Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 36.620604] audit: type=1800 audit(1567083311.784:33): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.641893] audit: type=1800 audit(1567083311.784:34): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.668729] audit: type=1400 audit(1567083315.834:35): avc: denied { map } for pid=7471 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. [ 980.410921] audit: type=1400 audit(1567084255.574:36): avc: denied { map } for pid=7483 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/29 13:10:56 parsed 1 programs [ 981.272769] audit: type=1400 audit(1567084256.444:37): avc: denied { map } for pid=7483 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15040 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/08/29 13:10:57 executed programs: 0 [ 982.635515] IPVS: ftp: loaded support on port[0] = 21 [ 982.697230] chnl_net:caif_netlink_parms(): no params data found [ 982.729041] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.736165] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.743712] device bridge_slave_0 entered promiscuous mode [ 982.750826] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.757322] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.764780] device bridge_slave_1 entered promiscuous mode [ 982.781827] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 982.791004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 982.807486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 982.815303] team0: Port device team_slave_0 added [ 982.820674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 982.828061] team0: Port device team_slave_1 added [ 982.833441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 982.840622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 982.904257] device hsr_slave_0 entered promiscuous mode [ 982.952931] device hsr_slave_1 entered promiscuous mode [ 982.993000] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 983.000109] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 983.014117] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.029996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.036950] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.043310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.074189] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 983.080268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.089259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 983.098505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 983.117151] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.124586] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.131669] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 983.141958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 983.148256] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.158076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 983.165899] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.172295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.181530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 983.189222] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.195592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.214936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 983.222933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 983.230539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 983.238617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 983.249041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.259571] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 983.265658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 983.273017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 983.286379] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 983.296036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.306347] audit: type=1400 audit(1567084258.474:38): avc: denied { associate } for pid=7499 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/08/29 13:11:02 executed programs: 5 2019/08/29 13:11:07 executed programs: 11 2019/08/29 13:11:13 executed programs: 17 2019/08/29 13:11:18 executed programs: 23 2019/08/29 13:11:23 executed programs: 29 2019/08/29 13:11:28 executed programs: 35 2019/08/29 13:11:33 executed programs: 41 2019/08/29 13:11:38 executed programs: 47 2019/08/29 13:11:44 executed programs: 53 2019/08/29 13:11:49 executed programs: 59 2019/08/29 13:11:54 executed programs: 65 2019/08/29 13:11:59 executed programs: 71 2019/08/29 13:12:04 executed programs: 77 2019/08/29 13:12:09 executed programs: 83 2019/08/29 13:12:14 executed programs: 89 2019/08/29 13:12:20 executed programs: 95 2019/08/29 13:12:25 executed programs: 101 2019/08/29 13:12:30 executed programs: 107 2019/08/29 13:12:35 executed programs: 113 2019/08/29 13:12:40 executed programs: 119 2019/08/29 13:12:45 executed programs: 125 2019/08/29 13:12:51 executed programs: 131 2019/08/29 13:12:56 executed programs: 137 2019/08/29 13:13:01 executed programs: 143 2019/08/29 13:13:06 executed programs: 149 2019/08/29 13:13:11 executed programs: 155 2019/08/29 13:13:16 executed programs: 161 2019/08/29 13:13:21 executed programs: 167 2019/08/29 13:13:27 executed programs: 173 2019/08/29 13:13:32 executed programs: 179 2019/08/29 13:13:37 executed programs: 185 2019/08/29 13:13:42 executed programs: 191 2019/08/29 13:13:47 executed programs: 197 2019/08/29 13:13:52 executed programs: 203 2019/08/29 13:13:58 executed programs: 209 2019/08/29 13:14:03 executed programs: 215 2019/08/29 13:14:08 executed programs: 221 2019/08/29 13:14:13 executed programs: 227 2019/08/29 13:14:18 executed programs: 233 2019/08/29 13:14:23 executed programs: 239 2019/08/29 13:14:28 executed programs: 245 2019/08/29 13:14:34 executed programs: 251 2019/08/29 13:14:39 executed programs: 257 2019/08/29 13:14:44 executed programs: 263 2019/08/29 13:14:49 executed programs: 269 2019/08/29 13:14:54 executed programs: 275 2019/08/29 13:14:59 executed programs: 281 2019/08/29 13:15:04 executed programs: 287 2019/08/29 13:15:10 executed programs: 293 2019/08/29 13:15:15 executed programs: 299 2019/08/29 13:15:20 executed programs: 305 2019/08/29 13:15:25 executed programs: 311 2019/08/29 13:15:30 executed programs: 317 [ 1346.187961] audit: type=1400 audit(1567084621.354:39): avc: denied { map } for pid=9749 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1404.762538] INFO: task syz-executor.0:9746 blocked for more than 140 seconds. [ 1404.770059] Not tainted 4.19.69 #43 [ 1404.774314] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1404.782324] syz-executor.0 D27912 9746 7499 0x00000004 [ 1404.788019] Call Trace: [ 1404.790721] __schedule+0x866/0x1dc0 [ 1404.794571] ? finish_task_switch+0x146/0x780 [ 1404.799083] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1404.804184] ? mark_held_locks+0x100/0x100 [ 1404.808440] schedule+0x92/0x1c0 [ 1404.811801] schedule_timeout+0x8c8/0xfc0 [ 1404.816041] ? wait_for_completion+0x294/0x440 [ 1404.820676] ? find_held_lock+0x35/0x130 [ 1404.824918] ? usleep_range+0x170/0x170 [ 1404.828906] ? _raw_spin_unlock_irq+0x28/0x90 [ 1404.833465] ? wait_for_completion+0x294/0x440 [ 1404.838078] ? _raw_spin_unlock_irq+0x28/0x90 [ 1404.842635] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1404.847266] ? trace_hardirqs_on+0x67/0x220 [ 1404.851731] ? kasan_check_read+0x11/0x20 [ 1404.855944] wait_for_completion+0x29c/0x440 [ 1404.860603] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 1404.866451] ? preempt_schedule_common+0x4f/0xe0 [ 1404.871226] ? wake_up_q+0x100/0x100 [ 1404.875080] ? ___preempt_schedule+0x16/0x18 [ 1404.879539] __flush_work+0x49f/0x870 [ 1404.883391] ? insert_work+0x3a0/0x3a0 [ 1404.887287] ? __radix_tree_lookup+0x219/0x380 [ 1404.891875] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 1404.897067] ? __cancel_work_timer+0xc4/0x520 [ 1404.901576] ? __cancel_work_timer+0x1d3/0x520 [ 1404.906207] ? cancel_work_sync+0x18/0x20 [ 1404.910354] ? __cancel_work_timer+0x1d3/0x520 [ 1404.914981] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1404.919567] ? trace_hardirqs_on+0x67/0x220 [ 1404.923968] __cancel_work_timer+0x3bf/0x520 [ 1404.928379] ? try_to_grab_pending+0x710/0x710 [ 1404.933016] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1404.938131] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1404.943354] ? p9_fd_close+0x29e/0x570 [ 1404.947257] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1404.952413] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1404.957241] ? trace_hardirqs_on+0x67/0x220 [ 1404.961566] ? kasan_check_read+0x11/0x20 [ 1404.965782] cancel_work_sync+0x18/0x20 [ 1404.969765] p9_fd_close+0x329/0x570 [ 1404.973534] p9_client_create+0x98c/0x1400 [ 1404.977890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1404.983514] ? p9_client_zc_rpc.constprop.0+0x10b0/0x10b0 [ 1404.989111] ? rcu_read_lock_sched_held+0x110/0x130 [ 1404.994199] ? __lockdep_init_map+0x10c/0x5b0 [ 1404.998704] ? lockdep_init_map+0x9/0x10 [ 1405.002879] v9fs_session_init+0x1e7/0x18c0 [ 1405.007212] ? v9fs_session_init+0x1e7/0x18c0 [ 1405.011754] ? find_held_lock+0x35/0x130 [ 1405.015977] ? fs_reclaim_acquire+0x20/0x20 [ 1405.020323] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1405.026003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1405.031637] ? v9fs_show_options+0x7e0/0x7e0 [ 1405.036221] ? v9fs_mount+0x5e/0x920 [ 1405.039947] ? rcu_read_lock_sched_held+0x110/0x130 [ 1405.045025] ? kmem_cache_alloc_trace+0x348/0x760 [ 1405.049881] ? free_pages+0x46/0x50 [ 1405.053704] ? selinux_sb_copy_data+0x319/0x4a0 [ 1405.058401] v9fs_mount+0x7d/0x920 [ 1405.061932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1405.067599] mount_fs+0xa8/0x31f [ 1405.071028] vfs_kern_mount.part.0+0x6f/0x410 [ 1405.075604] do_mount+0x53e/0x2bc0 [ 1405.079155] ? copy_mount_string+0x40/0x40 [ 1405.083450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1405.088991] ? copy_mount_options+0x280/0x3a0 [ 1405.093625] ksys_mount+0xdb/0x150 [ 1405.097176] __x64_sys_mount+0xbe/0x150 [ 1405.101188] do_syscall_64+0xfd/0x620 [ 1405.105052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1405.110301] RIP: 0033:0x459879 [ 1405.113565] Code: 48 83 ec 28 48 89 6c 24 20 48 8d 6c 24 20 31 c0 48 8b 4c 24 38 eb 2d 48 89 44 24 18 48 8d 14 40 48 8b 5c 24 30 48 8d 14 d3 48 <89> 14 24 48 89 4c 24 08 e8 aa de ff ff 48 8b 4c 24 10 48 8b 44 24 [ 1405.132566] RSP: 002b:00007f016a4d7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1405.140280] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 1405.147608] RDX: 0000000020000140 RSI: 0000000020000000 RDI: 0000000000000000 [ 1405.154945] RBP: 000000000075c118 R08: 0000000020000480 R09: 0000000000000000 [ 1405.162208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f016a4d86d4 [ 1405.169542] R13: 00000000004c5e2f R14: 00000000004da930 R15: 00000000ffffffff [ 1405.176934] [ 1405.176934] Showing all locks held in the system: [ 1405.183319] 1 lock held by khungtaskd/1037: [ 1405.187635] #0: 00000000ebe80c88 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1405.196362] 1 lock held by rsyslogd/7331: [ 1405.200625] #0: 000000001c963945 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1405.208594] 2 locks held by getty/7453: [ 1405.212590] #0: 0000000077e96566 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.220831] #1: 000000009ffb5abc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.229817] 2 locks held by getty/7454: [ 1405.233820] #0: 00000000ea3b6ae0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.242349] #1: 00000000ab2f9a12 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.251237] 2 locks held by getty/7455: [ 1405.255271] #0: 0000000076f655cb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.263696] #1: 00000000545def72 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.272632] 2 locks held by getty/7456: [ 1405.276600] #0: 000000004d5637fe (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.285061] #1: 000000001609fae9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.293995] 2 locks held by getty/7457: [ 1405.297952] #0: 00000000b1d2b2ba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.306412] #1: 00000000c7e06395 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.315384] 2 locks held by getty/7458: [ 1405.319450] #0: 0000000091cad16c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.327895] #1: 00000000fef30326 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.336970] 2 locks held by getty/7459: [ 1405.340926] #0: 000000004e2bd4c6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1405.349321] #1: 000000005925f7f4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1405.358280] 2 locks held by kworker/0:0/7501: [ 1405.362850] #0: 00000000f8910056 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 [ 1405.372171] #1: 0000000005d31f3b ((work_completion)(&m->wq)){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1405.381747] [ 1405.383401] ============================================= [ 1405.383401] [ 1405.390520] NMI backtrace for cpu 0 [ 1405.394203] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.69 #43 [ 1405.400777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.410167] Call Trace: [ 1405.412817] dump_stack+0x172/0x1f0 [ 1405.416443] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1405.420999] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 1405.426051] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 1405.431322] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1405.436555] watchdog+0x9df/0xee0 [ 1405.440010] kthread+0x354/0x420 [ 1405.443424] ? reset_hung_task_detector+0x30/0x30 [ 1405.448262] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1405.453800] ret_from_fork+0x24/0x30 [ 1405.457648] Sending NMI from CPU 0 to CPUs 1: [ 1405.462238] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 1405.463187] Kernel panic - not syncing: hung_task: blocked tasks [ 1405.476545] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.69 #43 [ 1405.483119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.492460] Call Trace: [ 1405.495144] dump_stack+0x172/0x1f0 [ 1405.498877] panic+0x263/0x507 [ 1405.502062] ? __warn_printk+0xf3/0xf3 [ 1405.505988] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 1405.511054] ? ___preempt_schedule+0x16/0x18 [ 1405.515462] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1405.520901] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 1405.526341] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 1405.531795] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1405.537247] watchdog+0x9f0/0xee0 [ 1405.540726] kthread+0x354/0x420 [ 1405.544135] ? reset_hung_task_detector+0x30/0x30 [ 1405.548984] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1405.554611] ret_from_fork+0x24/0x30 [ 1405.559705] Kernel Offset: disabled [ 1405.563339] Rebooting in 86400 seconds..