[....] Starting enhanced syslogd: rsyslogd[ 17.428344] audit: type=1400 audit(1517885253.649:5): avc: denied { syslog } for pid=4012 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.574118] audit: type=1400 audit(1517885259.794:6): avc: denied { map } for pid=4152 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program [ 449.314986] audit: type=1400 audit(1517885685.535:7): avc: denied { map } for pid=4168 comm="syzkaller726993" path="/root/syzkaller726993918" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 615.391124] INFO: task syzkaller726993:4168 blocked for more than 120 seconds. [ 615.398663] Not tainted 4.15.0+ #209 [ 615.402915] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.410898] syzkaller726993 D22288 4168 4166 0x20020000 [ 615.416600] Call Trace: [ 615.419271] __schedule+0x8eb/0x2060 [ 615.423060] ? __sched_text_start+0x8/0x8 [ 615.427255] ? prepare_to_wait_exclusive+0x192/0x530 [ 615.432379] ? check_noncircular+0x20/0x20 [ 615.436631] ? lock_release+0xa40/0xa40 [ 615.440618] ? __mutex_lock+0x16f/0x1a80 [ 615.444712] ? nf_sockopt_find.constprop.0+0x2d/0x220 [ 615.449940] ? mark_held_locks+0xaf/0x100 [ 615.454100] ? print_irqtrace_events+0x270/0x270 [ 615.458900] schedule+0xf5/0x430 [ 615.462291] ? lock_downgrade+0x980/0x980 [ 615.466461] ? __schedule+0x2060/0x2060 [ 615.470455] ? mark_held_locks+0xaf/0x100 [ 615.474621] ? __local_bh_enable_ip+0x121/0x230 [ 615.479309] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 615.484373] ? __lock_sock+0x1d7/0x2f0 [ 615.488289] ? trace_hardirqs_on+0xd/0x10 [ 615.492451] ? __local_bh_enable_ip+0x121/0x230 [ 615.497139] __lock_sock+0x1dc/0x2f0 [ 615.500880] ? proto_unregister+0x5e0/0x5e0 [ 615.505237] ? prepare_to_wait+0x4d0/0x4d0 [ 615.509491] ? lock_sock_nested+0x44/0x110 [ 615.513744] lock_sock_nested+0xf3/0x110 [ 615.517862] ipv6_getorigdst+0x1dd/0x990 [ 615.521955] ? lock_sock_nested+0xa3/0x110 [ 615.526236] ? compat_ipv6_getsockopt+0x1f1/0x390 [ 615.531093] ? ipv6_invert_tuple+0x200/0x200 [ 615.535606] compat_nf_getsockopt+0xfd/0x130 [ 615.540066] ? compat_nf_getsockopt+0xfd/0x130 [ 615.544667] compat_ipv6_getsockopt+0x20b/0x390 [ 615.549363] ? ipv6_getsockopt+0x2e0/0x2e0 [ 615.553623] compat_udpv6_getsockopt+0x45/0x80 [ 615.558226] compat_sock_common_getsockopt+0xb2/0x140 [ 615.563441] ? udpv6_getsockopt+0x80/0x80 [ 615.567649] compat_SyS_getsockopt+0x182/0x420 [ 615.572248] ? sock_common_getsockopt+0xd0/0xd0 [ 615.577166] ? compat_SyS_setsockopt+0x410/0x410 [ 615.581944] ? do_fast_syscall_32+0x156/0xfa1 [ 615.586457] ? compat_SyS_setsockopt+0x410/0x410 [ 615.591232] do_fast_syscall_32+0x3ee/0xfa1 [ 615.595574] ? do_int80_syscall_32+0x9d0/0x9d0 [ 615.600174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 615.604942] ? syscall_return_slowpath+0x550/0x550 [ 615.609885] ? syscall_return_slowpath+0x2ac/0x550 [ 615.614832] ? prepare_exit_to_usermode+0x350/0x350 [ 615.619872] ? retint_user+0x18/0x18 [ 615.623605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.628527] entry_SYSENTER_compat+0x54/0x63 [ 615.632956] RIP: 0023:0xf7fd3c79 [ 615.636331] RSP: 002b:00000000ffa6a42c EFLAGS: 00000282 ORIG_RAX: 000000000000016d [ 615.644053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 615.651348] RDX: 0000000000000050 RSI: 0000000020028000 RDI: 000000002000d000 [ 615.658631] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 615.665915] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 615.673215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.680533] [ 615.680533] Showing all locks held in the system: [ 615.686875] 2 locks held by khungtaskd/757: [ 615.691265] #0: (rcu_read_lock){....}, at: [<00000000559bda5b>] watchdog+0x1c5/0xd60 [ 615.699346] #1: (tasklist_lock){.+.+}, at: [<00000000f32840fe>] debug_show_all_locks+0xd3/0x3d0 [ 615.708397] 2 locks held by getty/4137: [ 615.712394] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.721085] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.730427] 2 locks held by getty/4138: [ 615.734411] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.743095] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.752417] 2 locks held by getty/4139: [ 615.756391] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.765086] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.774378] 2 locks held by getty/4140: [ 615.778362] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.787054] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.796354] 2 locks held by getty/4141: [ 615.800326] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.809040] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.818338] 2 locks held by getty/4142: [ 615.822323] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.831031] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.840326] 2 locks held by getty/4143: [ 615.844302] #0: (&tty->ldisc_sem){++++}, at: [<000000006495c1b9>] ldsem_down_read+0x37/0x40 [ 615.852987] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000b266d8bb>] n_tty_read+0x2ef/0x1a00 [ 615.862307] 1 lock held by syzkaller726993/4168: [ 615.867071] #0: (sk_lock-AF_INET6){+.+.}, at: [<00000000ac15f9b4>] compat_ipv6_getsockopt+0x1f1/0x390 [ 615.876624] [ 615.878257] ============================================= [ 615.878257] [ 615.885278] NMI backtrace for cpu 1 [ 615.888915] CPU: 1 PID: 757 Comm: khungtaskd Not tainted 4.15.0+ #209 [ 615.895467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.904793] Call Trace: [ 615.907356] dump_stack+0x194/0x257 [ 615.910956] ? arch_local_irq_restore+0x53/0x53 [ 615.915601] ? debug_show_all_locks+0x2f3/0x3d0 [ 615.920247] ? nmi_cpu_backtrace+0x1be/0x210 [ 615.924628] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 615.929095] nmi_cpu_backtrace+0x1d2/0x210 [ 615.933305] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 615.937768] nmi_trigger_cpumask_backtrace+0x122/0x180 [ 615.943017] arch_trigger_cpumask_backtrace+0x14/0x20 [ 615.948177] watchdog+0x90c/0xd60 [ 615.951613] ? reset_hung_task_detector+0xa0/0xa0 [ 615.956425] ? complete+0x62/0x80 [ 615.959857] ? __schedule+0x2060/0x2060 [ 615.963802] ? do_wait_intr_irq+0x3e0/0x3e0 [ 615.968092] ? __lockdep_init_map+0xe4/0x650 [ 615.972471] ? do_raw_spin_trylock+0x190/0x190 [ 615.977025] ? lockdep_init_map+0x9/0x10 [ 615.981056] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 615.986134] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 615.991121] ? trace_hardirqs_on+0xd/0x10 [ 615.995240] ? __kthread_parkme+0x175/0x240 [ 615.999534] kthread+0x33c/0x400 [ 616.002870] ? reset_hung_task_detector+0xa0/0xa0 [ 616.007679] ? kthread_stop+0x7a0/0x7a0 [ 616.011628] ret_from_fork+0x3a/0x50 [ 616.015386] Sending NMI from CPU 1 to CPUs 0: [ 616.019910] NMI backtrace for cpu 0 [ 616.019917] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.15.0+ #209 [ 616.019919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.019930] RIP: 0010:smp_reschedule_interrupt+0xa2/0x670 [ 616.019932] RSP: 0018:ffff8801db407ea0 EFLAGS: 00000046 [ 616.019936] RAX: 1ffffffff0d17434 RBX: 1ffff1003b680fd4 RCX: 0000000000000000 [ 616.019938] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff868ba1a0 [ 616.019940] RBP: ffff8801db407fe8 R08: 0000000000000000 R09: 0000000000000000 [ 616.019942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.019944] R13: ffff8801db407fc0 R14: ffffffff87268da0 R15: 0000000000000000 [ 616.019951] FS: 0000000000000000(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 616.019953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.019955] CR2: 000000002000d000 CR3: 0000000006a22004 CR4: 00000000001606f0 [ 616.019960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.019962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.019963] Call Trace: [ 616.019965] [ 616.019972] ? smp_thermal_interrupt+0x700/0x700 [ 616.019976] ? _raw_spin_lock+0x32/0x40 [ 616.019980] ? _raw_spin_unlock+0x22/0x30 [ 616.019985] ? handle_edge_irq+0x2b4/0x7c0 [ 616.019991] ? task_prio+0x40/0x40 [ 616.019999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.020005] reschedule_interrupt+0xa9/0xb0 [ 616.020007] [ 616.020010] RIP: 0010:native_safe_halt+0x6/0x10 [ 616.020011] RSP: 0018:ffffffff86a07c38 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 616.020015] RAX: dffffc0000000000 RBX: 1ffffffff0d40f8a RCX: 0000000000000000 [ 616.020017] RDX: 1ffffffff0d59278 RSI: 0000000000000001 RDI: ffffffff86ac93c0 [ 616.020018] RBP: ffffffff86a07c38 R08: 0000000000000000 R09: 0000000000000000 [ 616.020021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.020022] R13: ffffffff86a07cf0 R14: ffffffff87268da0 R15: 0000000000000000 [ 616.020030] ? trace_hardirqs_on+0xd/0x10 [ 616.020033] default_idle+0xbf/0x430 [ 616.020037] ? __sched_text_end+0x4/0x4 [ 616.020042] ? rcu_eqs_special_set+0x1e0/0x1e0 [ 616.020047] ? tsc_verify_tsc_adjust+0xf6/0x3e0 [ 616.020051] ? set_cpu_sd_state_idle+0x1dc/0x2d0 [ 616.020054] ? mark_tsc_async_resets+0x30/0x30 [ 616.020060] arch_cpu_idle+0xa/0x10 [ 616.020063] default_idle_call+0x36/0x90 [ 616.020066] do_idle+0x24a/0x3b0 [ 616.020070] cpu_startup_entry+0x104/0x120 [ 616.020073] ? cpu_in_idle+0x20/0x20 [ 616.020076] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 616.020080] ? trace_hardirqs_on+0xd/0x10 [ 616.020085] rest_init+0xed/0xf0 [ 616.020118] start_kernel+0x7f1/0x819 [ 616.020122] ? mem_encrypt_init+0xb/0xb [ 616.020125] ? early_idt_handler_common+0x3b/0x60 [ 616.020130] ? x86_family+0x32/0x40 [ 616.020135] x86_64_start_reservations+0x2a/0x2c [ 616.020139] x86_64_start_kernel+0x77/0x7a [ 616.020143] secondary_startup_64+0xa5/0xb0 [ 616.020147] Code: f2 f2 f2 f2 c7 40 14 00 f2 f2 f2 c7 40 18 f2 f2 f2 f2 c7 40 1c 00 f2 f2 f2 c7 40 20 f3 f3 f3 f3 48 89 f8 48 c1 e8 03 80 3c 10 00 <0f> 85 68 05 00 00 4c 8b 25 f1 5b eb 00 48 b8 00 00 00 00 00 fc [ 616.020910] Kernel panic - not syncing: hung_task: blocked tasks [ 616.322996] CPU: 1 PID: 757 Comm: khungtaskd Not tainted 4.15.0+ #209 [ 616.329544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.338867] Call Trace: [ 616.341435] dump_stack+0x194/0x257 [ 616.345038] ? arch_local_irq_restore+0x53/0x53 [ 616.349683] ? vsnprintf+0x1ed/0x1900 [ 616.353462] panic+0x1e4/0x41c [ 616.356628] ? refcount_error_report+0x214/0x214 [ 616.361363] ? nmi_trigger_cpumask_backtrace+0xef/0x180 [ 616.366706] watchdog+0x91d/0xd60 [ 616.370140] ? reset_hung_task_detector+0xa0/0xa0 [ 616.374972] ? complete+0x62/0x80 [ 616.378405] ? __schedule+0x2060/0x2060 [ 616.382350] ? do_wait_intr_irq+0x3e0/0x3e0 [ 616.386651] ? __lockdep_init_map+0xe4/0x650 [ 616.391031] ? do_raw_spin_trylock+0x190/0x190 [ 616.395585] ? lockdep_init_map+0x9/0x10 [ 616.399619] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 616.404693] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 616.409683] ? trace_hardirqs_on+0xd/0x10 [ 616.413805] ? __kthread_parkme+0x175/0x240 [ 616.418103] kthread+0x33c/0x400 [ 616.421443] ? reset_hung_task_detector+0xa0/0xa0 [ 616.426265] ? kthread_stop+0x7a0/0x7a0 [ 616.430213] ret_from_fork+0x3a/0x50 [ 616.434396] Dumping ftrace buffer: [ 616.438015] (ftrace buffer empty) [ 616.441699] Kernel Offset: disabled [ 616.445300] Rebooting in 86400 seconds..