INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 717.069618] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. [ 722.804199] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 722.888318] audit: type=1400 audit(1564267470.369:7): avc: denied { map } for pid=1889 comm="syz-executor701" path="/root/syz-executor701966872" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 1001.430121] INFO: task syz-executor701:1890 blocked for more than 140 seconds. [ 1001.437936] Not tainted 4.14.134+ #22 [ 1001.442858] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.450989] syz-executor701 D28592 1890 1889 0x00000004 [ 1001.456610] Call Trace: [ 1001.459301] ? __schedule+0x88c/0x1f80 [ 1001.463669] ? hrtimer_try_to_cancel+0x7a/0x560 [ 1001.468370] ? __sched_text_start+0x8/0x8 [ 1001.472957] ? mark_held_locks+0xa6/0xf0 [ 1001.477173] ? rwsem_down_read_failed+0x22a/0x3c0 [ 1001.482365] schedule+0x92/0x1c0 [ 1001.485757] rwsem_down_read_failed+0x22a/0x3c0 [ 1001.490715] ? rt_mutex_futex_unlock+0xe0/0xe0 [ 1001.495366] ? free_object+0xe4/0x240 [ 1001.499166] ? hrtimer_nanosleep+0x21e/0x480 [ 1001.503867] call_rwsem_down_read_failed+0x14/0x30 [ 1001.508830] down_read+0x45/0xa0 [ 1001.512632] ? __do_page_fault+0x8a4/0xbb0 [ 1001.517054] __do_page_fault+0x8a4/0xbb0 [ 1001.521538] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 1001.538987] ? bad_area_access_error+0x340/0x340 [ 1001.544118] ? page_fault+0x2c/0x50 [ 1001.547890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1001.553091] ? page_fault+0x2c/0x50 [ 1001.556718] page_fault+0x42/0x50 [ 1001.560441] RIP: 6e0320:0x2d [ 1001.563450] RSP: 0001:00007ffc56d54710 EFLAGS: 00000001 [ 1001.563475] INFO: task syz-executor701:1891 blocked for more than 140 seconds. [ 1001.576484] Not tainted 4.14.134+ #22 [ 1001.580853] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.588822] syz-executor701 D28648 1891 1889 0x80000004 [ 1001.594988] Call Trace: [ 1001.597583] ? __schedule+0x88c/0x1f80 [ 1001.601685] ? __sched_text_start+0x8/0x8 [ 1001.606014] ? mark_held_locks+0xa6/0xf0 [ 1001.610528] ? rwsem_down_read_failed+0x22a/0x3c0 [ 1001.615450] schedule+0x92/0x1c0 [ 1001.618820] rwsem_down_read_failed+0x22a/0x3c0 [ 1001.623828] ? rt_mutex_futex_unlock+0xe0/0xe0 [ 1001.628476] ? __might_fault+0x104/0x1b0 [ 1001.632952] ? SyS_futex+0x1c5/0x2c3 [ 1001.636928] ? SyS_futex+0x1cf/0x2c3 [ 1001.640995] ? do_futex+0x1980/0x1980 [ 1001.644857] call_rwsem_down_read_failed+0x14/0x30 [ 1001.649838] down_read+0x45/0xa0 [ 1001.653680] ? do_exit+0x575/0x2a20 [ 1001.657492] do_exit+0x575/0x2a20 [ 1001.661289] ? futex_wake+0x15b/0x440 [ 1001.665573] ? mm_update_next_owner+0x610/0x610 [ 1001.670619] ? get_signal+0x334/0x1cc0 [ 1001.674496] ? lock_downgrade+0x5d0/0x5d0 [ 1001.678624] ? lock_acquire+0x12b/0x360 [ 1001.682951] ? get_signal+0x1e7/0x1cc0 [ 1001.686879] ? do_group_exit+0x100/0x2e0 [ 1001.691279] ? get_signal+0x39f/0x1cc0 [ 1001.695218] ? SyS_mmap_pgoff+0x1b0/0x1b0 [ 1001.699431] ? do_signal+0x96/0x15d0 [ 1001.703520] ? perf_event_set_output+0x470/0x470 [ 1001.708282] ? setup_sigcontext+0x810/0x810 [ 1001.712938] ? do_vfs_ioctl+0xabe/0x1040 [ 1001.717009] ? perf_event_set_output+0x470/0x470 [ 1001.722042] ? do_vfs_ioctl+0xfc/0x1040 [ 1001.726086] ? selinux_file_ioctl+0x116/0x590 [ 1001.730854] ? ioctl_preallocate+0x1e0/0x1e0 [ 1001.735459] ? selinux_socket_sock_rcv_skb+0x610/0x610 [ 1001.740999] ? lock_downgrade+0x5d0/0x5d0 [ 1001.745147] ? lock_acquire+0x12b/0x360 [ 1001.749124] ? SyS_futex+0x1c5/0x2c3 [ 1001.753181] ? SyS_futex+0x1cf/0x2c3 [ 1001.756899] ? do_futex+0x1980/0x1980 [ 1001.760927] ? exit_to_usermode_loop+0xcd/0x160 [ 1001.765764] ? exit_to_usermode_loop+0x11d/0x160 [ 1001.770956] ? do_syscall_64+0x3a3/0x520 [ 1001.775040] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.780723] [ 1001.780723] Showing all locks held in the system: [ 1001.787038] 1 lock held by khungtaskd/23: [ 1001.791624] #0: (tasklist_lock){.+.+}, at: [< (ptrval)>] debug_show_all_locks+0x7c/0x21a [ 1001.800731] 2 locks held by getty/1760: [ 1001.804686] #0: (&tty->ldisc_sem){++++}, at: [< (ptrval)>] tty_ldisc_ref_wait+0x22/0x80 [ 1001.813793] #1: (&ldata->atomic_read_lock){+.+.}, at: [< (ptrval)>] n_tty_read+0x1f7/0x1700 [ 1001.823149] 1 lock held by syz-executor701/1890: [ 1001.827896] #0: (&mm->mmap_sem){++++}, at: [< (ptrval)>] __do_page_fault+0x8a4/0xbb0 [ 1001.836631] 1 lock held by syz-executor701/1891: [ 1001.841397] #0: (&mm->mmap_sem){++++}, at: [< (ptrval)>] do_exit+0x575/0x2a20 [ 1001.849450] [ 1001.851082] ============================================= [ 1001.851082] [ 1001.859322] NMI backtrace for cpu 1 [ 1001.863014] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.134+ #22 [ 1001.869577] Call Trace: [ 1001.872208] dump_stack+0xca/0x134 [ 1001.875754] ? irq_force_complete_move+0x2c1/0x2e5 [ 1001.880661] nmi_cpu_backtrace.cold+0x47/0x86 [ 1001.885136] ? irq_force_complete_move.cold+0x7b/0x7b [ 1001.890322] ? nmi_trigger_cpumask_backtrace+0x119/0x147 [ 1001.895831] ? watchdog+0x629/0xbe0 [ 1001.899447] ? reset_hung_task_detector+0x30/0x30 [ 1001.904427] ? kthread+0x31f/0x430 [ 1001.907966] ? kthread_create_on_node+0xf0/0xf0 [ 1001.912643] ? ret_from_fork+0x3a/0x50 [ 1001.916611] Sending NMI from CPU 1 to CPUs 0: [ 1001.921563] NMI backtrace for cpu 0 [ 1001.921566] CPU: 0 PID: 1892 Comm: syz-executor701 Not tainted 4.14.134+ #22 [ 1001.921568] task: (ptrval) task.stack: (ptrval) [ 1001.921569] RIP: 0010:mark_lock+0xc/0xfc0 [ 1001.921571] RSP: 0018:ffff8881ca007880 EFLAGS: 00000046 [ 1001.921575] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1001.921577] RDX: 0000000000000002 RSI: ffff8881cae96658 RDI: ffff8881cae95e00 [ 1001.921579] RBP: ffff8881ca007a58 R08: 0000000000000001 R09: 0000000000000001 [ 1001.921582] R10: ffff8881cae96658 R11: 0000000000000359 R12: ffff8881cae9667a [ 1001.921584] R13: 0000000000040359 R14: ffff8881cae95e00 R15: 0000000000000000 [ 1001.921586] FS: 00007f9b20323700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 [ 1001.921588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.921590] CR2: 000000000206c000 CR3: 00000001ca606002 CR4: 00000000001606b0 [ 1001.921592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1001.921594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1001.921595] Call Trace: [ 1001.921597] __lock_acquire+0xd5e/0x42e0 [ 1001.921598] ? mark_held_locks+0xa6/0xf0 [ 1001.921600] ? finish_task_switch+0x1d9/0x660 [ 1001.921601] ? _raw_spin_unlock_irq+0x24/0x50 [ 1001.921603] ? trace_hardirqs_on+0x10/0x10 [ 1001.921604] ? trace_hardirqs_on_caller+0x37b/0x540 [ 1001.921606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1001.921607] ? retint_kernel+0x2d/0x2d [ 1001.921609] ? lock_acquire+0x12b/0x360 [ 1001.921610] ? perf_mmap+0x50d/0x1480 [ 1001.921612] ? perf_mmap+0x50d/0x1480 [ 1001.921613] ? __mutex_lock+0xf7/0x13e0 [ 1001.921614] ? perf_mmap+0x50d/0x1480 [ 1001.921616] ? perf_mmap+0x50d/0x1480 [ 1001.921617] ? lock_downgrade+0x5d0/0x5d0 [ 1001.921618] ? perf_mmap+0x573/0x1480 [ 1001.921620] ? perf_mmap+0x671/0x1480 [ 1001.921621] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1001.921623] ? __mutex_unlock_slowpath+0xff/0x690 [ 1001.921624] ? wait_for_completion_io+0x10/0x10 [ 1001.921626] ? perf_mmap+0x573/0x1480 [ 1001.921627] ? perf_mmap+0x50d/0x1480 [ 1001.921628] ? perf_mmap+0x50d/0x1480 [ 1001.921630] ? mmap_region+0x7d9/0xfb0 [ 1001.921631] ? do_mmap+0x548/0xb80 [ 1001.921632] ? vm_mmap_pgoff+0x177/0x1c0 [ 1001.921634] ? vma_is_stack_for_current+0xb0/0xb0 [ 1001.921635] ? __fget+0x237/0x370 [ 1001.921637] ? SyS_mmap_pgoff+0xf4/0x1b0 [ 1001.921638] ? align_vdso_addr+0x60/0x60 [ 1001.921639] ? do_syscall_64+0x19b/0x520 [ 1001.921641] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.921642] Code: 31 c0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 4c 89 ff e8 3a 0f 34 00 eb d7 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 57 <89> d1 41 89 d7 41 56 49 89 fe 41 55 4c 8d 6e 20 4c 89 ea 41 54 [ 1001.923215] Kernel panic - not syncing: hung_task: blocked tasks [ 1002.182135] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.134+ #22 [ 1002.188692] Call Trace: [ 1002.191269] dump_stack+0xca/0x134 [ 1002.194929] panic+0x1ea/0x3d3 [ 1002.198111] ? add_taint.cold+0x16/0x16 [ 1002.202128] ? irq_force_complete_move.cold+0x7b/0x7b [ 1002.207311] ? ___preempt_schedule+0x16/0x18 [ 1002.211709] watchdog+0x63a/0xbe0 [ 1002.215280] ? reset_hung_task_detector+0x30/0x30 [ 1002.220113] kthread+0x31f/0x430 [ 1002.223478] ? kthread_create_on_node+0xf0/0xf0 [ 1002.228196] ret_from_fork+0x3a/0x50 [ 1002.232345] Kernel Offset: 0x1a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1002.243334] Rebooting in 86400 seconds..