97/0xb0 [ 857.853478] watchdog+0x4cc/0x4d0 [ 857.856900] kthread+0x127/0x140 [ 857.860338] ? reset_hung_task_detector+0x20/0x20 [ 857.865151] ? kthread_blkcg+0x50/0x50 [ 857.869009] ret_from_fork+0x35/0x40 [ 857.873301] Dumping ftrace buffer: [ 857.876816] (ftrace buffer empty) [ 857.880499] Kernel Offset: disabled [ 857.884106] Rebooting in 86400 seconds..